
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json)
Hash identifier: 5Sal+RAMudFgQTU6QU1jZGR/IzIT1qjCa8UxwevY4L0=
Subject key identifier: D4:D1:08:A3:63:56:5F:62:D3:09:87:B3:F5:1A:7A:BC:8E:D6:89:24
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 3745
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
Manifest number: 3653
Signing time: Fri 12 Jun 2026 14:27:59 +0000
Manifest this update: Fri 12 Jun 2026 14:27:58 +0000
Manifest next update: Fri 19 Jun 2026 14:27:58 +0000
Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: AXrQQKLpOJKcEP3QaJsA9wOj1n92CHEe/XKgm3qdtn4=)
2: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: AoD1y/nYjPSOUSJHEbMuyBuaFVXXnCMYDMP9nMWhevk=)
3: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: CAJ81kegdxUmZ0yB+G3EOfDtceEQTggGkdXXt1XoU0I=)
4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: KeHN4yC8HCgWU7NC7+u9JXzLgmJ0RzLzePi7iCwVwGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14149 (0x3745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Jun 12 14:27:58 2026 GMT
Not After : Jun 19 14:27:58 2026 GMT
Subject: CN=6a2c176f-61ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fa:84:a7:a4:76:40:1d:00:2b:62:49:c5:60:
69:69:7b:17:3f:4a:f2:47:76:ab:15:67:9a:38:e8:
3e:31:f7:5a:10:6f:06:c6:33:f3:2a:30:49:92:04:
f5:07:f4:70:23:5c:44:20:b1:a3:01:04:21:56:5c:
c5:0b:b6:e6:2f:3b:a1:71:44:7f:ae:6b:86:56:ba:
92:d3:c2:ed:7e:45:1c:0c:c9:b3:ae:e2:0d:3e:88:
d9:17:da:5f:fe:8f:fd:f4:19:fe:5a:1d:4e:66:1c:
4a:0d:0a:51:d6:26:52:39:65:f6:14:28:50:2e:47:
de:d9:1e:57:af:8f:53:62:9d:2c:a6:79:82:a8:1d:
88:15:3a:65:23:ee:c9:75:f7:28:67:66:2f:97:93:
2c:b0:db:77:34:88:b8:9c:82:9b:4e:5c:75:f0:4c:
85:f9:94:c9:6b:8e:84:a5:ac:4b:80:74:7a:e4:2a:
02:e7:9d:53:7f:fe:e9:1a:18:5c:d6:35:b1:b2:ff:
a1:b6:4c:cb:05:74:7c:28:60:65:d7:a3:2e:09:a8:
8c:c4:52:a1:c2:70:6a:d5:75:c2:4b:c4:c7:d6:c4:
7c:ae:5d:10:d4:3f:de:ee:bb:c8:cc:d9:2a:a7:df:
16:64:72:2c:17:e8:27:ed:2c:f3:43:32:19:98:aa:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D1:08:A3:63:56:5F:62:D3:09:87:B3:F5:1A:7A:BC:8E:D6:89:24
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5f:0d:66:e3:16:51:bb:49:19:50:98:f9:fe:ca:97:26:d6:
18:d9:3a:f5:e2:ba:6e:b2:ba:ac:89:46:0f:4a:a8:73:a6:8c:
06:87:17:eb:74:b2:84:e8:92:d7:0c:40:7d:80:ed:25:df:c1:
94:c7:36:99:0e:50:f3:b9:0e:31:9b:98:c6:0a:44:0e:8c:64:
67:8f:a8:35:28:4f:21:7f:d2:a6:b0:ea:e4:9d:ae:f4:2c:2f:
1b:84:cf:f5:58:13:e1:f0:df:84:59:55:7b:22:83:db:6a:44:
72:6f:d0:64:36:d4:56:04:d6:b9:37:75:02:61:c7:b3:e7:1f:
06:92:80:ff:09:d0:66:c5:ce:ef:55:24:65:69:52:cd:2e:25:
f9:77:e8:0d:dd:cb:5f:92:33:ff:89:3b:0b:c5:ad:ae:fc:1f:
2d:1f:2e:42:df:13:83:d4:73:5b:08:86:e2:bf:ac:4b:d0:b4:
c6:a5:13:63:f4:8d:a8:9c:84:c7:1f:2f:6f:17:41:02:5c:14:
23:8c:b5:aa:2f:a7:76:b5:10:22:73:92:92:3d:41:d4:6d:c2:
80:3c:07:1c:ed:7b:76:3b:aa:1d:87:a5:be:e2:aa:ef:b2:d0:
f2:53:73:49:d1:4a:3e:24:84:73:0e:86:75:ef:4f:f0:b3:79:
3b:ef:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:51 2026 by rpki-client