
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json)
Hash identifier: nYXj02bfTcn+GAs2aZSxHld6klk1RNDYXtbo22xxcIQ=
Subject key identifier: 09:C5:E4:EB:7B:91:8A:22:3A:95:36:23:A7:76:C7:3B:E0:56:3A:2A
Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Certificate serial: 04F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
Manifest number: 04EF
Signing time: Fri 12 Jun 2026 23:49:12 +0000
Manifest this update: Fri 12 Jun 2026 23:49:11 +0000
Manifest next update: Fri 19 Jun 2026 23:49:11 +0000
Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: KxwZP+aKCESYnutEWT31QSdVX3jCFFfjEDZCbw5SPdE=)
2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: 7aFNsUg1I4C5V9F/LA66NxWgGO8Ce4SasYs9BxONMfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Validity
Not Before: Jun 12 23:49:11 2026 GMT
Not After : Jun 19 23:49:11 2026 GMT
Subject: CN=6a2c9af8-7d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:58:9b:38:01:6d:04:fa:43:0f:53:af:93:
e3:69:60:1f:c7:c6:74:c0:5b:61:b8:48:1b:b6:81:
a4:21:25:f8:5b:e9:22:76:8f:05:b0:2e:5a:f5:6d:
e1:99:d2:c0:45:08:23:81:e8:18:94:68:83:1e:7e:
72:e3:24:9c:1c:e4:ce:47:cc:f9:4b:b1:a7:f1:a6:
ae:ec:ed:9b:33:21:be:cd:74:ec:6a:25:3b:47:e4:
72:15:7e:45:48:a5:f0:d2:1b:82:95:a0:33:78:57:
66:4a:8c:aa:29:95:5c:ea:13:c1:55:ac:fc:a6:dc:
cb:88:43:0a:6f:07:a6:4d:20:a6:e8:cb:56:ef:41:
7d:e7:f5:e6:3e:54:8c:6d:a5:a4:91:08:21:dc:eb:
43:94:43:4b:23:4d:0f:b1:f5:44:a0:b9:75:de:c3:
cf:1a:46:eb:bb:18:d8:5b:db:b0:d3:bf:64:83:5c:
16:00:97:c6:84:17:2b:d1:f5:8d:a6:6a:58:e0:11:
ef:84:99:14:bd:78:35:f1:ee:fd:3b:5a:8b:17:ce:
6c:bb:3c:a9:2b:ed:77:b7:3c:16:4e:7e:b3:eb:ab:
8e:8c:ff:6b:46:60:f7:13:1d:0b:e0:17:fa:dc:1b:
e7:96:d7:25:71:67:52:e1:c2:be:ea:40:4d:65:a9:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C5:E4:EB:7B:91:8A:22:3A:95:36:23:A7:76:C7:3B:E0:56:3A:2A
X509v3 Authority Key Identifier:
keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:5f:c8:17:74:1d:01:5b:b0:27:18:ce:5a:64:f0:fa:91:e7:
4c:25:43:c2:f2:1a:65:c8:85:f2:87:7d:20:a8:94:4f:e6:d6:
8d:65:01:2f:c7:e8:a9:ff:7a:3e:d7:2b:3d:0e:4a:9e:c3:54:
0a:80:9f:fd:f9:88:63:2a:8d:ee:ec:fe:d6:a7:67:3d:92:14:
fd:cb:2a:48:33:21:b7:b4:a7:15:3f:88:56:1a:d2:8d:f7:0f:
71:ce:97:5e:fc:ea:dc:6a:0b:4e:c1:ac:be:47:de:cc:08:41:
a2:53:5d:06:9e:ed:48:06:e1:6f:27:16:0f:1e:9b:9a:bb:bf:
c0:ce:fc:3f:40:d1:4f:9d:f8:fb:d3:bc:2b:f7:92:b3:8a:a1:
2d:55:b8:17:cb:18:2e:4b:56:b7:f4:b8:d6:73:a9:4d:92:1a:
4d:e3:23:6e:e3:19:bd:71:76:5d:05:9a:4d:8b:dc:fe:99:74:
ee:ec:f0:14:ca:94:f6:26:4a:20:15:02:a3:0b:0f:a7:93:47:
db:94:94:5a:08:77:f7:eb:4e:6e:0b:af:b9:03:89:81:ba:d6:
3d:b6:ad:35:e0:15:ef:04:71:a6:4a:b7:34:0d:fa:45:e1:2f:
1f:7b:0d:76:a2:54:ae:08:80:e6:c2:cd:af:84:00:0c:fb:62:
a0:cd:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:39 2026 by rpki-client