
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: /wCVeXwMppNgPY3dOK18xsjMibu7RXT7W+cgSZ5qyC0=
Subject key identifier: 1A:6A:CE:71:DA:DD:25:2A:52:52:75:FB:7A:ED:BC:00:AE:D9:BF:CA
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 05D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 05C0
Signing time: Fri 12 Jun 2026 23:09:10 +0000
Manifest this update: Fri 12 Jun 2026 23:09:09 +0000
Manifest next update: Fri 19 Jun 2026 23:09:09 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: I7ruhKp+okLx2NQPSZO48+EqFKIZyRh9zJ0goElLN0g=)
2: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
3: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
4: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Jun 12 23:09:09 2026 GMT
Not After : Jun 19 23:09:09 2026 GMT
Subject: CN=6a2c9196-3b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:35:b2:3f:70:d3:a2:0d:d9:c9:e5:7b:4c:
34:63:9d:46:c1:7f:8b:6b:85:d1:86:9f:e5:90:8a:
19:a3:d3:e8:46:d6:fa:fc:e6:4f:04:bf:79:9c:ad:
1c:92:58:4b:f4:82:33:ce:9c:58:c5:e7:73:10:9f:
6c:f0:a6:04:f5:a9:ba:37:4a:47:f9:23:4b:16:05:
7d:b7:5c:ce:47:db:46:8c:e3:88:21:59:76:c8:e6:
a1:d9:8a:05:e1:39:63:6b:ce:b4:08:f2:08:5e:1b:
82:91:a2:c8:ea:82:ce:66:dd:ca:3c:38:b0:8c:60:
25:7e:22:74:b9:88:8f:32:82:c0:6c:ee:ed:75:59:
7e:3c:75:cf:0c:13:f7:a5:dd:b9:56:f9:74:ab:5c:
11:5f:83:08:a4:cc:27:c0:46:b8:8e:99:b5:29:08:
1b:71:91:ed:35:ec:86:0b:aa:02:25:91:f7:f4:57:
27:2a:05:77:14:f2:6b:ca:41:12:26:d0:79:46:bb:
04:0f:bb:78:56:0a:f8:9c:4d:4c:e1:3b:14:d3:0b:
36:80:30:9f:bc:34:a7:22:6c:82:04:d6:2e:98:f2:
cb:d0:11:fd:35:55:26:69:28:fb:03:1d:41:7f:d3:
1d:77:70:19:9c:26:07:c7:18:97:15:ab:95:81:de:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6A:CE:71:DA:DD:25:2A:52:52:75:FB:7A:ED:BC:00:AE:D9:BF:CA
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9c:a1:47:ba:26:36:9b:24:bf:1b:3d:3c:69:f4:13:e6:82:
b9:80:55:19:b7:82:b5:74:d8:55:a7:42:54:0a:85:ee:6f:56:
74:6b:d6:9c:71:3f:6e:13:b6:57:f4:fd:45:e1:61:2e:f4:74:
00:37:b3:25:f4:2c:bb:26:56:ce:4d:ca:87:d7:69:b5:ea:04:
16:f2:49:82:42:5c:4d:07:e7:70:76:08:85:79:d4:4b:31:95:
98:e2:a9:5e:ec:3e:c2:a4:63:d4:a6:67:0a:f6:6a:f8:87:5d:
20:d7:f3:e3:43:95:63:02:b8:19:1e:a4:dd:74:fe:5f:b8:ce:
bd:49:2b:72:b3:db:99:bd:f7:a8:4e:95:65:72:d3:91:04:cf:
ae:fd:2f:52:89:63:6c:8d:dc:db:3d:c8:1b:a4:9e:41:82:af:
31:1c:c5:c0:92:55:65:53:b0:e5:63:c8:a9:b2:ec:eb:ce:ec:
87:47:c4:69:ba:7b:b8:c2:c9:8b:ab:df:80:d3:78:a0:be:7a:
cb:c8:a6:9d:c0:94:6b:05:8b:8b:07:df:70:a0:57:7c:63:4f:
12:08:51:4b:32:6e:ae:84:01:22:89:26:e7:98:b4:7e:4a:c2:
d3:d6:03:75:3c:94:cf:c4:87:08:f3:73:02:eb:dc:f3:33:5d:
3e:df:10:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:46:50 2026 by rpki-client