
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier: dFEeJ24oO6uB+dm2r0fj4h2CbawpfV7i9LUTyX6rSv0=
Subject key identifier: BF:82:50:28:53:83:9F:86:20:73:59:3F:E6:93:07:AE:77:49:A0:C7
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number: FD
Signing time: Sat 13 Jun 2026 06:19:03 +0000
Manifest this update: Sat 13 Jun 2026 06:19:02 +0000
Manifest next update: Sat 20 Jun 2026 06:19:02 +0000
Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: b3PG0n7Lu6rkoAqNQr94v6s6mzV89vy238dKlIQz35w=)
2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:19:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Validity
Not Before: Jun 13 06:19:02 2026 GMT
Not After : Jun 20 06:19:02 2026 GMT
Subject: CN=6a2cf657-e25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d3:9b:02:e2:0f:f3:51:76:f3:24:77:fd:a4:
3f:0b:27:d2:95:00:d4:1f:58:03:37:52:f0:40:ea:
1d:d4:b2:90:6b:ce:a2:ac:13:6f:95:11:bf:79:23:
60:83:be:d6:c2:47:82:4d:e9:c8:b4:e2:9b:49:73:
49:88:34:1a:7b:90:92:5c:96:e9:c3:f9:94:26:04:
16:8c:ab:84:46:0f:dd:12:11:44:71:13:88:4e:d4:
72:c0:4d:81:bb:77:39:ce:7c:78:67:68:38:28:42:
cb:43:ad:7b:0d:a1:0d:ec:13:0c:3f:ac:6f:60:12:
a2:a1:19:6e:ac:fa:9c:f7:d2:dc:ab:5f:c0:b9:ce:
db:18:38:cd:a6:2f:79:dc:14:a8:4d:df:d7:e9:55:
f0:80:47:1b:9d:51:d3:39:e2:b5:ee:6c:df:38:39:
f7:47:ad:d2:01:02:5f:7e:42:a4:4a:03:ef:c3:25:
ae:f2:2e:1b:76:21:15:68:db:e4:1a:9f:4d:94:2c:
be:e2:d4:61:62:e2:73:aa:cb:64:30:d4:31:1e:be:
1f:e0:54:10:e6:93:ec:97:5a:14:ee:1b:dd:73:8d:
68:66:02:16:1f:1e:05:d5:60:e4:23:9f:88:a5:32:
31:9d:19:cb:4c:c6:f9:b7:6f:50:f3:04:8d:68:5d:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:82:50:28:53:83:9F:86:20:73:59:3F:E6:93:07:AE:77:49:A0:C7
X509v3 Authority Key Identifier:
keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:e2:1e:29:fb:f6:ed:c5:f3:f5:a9:b7:64:3a:3d:1f:b1:87:
d4:b0:f0:a3:4d:06:ed:5b:2a:11:fc:a0:cb:bc:70:fc:15:4e:
0a:22:17:43:7c:ed:64:03:e7:dc:74:f2:23:bc:22:23:33:65:
c9:f3:8e:b0:48:ca:c1:71:94:37:b4:e4:e4:99:27:2a:17:f4:
c9:58:47:27:70:33:a3:09:ff:8d:ca:98:42:c6:46:a1:d3:5a:
05:07:bf:43:59:e8:0a:1f:f4:25:df:39:40:ac:14:95:da:dc:
45:aa:aa:b3:8e:6d:45:38:4b:9c:e6:3d:82:58:4c:5b:f8:43:
65:8f:fe:57:57:ba:96:e0:35:3e:23:6a:19:2c:88:3f:ac:ea:
74:36:2f:62:85:cd:b6:28:9f:f4:78:b5:48:6a:46:37:0f:4f:
86:03:bb:72:bb:5b:36:6c:c9:de:f8:9a:bd:5c:59:cd:27:a8:
00:f8:8e:d1:65:c0:4c:07:32:d7:d8:e3:82:77:fd:67:6e:02:
dd:cf:e6:b1:cd:c9:0c:72:1a:d7:68:ac:10:26:41:4c:60:5a:
1d:aa:5c:82:28:f3:b5:a4:a7:b1:85:6d:7f:93:b1:a0:ef:34:
b0:8c:26:c4:c8:26:6e:93:59:9e:72:4e:24:99:98:35:b4:35:
02:03:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:40:28 2026 by rpki-client