
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json)
Hash identifier: SjGXwNHMaedqfZY0pg9ele9PkFP39LXURUW+vGFOTsI=
Subject key identifier: 7F:BD:37:EB:AD:BB:CF:E2:3D:E0:8A:77:CA:8F:C9:7B:90:A8:6B:FF
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial: 2184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
Manifest number: 56B6
Signing time: Fri 12 Jun 2026 14:53:15 +0000
Manifest this update: Fri 12 Jun 2026 14:53:15 +0000
Manifest next update: Fri 19 Jun 2026 14:53:15 +0000
Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: wuW3ZXixSEa3pOmv5VUl3s0lBnsva8KO/oIX/K4KINE=)
2: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: eXbj2/2PGJubPsuJy/6g3AgLU0HNFQl847an+DeMHhU=)
3: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: N4+8fycTDr0KyyL1T8BnM1QnlOy4E1P+9kvY0kSTWus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8580 (0x2184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Validity
Not Before: Jun 12 14:53:15 2026 GMT
Not After : Jun 19 14:53:15 2026 GMT
Subject: CN=6a2c1d5b-f71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:f3:05:b3:07:e4:2b:97:75:b5:f6:3e:91:
aa:46:dd:c0:5a:e3:7d:0f:8c:66:c3:a1:0c:39:97:
ae:53:6d:9a:b6:0b:b6:4e:70:4b:b1:0e:27:88:80:
9e:cc:7e:6b:94:21:1f:61:58:bc:d5:92:8c:a9:8f:
b8:f2:5c:ae:74:4a:97:3b:30:34:a1:db:e5:37:7a:
2b:d2:60:24:49:8a:72:b3:47:8a:df:95:83:5c:67:
e4:61:3c:0c:bd:a7:ba:42:81:b7:55:8a:8a:26:3c:
70:cc:b0:91:cd:79:29:d2:b4:13:f8:4b:54:c8:ae:
e7:33:5b:87:ba:b4:10:b5:2d:fb:a0:6c:e5:16:af:
bd:35:f8:ca:7b:59:93:b3:5b:a5:b0:93:64:72:22:
e3:49:f8:cb:6a:76:11:1d:a4:97:ac:ac:4d:29:b4:
10:8b:4b:4a:5b:1b:2c:6f:b3:18:49:ed:f9:d9:bb:
f7:91:c7:ef:6e:3b:26:4e:80:77:a5:88:4c:75:90:
48:e4:3b:97:26:50:68:b9:6b:b1:e6:9d:26:ec:63:
c0:1a:2c:94:7a:82:e2:f9:44:34:e6:e1:66:c1:77:
31:a5:76:e9:cd:c6:97:1a:9a:c6:f7:42:a5:24:97:
ac:26:7d:f7:30:49:79:f8:5e:a9:3d:4e:6f:3f:30:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:37:EB:AD:BB:CF:E2:3D:E0:8A:77:CA:8F:C9:7B:90:A8:6B:FF
X509v3 Authority Key Identifier:
keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:82:fc:0c:89:6f:e7:9c:44:8d:0a:65:60:02:d3:7d:78:1c:
df:a3:8a:67:6e:9b:b7:7d:0f:40:6b:38:64:e2:82:65:df:e9:
1e:aa:da:47:bf:a8:07:44:c1:3b:48:0d:00:95:a5:37:c7:6f:
5b:2c:00:23:14:4b:22:47:45:08:2e:eb:b6:92:f1:7e:6a:da:
0e:6d:b3:bb:07:09:92:03:9f:da:30:b2:85:2a:43:33:95:b8:
91:05:2f:6d:4b:f2:22:a1:48:b9:c5:ea:a2:4f:7c:b8:90:dd:
85:c5:bc:25:86:ea:ac:2b:28:3d:c6:72:16:be:10:73:b6:6a:
31:99:87:53:eb:bd:5f:e7:42:54:b1:6a:ff:88:f1:15:b5:d2:
cd:0a:24:c0:30:1f:89:d4:ce:58:42:2d:c4:f4:09:4a:e5:8e:
18:93:3f:6e:21:54:93:21:01:98:25:b0:69:13:3c:b3:f6:7d:
54:4f:0d:13:49:6a:d4:28:da:bb:b8:e9:38:db:0b:28:c7:4a:
27:91:99:3c:1b:15:bf:98:a5:85:77:43:45:fc:5f:16:2d:c8:
cf:a3:6f:08:e1:ef:ca:2b:41:09:37:b6:ac:93:97:a9:22:71:
53:3a:7a:ec:07:85:b5:f3:5d:d3:db:ba:98:33:66:5b:dd:82:
ba:a2:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:12:52 2026 by rpki-client