
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
File: 3qY-MQG_FZkCCkCD-hw9lkshMMA.mft (raw, json)
Hash identifier: cVivmKOtRu9pt32PKOI2AfUtENbxnjwGygucnicUpq8=
Subject key identifier: 1C:3D:EB:E4:A0:26:F8:A8:94:60:25:CC:C5:D9:9F:3E:7C:0C:55:BD
Authority key identifier: DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0
Certificate issuer: /CN=A9161857/serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
Manifest number: D6
Signing time: Sat 13 Jun 2026 06:58:51 +0000
Manifest this update: Sat 13 Jun 2026 06:58:50 +0000
Manifest next update: Sat 20 Jun 2026 06:58:50 +0000
Files and hashes: 1: 3qY-MQG_FZkCCkCD-hw9lkshMMA.crl (hash: LZSqpZrcOLxGNI2RMGpK3Zbte1ltPgyaEL3bWnhH/Z4=)
2: 375E8232C13411F0A297231CC4F9AE02.roa (hash: Rcvi6yejJNqA4Zq2UKAey1CzzI6dgFF00kMlDMOnfRU=)
3: 0148654664AE11F1AC9CD4CD9247A888.roa (hash: dAqlfUeo579kfcR3e3mwTUUjP1lSljKQQMLJkli9MDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl
rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161857, serialNumber=DEA63E3101BF1599020A4083FA1C3D964B2130C0
Validity
Not Before: Jun 13 06:58:50 2026 GMT
Not After : Jun 20 06:58:50 2026 GMT
Subject: CN=6a2cffaa-36f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:1e:79:88:ea:2e:01:ae:74:dc:9c:84:52:
07:30:f0:61:01:b4:2f:80:11:20:dd:78:c0:7a:3a:
0b:48:3a:f5:7c:e8:75:26:50:1c:51:cc:7e:48:ce:
4e:34:6e:f3:4c:f3:b0:bc:81:8b:2b:71:50:7c:bb:
d4:bd:e3:0f:57:6e:44:d6:17:3f:8b:1f:4c:ac:c4:
bb:e6:46:9d:22:8a:e8:43:fb:28:45:9c:94:f2:7a:
ea:1f:49:ab:a3:a0:eb:96:ef:19:bd:ea:6d:3f:4c:
be:b4:ee:20:d7:f2:23:5e:9a:f8:df:69:3b:3b:aa:
5b:39:c2:42:41:ad:46:2a:a1:12:4c:d2:cf:4b:0e:
e0:e6:e3:4f:64:e6:29:0b:5e:c7:f8:44:9c:72:75:
c1:b8:44:70:dd:16:59:c2:f7:7f:9e:69:d0:21:a4:
04:58:ee:73:40:06:85:97:f0:d1:a1:c5:d8:43:95:
81:26:b6:8a:f7:7a:44:f5:6f:6f:c4:f5:45:ea:2f:
82:68:72:84:69:2f:4e:e2:ec:d6:2c:00:45:a4:e3:
f6:7c:cf:7e:7d:65:3b:bf:62:27:c7:63:16:bd:ab:
a4:7a:a5:9e:0a:f1:5a:5e:17:62:a9:40:4e:9f:1d:
bb:14:6c:f2:5d:50:2b:da:1d:c3:e5:a2:2d:db:0a:
60:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:EB:E4:A0:26:F8:A8:94:60:25:CC:C5:D9:9F:3E:7C:0C:55:BD
X509v3 Authority Key Identifier:
keyid:DE:A6:3E:31:01:BF:15:99:02:0A:40:83:FA:1C:3D:96:4B:21:30:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3qY-MQG_FZkCCkCD-hw9lkshMMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/CB14BF263C9811F0AF124B38C4F9AE02/3qY-MQG_FZkCCkCD-hw9lkshMMA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5d:6a:53:52:c8:27:fe:47:aa:b5:af:e0:8b:03:8c:3d:35:
46:c6:22:03:09:bc:71:b1:e2:18:5e:84:5d:b7:30:b1:34:06:
60:8b:da:e2:3c:bb:40:13:5c:fc:3c:4e:e5:4d:e3:6d:1b:ca:
cc:90:ed:50:17:66:6b:8e:8f:da:c7:cf:f2:ed:cb:66:ce:72:
22:51:82:05:ff:7c:c2:d0:70:0c:4d:72:b6:5e:05:15:85:5f:
06:7b:49:f0:ff:a1:15:74:a3:59:7c:d2:5d:6a:3e:73:3a:86:
77:ec:3a:7e:03:9d:19:5c:9c:9d:76:ab:b9:21:e5:6d:6d:71:
9d:81:7a:fd:47:df:5c:03:d3:90:84:c7:29:8a:ce:bb:c2:d8:
a1:a9:e5:43:18:bf:7a:56:ad:ec:4d:17:58:1c:cb:5f:5c:4b:
bc:48:6c:4c:31:ec:77:53:d9:59:0a:a0:35:2b:22:14:ca:03:
97:99:57:46:c1:03:cc:d2:c2:99:61:11:7d:50:64:7f:ef:8d:
6e:33:9d:b6:ec:8e:c8:26:19:73:90:90:21:cf:e0:4f:8d:ba:
f6:51:13:0f:8c:9c:ba:61:9c:de:bb:19:15:2c:85:4c:51:55:
5b:91:0d:1e:35:87:1e:33:1d:f3:4d:39:f8:90:1a:09:57:fd:
00:ee:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:44:46 2026 by rpki-client