
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json)
Hash identifier: QtXoGUCZs+Jpdjj45JExILAZ9EShNCaHH5grLPYG5FE=
Subject key identifier: 52:86:C0:7F:90:5E:10:20:C3:A2:BE:13:47:97:C7:2B:8A:4F:D1:7B
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial: 0A07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
Manifest number: 16E1
Signing time: Fri 12 Jun 2026 18:16:31 +0000
Manifest this update: Fri 12 Jun 2026 18:16:31 +0000
Manifest next update: Fri 19 Jun 2026 18:16:31 +0000
Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: 4THPHDvlFqgys2HhM/TFbGfjSo+NBZ5pwPMy/4OmiVI=)
2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=)
3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=)
4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2567 (0xa07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Validity
Not Before: Jun 12 18:16:31 2026 GMT
Not After : Jun 19 18:16:31 2026 GMT
Subject: CN=6a2c4cff-eeb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:e3:e6:e1:a6:30:b0:01:de:6e:41:bc:9f:
5f:f4:43:03:71:cf:b0:f5:23:b5:3d:35:a0:ba:00:
47:31:6d:21:35:b2:ff:a3:24:00:42:e4:1b:49:ed:
36:06:09:9b:b9:a9:86:07:81:d1:2d:8a:3c:8f:9a:
89:2f:36:0c:90:77:90:b6:da:20:88:42:2d:ff:99:
82:db:03:2f:fe:95:ae:c3:ab:01:8d:07:41:0c:73:
8e:57:80:df:f0:2b:4c:36:f2:53:8e:92:82:ce:46:
2f:3c:5e:7e:0f:6c:e1:7b:7c:c6:be:24:82:2f:49:
bc:03:b2:e4:ab:94:d7:52:78:63:7e:af:63:26:89:
8f:ec:23:ab:b0:93:cb:6b:a6:70:a5:0b:bd:49:eb:
2d:d0:85:fd:0e:6c:9a:2a:de:ba:6e:78:7a:3f:76:
27:f6:de:19:ab:95:cf:ca:75:1e:b7:37:c9:bd:ba:
cb:79:42:38:2d:8d:ad:eb:38:68:9a:e7:82:89:8f:
0e:fb:54:e2:fe:51:50:ed:01:bd:d5:e8:30:9e:ab:
6f:d1:bd:10:7d:e1:32:c9:fb:62:c9:01:ba:2e:1a:
6c:51:c0:54:7c:ed:55:a3:31:8e:41:14:9b:a0:5a:
a5:8c:56:68:a4:30:8a:b3:03:d4:59:cd:da:8c:4c:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:C0:7F:90:5E:10:20:C3:A2:BE:13:47:97:C7:2B:8A:4F:D1:7B
X509v3 Authority Key Identifier:
keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:80:5c:85:8c:e8:3b:69:ab:68:59:4f:15:36:39:44:92:8f:
88:0a:20:2f:7f:51:65:3c:5c:32:53:9b:c2:da:5f:72:34:2e:
d9:4b:ec:33:33:45:fa:8e:40:11:9d:69:c0:0a:53:73:98:00:
8e:6b:d1:81:05:37:eb:4e:26:1f:22:02:69:c2:3d:cf:54:80:
21:75:cd:68:f1:6a:45:45:c8:f3:a6:3a:d6:a6:f1:4d:cb:34:
21:7c:61:f4:7e:31:37:b1:34:a9:f4:de:38:9f:74:29:5c:fd:
5b:a8:d5:12:b2:aa:de:dc:7b:1f:78:1a:9f:f2:7e:a5:c2:57:
3c:49:25:c8:1f:f0:9c:34:92:f1:aa:43:e4:b3:b7:4b:3e:3b:
c4:44:05:3f:64:72:cd:9f:2b:c6:82:46:03:c4:2c:0f:8b:b0:
d8:34:a9:93:d0:4c:cd:97:1a:95:80:c9:68:d7:e7:c6:dc:8f:
6f:d2:ac:9c:17:1c:a3:77:36:74:31:99:e2:df:af:bf:e9:8e:
6c:7c:39:38:36:bf:13:ad:ec:2a:cd:0d:71:39:16:7d:d4:54:
6d:a7:95:cc:bd:e1:b1:dc:10:96:34:95:4c:31:18:fc:d3:03:
c0:00:03:67:6d:aa:5a:aa:89:29:55:17:2e:6c:86:c7:d4:e7:
a1:ac:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:49 2026 by rpki-client