
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier: D46NEni7jU+NpYhcApvAVt0UdOc88cZ0LgEyL4h6i+A=
Subject key identifier: AC:7C:B7:03:27:97:95:6A:C9:94:BD:F3:B8:4B:BA:3B:4E:90:29:4E
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer: /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number: 2C
Signing time: Sat 13 Jun 2026 08:49:13 +0000
Manifest this update: Sat 13 Jun 2026 08:49:13 +0000
Manifest next update: Sat 20 Jun 2026 08:49:13 +0000
Files and hashes: 1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: hQVMMLTI39ALzHiFNi7ALD9sH9+O3KJ1N6/wIApOXLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Validity
Not Before: Jun 13 08:49:13 2026 GMT
Not After : Jun 20 08:49:13 2026 GMT
Subject: CN=6a2d1989-3506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:78:f9:14:00:2d:51:cd:1b:90:dd:b7:b0:8a:
74:5b:77:cd:88:1b:f1:6b:bb:a5:6d:9a:34:e6:11:
5a:a0:4e:af:88:3c:b5:0a:16:e5:78:35:3c:8d:33:
29:f1:c3:26:bf:7a:88:df:ad:b3:eb:8d:86:53:78:
a4:dc:90:36:4e:58:94:4d:5c:dc:f9:49:d1:eb:b5:
6e:05:8a:cb:58:58:e3:85:bb:44:5b:f3:2a:a7:f4:
34:81:1a:8b:03:63:bf:51:03:51:04:b1:7d:20:14:
f0:05:a0:ce:de:bb:98:77:4d:40:8c:88:9b:e1:8d:
68:bb:b4:aa:f2:b4:7b:22:b9:dc:d4:6f:6f:b3:79:
45:43:61:29:9c:31:5c:27:d8:17:cd:5a:ee:60:ac:
fe:f8:25:1e:06:d4:9a:55:c1:73:4e:f7:af:61:dc:
ab:e4:4e:f7:a4:11:fd:96:e9:93:9f:bc:5d:69:67:
66:bf:92:8b:15:38:54:24:ef:55:83:3b:95:de:fb:
a1:a9:05:0e:09:34:19:8e:84:1a:3e:bf:8f:68:88:
4f:7d:c9:8b:e0:dc:d5:8a:d9:02:02:aa:27:e2:41:
28:c0:38:a2:77:a6:3c:5f:bc:99:75:4d:d9:e1:ab:
fd:ac:87:f4:da:95:50:c8:76:f0:5f:bd:6d:e6:da:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7C:B7:03:27:97:95:6A:C9:94:BD:F3:B8:4B:BA:3B:4E:90:29:4E
X509v3 Authority Key Identifier:
keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:53:cc:00:6e:3b:a0:81:96:3d:9e:de:ce:5b:e3:aa:73:2f:
79:74:0a:5f:28:c1:6a:fd:c0:02:5f:e7:21:77:4d:74:a1:e5:
28:25:69:cc:20:3d:4d:f1:7e:18:3f:39:c3:f5:7b:73:fd:41:
19:4a:94:6e:ef:d2:eb:a3:f2:17:8f:85:86:d0:de:ea:20:3a:
14:01:47:87:8a:0e:ab:bb:af:15:4b:7a:2d:a8:f8:e3:d6:83:
f8:16:f8:d6:79:c9:63:0a:f9:a3:06:5a:fd:ed:c8:61:da:ae:
67:48:ff:cf:67:2f:bb:26:60:0d:5f:65:da:36:b5:c9:21:5a:
82:19:6f:15:75:ff:60:b4:68:c6:db:4c:bf:ef:20:d9:07:d3:
9e:66:77:e2:0a:8e:93:e2:06:b4:58:91:42:24:25:35:cc:d1:
6c:fd:ca:75:3a:eb:bb:bc:6c:6a:58:68:4a:a7:b0:56:68:de:
10:fb:f7:0b:6b:19:9a:cd:86:9b:41:b7:6b:57:fb:28:d5:b5:
ea:2c:bf:1a:8c:92:ee:92:42:c8:e3:85:a6:86:e4:9d:04:79:
65:53:1c:41:80:1b:3c:56:a2:60:84:85:eb:44:bb:53:63:81:
33:07:5e:67:cb:59:01:24:34:4d:3e:e0:30:86:f7:df:7f:27:
14:ee:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:32:32 2026 by rpki-client