
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json)
Hash identifier: VBdeP/80Z9JLtsmucACwdRkqkHClYMkmmjvWHXBti7s=
Subject key identifier: FA:BA:D3:7D:D9:93:A5:98:88:CF:AA:23:21:07:FB:01:15:EB:AA:4C
Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Certificate serial: 02F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
Manifest number: 02E7
Signing time: Sat 13 Jun 2026 01:19:13 +0000
Manifest this update: Sat 13 Jun 2026 01:19:13 +0000
Manifest next update: Sat 20 Jun 2026 01:19:13 +0000
Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: eclGB71+/qsC3BqRsqpaApmRUb/tJ08OzrHVKsb908M=)
2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: 8pnF8r5Xhn3OD85TXM+iL6QbA+jKGQalG5vIFE6zqm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 754 (0x2f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Validity
Not Before: Jun 13 01:19:13 2026 GMT
Not After : Jun 20 01:19:13 2026 GMT
Subject: CN=6a2cb011-5e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:c9:f9:11:3f:2e:db:25:d3:13:c8:0c:9b:
96:65:06:cc:6e:88:5c:62:51:e9:f8:ab:e2:bc:03:
7c:51:3d:ee:09:bf:02:03:4f:bc:f3:f2:0c:48:31:
4e:be:a1:a8:a5:6f:21:99:bc:1c:e1:13:b7:b0:5b:
6e:2a:10:88:6a:21:cc:d1:ba:e4:81:c6:c5:9c:05:
f4:2f:c1:93:01:b7:72:9f:36:c9:a0:45:05:45:a3:
e3:bd:67:d5:98:4e:d4:2d:7a:99:34:77:44:5e:c3:
47:a7:ef:8c:52:36:d1:18:9c:c5:ff:d2:6d:f5:7f:
3e:92:5c:03:cc:c3:4e:78:4c:c3:5e:d1:63:82:97:
8e:80:b9:ee:0e:4f:37:d4:68:4a:31:56:4e:c6:67:
66:54:a6:18:ef:0b:5f:db:cb:68:ac:81:61:f3:48:
99:f8:4f:f8:69:ee:4e:99:f1:d0:ec:ab:db:5f:aa:
4f:1d:c4:3f:9a:33:d0:71:a3:82:33:30:a1:28:57:
21:6b:20:d8:c3:86:a0:d8:fa:65:81:0b:22:f5:8e:
9f:24:ee:9d:5d:3d:21:23:0d:57:a5:c5:a7:5c:39:
29:dd:ff:28:c8:8b:4b:c2:c4:0c:56:61:06:7c:e9:
9e:a9:89:b7:13:02:b0:5a:6b:2f:3c:6e:9a:16:12:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BA:D3:7D:D9:93:A5:98:88:CF:AA:23:21:07:FB:01:15:EB:AA:4C
X509v3 Authority Key Identifier:
keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:92:ab:12:6e:7b:31:d0:35:1d:1f:a1:11:4f:b5:9c:62:af:
45:8e:88:ea:2b:19:e4:87:80:33:7e:95:a1:51:0f:71:0f:e9:
7c:e4:d8:b8:27:e4:22:8d:75:0a:8a:40:67:14:89:e4:9f:ba:
3c:06:b1:7d:b9:65:e4:e4:7d:9f:f5:bf:61:4d:bf:6c:bf:0f:
f0:8f:96:28:ca:87:91:74:53:c7:6e:71:4e:d4:4e:c4:1f:91:
10:d9:fe:07:2a:92:ee:8d:85:98:b1:1a:12:c4:0a:c1:8c:1a:
b4:0b:37:17:ac:7e:5b:07:0f:69:58:02:39:88:35:ff:29:8d:
a9:fa:59:36:73:52:b5:91:60:d4:1b:ff:03:e5:d6:b9:05:b3:
ff:e6:9c:17:c0:b8:73:d0:bc:ce:1d:d0:ef:e8:e4:e4:bb:6e:
49:39:6d:cd:fd:7d:b1:79:34:00:05:42:01:41:2f:e0:10:ff:
32:1c:2f:02:df:0e:3b:d5:85:6a:61:36:64:e8:82:09:d9:7f:
85:2a:3f:de:50:ac:b8:72:b6:ce:06:88:f2:86:60:fd:c3:0d:
29:62:5e:d1:5a:24:69:7d:7e:0f:ec:23:a8:a7:e7:1e:54:5d:
8f:f3:c2:24:0a:d6:59:b8:3f:ef:bb:2b:60:1b:c5:d0:52:b4:
fc:57:c1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:31:43 2026 by rpki-client