
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: OmzzEQob6hk+1+D0v5x8VAAOVDRVh4gM3OgRMN0hKq4=
Subject key identifier: 61:BB:78:DB:68:C3:91:4D:B1:B8:B5:19:5F:0A:52:46:33:F0:0B:7D
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 05B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 05A2
Signing time: Thu 16 Apr 2026 23:06:39 +0000
Manifest this update: Thu 16 Apr 2026 23:06:39 +0000
Manifest next update: Thu 23 Apr 2026 23:06:39 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: aOiFpXQJn9CCNh9pNhKsmr3CjSaimeuTuayPoFjb7Cw=)
2: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
3: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Apr 16 23:06:39 2026 GMT
Not After : Apr 23 23:06:39 2026 GMT
Subject: CN=69e16b7f-296f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:e9:7f:83:1e:38:eb:1d:28:b2:da:ac:b5:
6a:1c:79:62:a5:52:6d:be:9e:73:18:fb:ec:ae:a3:
cf:05:63:de:87:85:1e:90:67:55:8f:55:af:7f:e1:
35:30:67:8c:2d:e3:6d:16:78:ba:d5:dc:e4:9d:27:
10:8c:71:0a:9d:f1:a9:0c:39:d2:ca:35:96:99:37:
99:3f:67:14:cc:6a:41:2f:0f:7d:e0:d1:f5:36:0e:
44:f8:87:cc:1b:80:21:ae:4c:f0:dd:f3:a2:83:b6:
0c:7f:e3:44:a7:2e:65:3d:a6:68:96:b5:82:97:9d:
db:fc:d7:38:70:ec:2f:b9:7e:d9:57:f9:9f:28:fe:
5a:50:cb:90:cc:4b:4c:ec:42:22:80:08:bc:da:16:
d5:36:5b:c1:38:e4:34:43:6a:f3:54:4a:db:30:79:
aa:79:49:be:90:1e:36:19:16:35:43:7e:34:74:14:
db:6a:07:1a:59:10:ba:7a:1e:fe:03:22:d7:dc:c6:
69:9b:cf:c3:6e:66:d3:46:70:c4:62:42:b7:d8:86:
33:83:f0:68:c4:f4:c3:7a:ff:81:1c:c8:7f:cc:6d:
95:f7:e9:8d:ce:6f:aa:ba:fe:bf:cd:af:4f:3e:89:
ce:9a:eb:50:72:e3:d2:9b:b9:08:c3:9f:31:e9:a3:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:78:DB:68:C3:91:4D:B1:B8:B5:19:5F:0A:52:46:33:F0:0B:7D
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:47:dc:d2:da:db:8a:c6:1d:0c:ef:73:9d:21:14:0e:bb:fd:
b6:55:4a:e3:0a:86:f7:0f:96:53:8c:3f:dd:cd:51:6b:30:94:
ee:07:f0:22:be:af:aa:17:35:46:4d:51:b3:4f:19:47:c5:57:
72:2e:93:42:74:02:87:8a:53:d2:cc:f3:92:88:f8:5d:a8:af:
9e:95:a4:39:b6:f1:38:f7:02:40:32:7a:d5:43:0a:ad:c3:cd:
d3:09:c2:6a:95:ee:42:fb:f7:15:d2:34:5e:74:68:70:af:d8:
28:20:c6:ec:28:ab:2f:d6:57:73:21:e1:f2:cd:46:63:a9:ea:
a1:34:95:e0:df:2a:1b:a3:aa:74:23:ee:99:57:c9:99:b3:12:
0a:15:54:00:ac:3c:9a:55:d4:9f:a1:ec:f2:ff:1d:f9:7d:25:
8c:04:b7:c9:a1:93:36:3d:9d:e8:fa:28:88:3d:25:c7:5f:b2:
94:06:a5:8a:a7:7c:04:3f:16:f3:de:3f:ed:67:3d:77:4e:29:
a8:2e:27:d6:bd:18:24:77:25:54:98:82:56:f7:f8:a5:9d:fd:
39:69:aa:2c:d0:d5:47:80:16:9d:f7:ed:a3:7e:dd:a0:64:53:
51:e9:c6:c6:14:54:a6:3d:20:df:aa:a4:2b:22:e0:a0:31:de:
c9:35:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:02 2026 by rpki-client