
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json)
Hash identifier: CqJ256eIPRtW34LFHvdweLDeh5JjfMPEhOxdO7Jzsso=
Subject key identifier: 00:BB:3A:7B:A8:1E:90:AF:98:A7:F2:B8:66:B3:4D:08:04:BA:B9:3B
Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Certificate serial: 0559
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
Manifest number: 054F
Signing time: Fri 12 Jun 2026 23:28:57 +0000
Manifest this update: Fri 12 Jun 2026 23:28:57 +0000
Manifest next update: Fri 19 Jun 2026 23:28:57 +0000
Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: 2+aZKiYrynjh1p2OQpZRSz9/eoD/5yweu/wbaADecJg=)
2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Validity
Not Before: Jun 12 23:28:57 2026 GMT
Not After : Jun 19 23:28:57 2026 GMT
Subject: CN=6a2c9639-a593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:de:49:ff:18:cd:4c:90:a9:e5:3d:e5:e1:
ec:87:70:58:2f:45:a2:b6:6d:9f:eb:62:bf:96:a3:
4b:7b:c6:bb:bb:cb:11:60:95:7d:6b:1e:28:6d:e8:
18:4a:9a:5f:9a:0a:df:29:a2:e0:d9:bd:19:95:91:
a0:8f:56:23:c1:79:43:3e:2b:ec:8a:b1:5e:2f:1c:
19:c8:d6:dc:05:ca:a2:01:e1:c1:ed:17:00:4b:a6:
f7:97:99:6a:d3:e6:84:3e:db:03:4b:d8:bb:f6:b8:
9b:3d:9e:88:6a:20:ac:b8:88:97:a2:c7:8d:31:4c:
80:26:74:89:45:ca:75:ea:79:08:7d:4f:7f:27:30:
64:6c:c5:74:16:92:70:07:ff:65:d3:77:27:a1:c3:
25:ab:29:9b:8e:f9:5e:d4:1d:fd:26:ce:e1:25:b2:
c8:35:da:65:90:f8:26:77:1c:06:06:0f:3b:26:da:
99:4d:2e:83:a9:3b:24:e9:c6:27:f7:d3:bf:6c:a5:
a0:3e:16:7b:48:1d:ef:7d:b1:80:a7:66:04:c5:42:
2b:db:c0:5d:fb:f7:e8:bb:65:bb:03:90:e0:91:a5:
88:a9:3a:23:90:12:5b:66:0f:02:0f:44:6f:bf:ab:
04:ec:5b:42:e7:66:d3:a4:5e:cb:5b:54:17:b3:cd:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BB:3A:7B:A8:1E:90:AF:98:A7:F2:B8:66:B3:4D:08:04:BA:B9:3B
X509v3 Authority Key Identifier:
keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4b:2d:c4:11:20:c0:98:95:76:3d:27:c0:37:f1:c9:87:1f:
aa:2a:66:6d:9b:9a:ac:36:10:ed:0a:9f:38:e3:02:69:38:b2:
dc:fb:71:2a:72:7a:42:c8:d5:73:93:7c:c0:f2:06:d2:dd:6d:
6c:18:50:e8:51:21:99:1c:cc:d6:58:a5:9d:43:f6:b1:68:55:
b3:e5:5f:ae:a6:60:5e:78:6c:37:da:3b:18:09:db:93:6f:c6:
da:3c:34:8b:20:71:13:ba:88:89:cc:eb:d6:65:ab:bf:72:83:
0d:fb:62:5b:67:a5:e2:6d:f0:41:21:6c:3e:d2:f9:20:6a:f1:
0b:59:86:92:5b:79:05:31:33:29:73:8a:94:e1:df:ca:a7:78:
36:ec:b5:a6:13:7a:34:dc:f6:5a:7f:39:6b:ba:bb:87:f1:84:
c5:63:be:77:4d:a9:36:3d:46:d6:90:30:92:8a:f7:79:d8:bf:
d7:22:c0:8e:e5:09:28:b9:5c:0c:b0:65:dc:37:db:98:18:ca:
36:33:d0:63:8f:56:b0:29:34:56:ce:56:a5:fa:31:31:7a:d6:
3d:c9:e1:18:6a:48:d6:d0:e5:d4:a8:3a:f4:a6:0a:9f:61:90:
b7:96:8a:23:59:37:1a:b6:e8:cc:40:c1:76:5a:fd:07:3a:63:
2f:f0:4c:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDRTMxMTAvBgNVBAUTKEFCQzZGQkE0Qjc4NDI4Mzg3OTE5MERDNzE3RTM0QjRD
RDg4MkRBMDgwHhcNMjYwNjEyMjMyODU3WhcNMjYwNjE5MjMyODU3WjAYMRYwFAYD
VQQDEw02YTJjOTYzOS1hNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAloLeSf8YzUyQqeU95eHsh3BYL0Witm2f62K/lqNLe8a7u8sRYJV9ax4obegY
SppfmgrfKaLg2b0ZlZGgj1YjwXlDPivsirFeLxwZyNbcBcqiAeHB7RcAS6b3l5lq
0+aEPtsDS9i79ribPZ6IaiCsuIiXoseNMUyAJnSJRcp16nkIfU9/JzBkbMV0FpJw
B/9l03cnocMlqymbjvle1B39Js7hJbLINdplkPgmdxwGBg87JtqZTS6DqTsk6cYn
99O/bKWgPhZ7SB3vfbGAp2YExUIr28Bd+/fou2W7A5DgkaWIqTojkBJbZg8CD0Rv
v6sE7FtC52bTpF7LW1QXs80JyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAC7Onuo
HpCvmKfyuGazTQgEurk7MB8GA1UdIwQYMBaAFKvG+6S3hCg4eRkNxxfjS0zYgtoI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNFMy81RDc4OTlGNDQw
NTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtEaDVHUTNIRi1OTFROaUMy
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy
RkQxRkYyL3E4YjdwTGVFS0RoNUdRM0hGLU5MVE5pQzJnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkNFMy81RDc4OTlGNDQwNTkxMUVDQTBBRkFBNERDNEY5QUUwMi9xOGI3cExlRUtE
aDVHUTNIRi1OTFROaUMyZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb0stxBEgwJiVdj0nwDfxyYcfqipmbZuarDYQ7QqfOOMCaTiy3PtxKnJ6QsjV
c5N8wPIG0t1tbBhQ6FEhmRzM1lilnUP2sWhVs+VfrqZgXnhsN9o7GAnbk2/G2jw0
iyBxE7qIiczr1mWrv3KDDftiW2el4m3wQSFsPtL5IGrxC1mGklt5BTEzKXOKlOHf
yqd4Nuy1phN6NNz2Wn85a7q7h/GExWO+d02pNj1G1pAwkor3edi/1yLAjuUJKLlc
DLBl3DfbmBjKNjPQY49WsCk0Vs5WpfoxMXrWPcnhGGpI1tDl1Kg69KYKn2GQt5aK
I1k3GrbozEDBdlr9BzpjL/BM8g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:14:27 2026 by rpki-client