
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: Syx38oidCwB/pAC6bqWW/yBo05edy5OPnaB6qMvT5vE=
Subject key identifier: 4F:4E:69:C3:73:8C:2E:E4:88:86:B9:B0:1C:CA:22:01:FF:9B:7D:D2
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0DF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0DAC
Signing time: Fri 12 Jun 2026 17:59:49 +0000
Manifest this update: Fri 12 Jun 2026 17:59:49 +0000
Manifest next update: Fri 19 Jun 2026 17:59:49 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: I9x9Q29jEU2wmiXCTHlM8AuNb1IfBHHdIuVH0F/4bRU=)
2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WD74/2XgeAz/XgGtt1zWIcisMorpjdxcCpl+RUcYgd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3577 (0xdf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Jun 12 17:59:49 2026 GMT
Not After : Jun 19 17:59:49 2026 GMT
Subject: CN=6a2c4915-4ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:a9:31:78:eb:d2:e0:ce:e4:5c:04:60:09:
25:84:df:d5:13:8f:73:e1:e5:a1:7e:de:e9:bd:84:
46:82:c5:de:41:a3:f0:00:fc:87:5a:32:6c:b7:19:
26:4c:7c:aa:3f:e1:4b:92:96:2f:0f:c7:57:cb:2a:
17:c4:b5:72:77:16:ca:ee:22:57:d9:82:94:95:84:
cd:b2:f6:39:a6:f0:d5:2e:48:ad:20:91:45:11:ee:
da:80:9c:3b:f3:72:1f:85:c4:1c:3d:e8:34:55:b0:
02:56:56:ef:87:3f:3e:5e:ef:33:40:99:af:6d:a2:
1b:d5:ca:71:e3:af:71:ff:e9:f2:ff:90:d8:60:75:
df:c1:8a:5f:86:df:33:ff:ae:e3:0e:1a:e7:8b:be:
e6:ad:e2:09:e0:96:fb:5d:02:f0:39:fd:9e:60:62:
93:d4:af:7b:19:68:46:ef:a0:4f:88:f3:32:00:9c:
6b:66:f7:8d:81:32:ae:6e:93:be:33:d6:0b:17:b7:
28:69:ab:8e:59:50:57:28:71:47:79:81:8f:0a:e6:
1d:ec:2b:4b:eb:23:d0:fc:2b:ea:d9:d7:5a:7f:a3:
3f:92:1b:46:38:6f:4e:1e:ec:df:d0:cb:53:d1:87:
18:7a:90:95:36:79:3b:ac:34:64:9e:b4:08:2a:1d:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4E:69:C3:73:8C:2E:E4:88:86:B9:B0:1C:CA:22:01:FF:9B:7D:D2
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:16:65:79:d7:93:0f:4f:ad:3c:27:6f:de:78:80:14:d5:30:
cd:1b:d7:fa:e8:c9:02:77:dc:7f:e2:2e:45:49:77:3d:31:e6:
30:06:c1:58:68:20:dc:6c:e7:de:19:72:b0:01:41:0b:eb:51:
3d:05:1c:69:ab:40:d9:5e:5c:67:f3:5e:30:9b:ab:e8:31:71:
f5:cc:f9:06:ef:f4:db:69:2e:2d:46:29:a0:b5:1b:3d:02:4f:
13:8b:ff:24:0b:97:b9:a1:f6:34:b0:75:bc:d6:68:6a:e5:32:
66:b4:3f:87:3e:64:17:7c:71:5e:3d:7a:38:b7:27:a6:a0:ce:
01:9f:f6:38:e2:ab:e0:c3:8f:42:a5:5a:9b:4e:e4:c5:f8:de:
8b:f5:ec:8e:dc:8d:99:a2:ab:f6:9e:82:3c:54:e2:a7:bc:da:
81:c3:2f:e9:c2:38:01:6f:d2:7c:57:2a:58:12:08:fd:10:b8:
fa:6d:ba:85:81:a1:0a:f0:8c:5f:bd:ed:06:72:5d:87:1c:d5:
01:4d:71:dd:6a:f8:8a:ca:d6:ad:c4:7f:0a:37:62:92:8d:bf:
d6:47:8f:3b:86:33:e1:2b:03:80:97:ca:b1:0d:82:32:62:0d:
0f:66:2c:da:ab:ef:51:4d:07:96:89:a0:71:9e:00:07:c8:0a:
db:e1:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:42:56 2026 by rpki-client