
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft
File: -qIKGvsgkct_URR4g_NkpFMJQTE.mft (raw, json)
Hash identifier: XTLvcTiE04mwmY6YaZyG6DjH3Om/mR+KSgHmBRtZL0E=
Subject key identifier: 17:CA:CD:62:89:B9:4C:B9:A3:FE:8D:31:07:3B:83:1B:07:0F:AB:3D
Authority key identifier: FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31
Certificate issuer: /CN=A91AF0E8/serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft
Manifest number: 3554
Signing time: Fri 12 Jun 2026 15:06:09 +0000
Manifest this update: Fri 12 Jun 2026 15:06:09 +0000
Manifest next update: Fri 19 Jun 2026 15:06:09 +0000
Files and hashes: 1: -qIKGvsgkct_URR4g_NkpFMJQTE.crl (hash: +EpTl1FWyXLcofntjpFi9ZZCfi64DdRiPjG2lnpWYSs=)
2: 0A956A80B48711EC83327546C4F9AE02.roa (hash: DWDLfS9VFoRUspo4gPt0SLH/400cssY5io0TF9oRBK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl
rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0E8, serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131
Validity
Not Before: Jun 12 15:06:09 2026 GMT
Not After : Jun 19 15:06:09 2026 GMT
Subject: CN=6a2c2061-23d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:e0:fa:d0:9d:8e:a8:f5:dc:06:a0:ff:91:
bc:a2:fd:b6:3b:ea:fb:c5:90:af:c9:a2:4d:89:ca:
c4:8c:01:4c:bd:37:79:a1:66:21:5f:df:15:47:da:
c3:7f:c8:33:20:69:46:13:4a:bf:10:6f:26:bf:60:
8e:83:3a:3e:b1:f5:01:7c:02:28:78:d5:1f:27:0a:
17:71:5b:ba:ac:6a:7d:a9:12:6f:ac:a6:44:f1:4f:
7e:b5:17:4d:e8:89:5a:46:25:3c:88:60:58:93:57:
a3:92:16:20:1b:a5:4e:ed:6f:f6:bf:56:af:b6:46:
62:c7:d3:d9:84:af:35:ce:2c:49:b8:0e:e9:5f:e8:
e4:dd:bd:4c:be:24:e2:8f:17:f6:ee:76:08:67:16:
b0:b2:b1:17:dc:a8:17:28:b0:ca:db:1d:26:d4:f1:
9c:de:c7:fc:90:c6:36:9d:23:fd:ac:6d:d2:70:a0:
fe:c8:aa:1f:82:db:66:c9:04:c1:62:78:16:21:5e:
c0:fe:4f:6d:b2:ff:24:4d:86:63:a8:24:18:68:40:
09:37:97:d0:d6:99:9d:ce:ce:2f:4b:18:28:0a:d7:
09:a5:1f:60:45:e1:8d:ad:6d:74:b3:46:ec:83:6d:
ef:cc:0f:43:08:d9:ab:7e:83:f1:c2:2e:ff:7b:0f:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CA:CD:62:89:B9:4C:B9:A3:FE:8D:31:07:3B:83:1B:07:0F:AB:3D
X509v3 Authority Key Identifier:
keyid:FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:21:ba:a7:c2:1c:24:e7:95:8d:bb:80:a8:b9:35:45:8d:e3:
5c:3f:6b:3e:65:da:23:61:cc:9a:02:70:be:e1:0f:e2:05:08:
79:7f:3d:4d:4c:01:b0:a8:63:f7:92:f6:e4:11:4b:14:34:df:
38:0b:3d:fd:e3:3c:1d:e4:fb:18:a0:62:b0:34:ac:ab:10:f2:
3f:05:11:55:ad:13:f0:a7:d5:b2:0b:fa:18:56:6d:e0:49:41:
c1:22:5f:0b:e8:6b:2f:a6:ee:92:b7:cb:1c:7a:4d:7b:07:93:
15:d6:03:f9:00:38:b0:ea:64:e9:4a:fe:12:fd:f5:98:11:42:
1f:9f:3b:38:ed:66:e6:de:57:c0:4f:2c:2e:51:02:a1:19:e9:
4b:0a:21:25:66:98:9e:74:69:5d:36:09:a8:70:0b:8a:44:8f:
11:f7:e2:90:5f:f7:8b:0b:11:03:cc:48:58:6e:0f:03:f4:e9:
63:12:60:ef:2e:80:bd:7c:ec:7c:49:61:cf:d0:85:ff:36:66:
9d:e3:71:ee:56:55:3c:7a:86:d0:59:cd:5e:b7:3e:f0:25:41:
5a:35:35:2e:2c:73:0a:b1:e7:84:4d:76:d9:54:57:39:9b:f4:
96:47:11:dc:85:39:3f:06:4e:9b:b7:f0:9b:51:fa:5d:da:f7:
c7:0a:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:37 2026 by rpki-client