
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier: cmGzClY1W+C7nViC3O0WZlh6RrJstjNa4G614fy+5Og=
Subject key identifier: 92:F9:AB:A5:93:4A:89:70:C0:81:4D:27:73:53:C3:87:05:A7:4F:CA
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial: 0B9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number: 0B8B
Signing time: Fri 12 Jun 2026 19:10:53 +0000
Manifest this update: Fri 12 Jun 2026 19:10:53 +0000
Manifest next update: Fri 19 Jun 2026 19:10:53 +0000
Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: Dy9fTeNjqdzTji3kfPWoRyNMpLT1QF0kQRh33s1eyTE=)
2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2972 (0xb9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Validity
Not Before: Jun 12 19:10:53 2026 GMT
Not After : Jun 19 19:10:53 2026 GMT
Subject: CN=6a2c59bd-744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:8c:f3:c6:5d:3e:46:5f:21:0c:b1:74:30:
dc:8a:23:32:86:73:92:52:64:73:ba:22:f3:7a:61:
b1:c4:5a:6a:64:1c:ee:a8:eb:2c:3e:8e:49:9a:52:
26:76:08:cc:06:c2:8c:c8:4f:78:c2:ca:92:43:da:
8a:48:cd:cf:17:76:d1:6a:a7:55:ec:94:af:dc:33:
c6:35:4a:e5:0a:f1:f3:7b:d5:b3:99:10:ba:98:24:
a0:e8:86:d0:3a:54:17:78:d7:90:36:40:72:0e:2f:
e4:53:33:df:f0:43:e9:61:06:62:af:e8:b7:50:dc:
54:4f:e8:c4:41:db:1f:63:a2:d3:7a:06:63:bd:18:
cf:39:f5:f4:16:1e:67:3b:4b:81:5d:82:b2:3b:65:
b9:af:90:8d:29:3a:24:2c:bf:ae:72:99:ad:1b:c3:
41:1d:7b:2f:05:98:7d:3f:d3:97:87:57:57:40:e0:
13:ff:05:02:55:a6:ca:f8:5f:c1:d6:64:2d:b7:83:
b9:97:ec:6e:79:4f:58:c2:bb:c5:cf:22:f3:90:e5:
eb:6d:d2:3a:97:4b:b8:87:d7:79:b3:be:a1:08:7b:
b1:f5:df:a9:fa:ec:79:cb:07:e5:7c:64:eb:b3:86:
c7:29:78:f5:de:0e:bf:e9:d3:76:f8:5c:9e:b4:e4:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:AB:A5:93:4A:89:70:C0:81:4D:27:73:53:C3:87:05:A7:4F:CA
X509v3 Authority Key Identifier:
keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:03:2f:85:00:b1:15:b2:93:e7:ee:3b:54:33:a6:f5:2e:ec:
d2:94:02:42:d3:2c:50:5d:bc:6b:d9:1e:a8:e6:c3:35:78:ad:
24:10:60:4d:8b:a6:ec:63:88:3a:7e:ea:c7:8b:75:c0:ee:c4:
1a:c5:d1:e3:ba:73:8f:4e:3f:64:8b:80:6d:8c:09:64:2e:65:
a6:30:a0:4a:5f:0f:1b:3d:a2:23:f9:e1:5d:9e:6b:12:c6:56:
bc:c3:12:cd:99:78:8a:22:2d:f7:e9:88:a7:49:c4:22:3c:7d:
47:62:8e:a1:4b:0f:53:a0:45:a4:01:e5:f2:5a:01:12:c1:1c:
29:26:da:0e:8c:5f:5a:b4:32:57:cf:da:29:c7:8b:03:db:74:
9f:f3:94:ca:c3:84:8b:4e:61:ae:c8:74:5a:cb:f0:3d:48:27:
30:1c:86:ef:a7:f5:07:ab:53:d4:6c:53:bd:dd:e6:78:ec:71:
c4:39:1f:46:02:c5:2d:57:33:3e:f2:da:38:31:92:df:15:2b:
31:2e:d9:04:f1:50:32:c6:da:8c:8d:9f:63:e3:f6:28:ab:39:
73:27:59:43:95:4d:87:5d:84:c1:f9:1a:bd:6d:99:ec:31:d8:
36:bc:ea:b1:c4:60:13:a0:5c:1e:e8:90:38:24:61:29:46:a4:
40:1b:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:21 2026 by rpki-client