
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: IpsrmKMu3PYrxp71qIo/qhR/4RM2HUX6x1C2K+V5Sr4=
Subject key identifier: 14:0D:70:70:25:31:C8:E3:B2:FD:0F:31:1E:B6:51:A4:97:12:24:06
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 06C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 06A3
Signing time: Fri 12 Jun 2026 22:31:36 +0000
Manifest this update: Fri 12 Jun 2026 22:31:36 +0000
Manifest next update: Fri 19 Jun 2026 22:31:36 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: Gkpgn8s5PWILvVF2wJ4yS+Soq/P/2XHPGdq8CvLqc3c=)
2: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: vBCGm7MlYdNXXeaoLUD2KJwJGSuIu+kSne2oG2vKSsU=)
3: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: gkPTMzL29fjMeAxqDDyIKfb4bjNAUoeuE5oKyKWBCYo=)
4: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: iKG0U4dWo4Ii/ph+5g5SKDA8RO4TnmSAWL9RH3BX7Bo=)
5: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: 5CQDa/aa5UAIsTkpec0rYhloDDXKxfbpTB7+YpevLrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734 (0x6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Jun 12 22:31:36 2026 GMT
Not After : Jun 19 22:31:36 2026 GMT
Subject: CN=6a2c88c8-0214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:3a:46:5f:88:36:1d:8f:23:53:c9:a3:a7:
d3:49:b1:64:8c:a1:d9:bb:89:4a:ef:d5:ab:87:da:
35:00:44:26:6f:4b:e4:6b:1e:fc:58:77:d8:7b:7b:
77:cd:dd:c8:d3:a9:0f:27:c2:32:c7:21:b6:b8:62:
54:b1:ae:6e:31:c6:b6:49:c9:09:ea:43:02:42:dd:
4e:84:3e:47:40:df:ed:cb:47:4b:c4:c1:0a:58:3c:
25:7d:b2:c2:bb:3f:ad:6b:1f:f9:8b:5b:1f:6b:67:
1f:69:43:08:6f:dc:0a:1b:1d:27:0a:52:d6:3e:3f:
b8:95:95:dd:68:7b:60:31:59:8d:cb:fa:51:e0:6d:
5b:11:e4:d4:3c:58:30:b7:27:18:c6:b6:2d:fd:ff:
56:1d:50:30:36:a0:53:c1:54:67:60:6a:24:50:b5:
09:1d:e2:df:12:f4:33:f8:28:ee:fa:90:dd:de:41:
f2:68:b7:79:e3:f6:88:d8:ae:15:c2:24:4b:65:ae:
f1:39:22:6f:a9:99:b5:4b:eb:82:fc:35:ac:5e:02:
2c:3f:03:b0:b8:94:ce:16:d4:f5:35:d5:41:c8:7d:
02:85:c7:e3:e2:da:9b:ef:08:53:0d:39:6c:2c:67:
c8:a7:7f:53:2c:1c:f5:6a:70:09:bd:99:9c:0c:e9:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:70:70:25:31:C8:E3:B2:FD:0F:31:1E:B6:51:A4:97:12:24:06
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:82:bd:f4:54:3f:5f:f5:b7:8d:4d:d1:3b:d4:e5:59:98:38:
17:1f:ae:66:b7:a4:96:84:2f:87:20:f4:af:c3:b9:7e:6e:37:
19:bd:f9:a5:60:e0:cd:94:5c:e0:a9:95:55:ce:b1:0e:e9:c0:
64:b2:d1:6d:bf:62:42:b4:4f:b3:ef:de:b6:21:dd:a5:94:08:
0b:ba:94:74:67:e3:44:0d:22:19:09:19:0c:e0:a8:a2:61:b4:
93:40:db:ed:24:69:dc:90:48:36:f1:5f:aa:9e:d9:01:8a:66:
26:ae:de:ec:44:2f:72:e8:61:3d:ae:bd:a1:3b:9b:d6:dd:89:
4d:a4:65:19:db:b5:a1:5c:bd:bd:9d:56:b6:ed:bd:3e:ad:26:
89:53:12:4a:b9:50:29:22:63:be:c6:e4:10:a0:72:fb:fd:49:
17:82:ec:80:7c:85:85:1e:27:fa:d5:13:cf:e2:bf:9d:56:62:
b3:3d:17:d1:01:99:71:6a:7b:11:3c:2a:67:b9:0b:17:f2:2b:
fb:f0:cb:e7:a4:a3:0e:07:00:7b:83:9d:8c:65:7c:8b:f9:2b:
74:11:09:f0:e1:15:1f:7e:7e:25:2d:cc:b8:38:aa:10:4b:76:
06:79:18:db:e4:9b:24:de:64:7e:a5:70:e9:e4:5e:54:83:6f:
4b:c4:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:56:33 2026 by rpki-client