
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
File: CqAPpYxAjQbIlNjrrzidTFAQVEM.mft (raw, json)
Hash identifier: plVAkLwp7+caJqGKLTD1O+JZ+hJr5xozdHOPtNpzVf8=
Subject key identifier: 37:37:CD:91:37:FA:B5:18:F1:B1:4B:57:CF:F8:AD:87:AE:9C:8B:96
Authority key identifier: 0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
Certificate issuer: /CN=A91D9C95/serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
Manifest number: 15
Signing time: Thu 11 Jun 2026 11:21:06 +0000
Manifest this update: Thu 11 Jun 2026 11:21:06 +0000
Manifest next update: Thu 18 Jun 2026 11:21:06 +0000
Files and hashes: 1: CqAPpYxAjQbIlNjrrzidTFAQVEM.crl (hash: HciigFHR0j5sAgTynnhD+F8cOLqOpmcf3V2AwGExSC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9C95, serialNumber=0AA00FA58C408D06C894D8EBAF389D4C50105443
Validity
Not Before: Jun 11 11:21:06 2026 GMT
Not After : Jun 18 11:21:06 2026 GMT
Subject: CN=6a2a9a22-fca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:b1:de:c3:54:91:a3:d0:6b:70:00:82:99:
91:68:f2:f5:da:50:90:1e:3d:5d:c5:78:1e:d1:f6:
e4:7c:3a:5a:f2:e7:a2:ba:1b:43:1a:df:83:bf:59:
72:ac:f6:8b:8b:6e:8d:e2:85:d8:b3:33:bd:90:61:
74:86:55:b4:27:78:4e:6b:f4:ab:ee:4a:66:c4:a5:
82:75:2c:9e:1f:d6:3e:b3:6a:a5:e4:ed:6d:4a:ae:
4d:83:1d:6f:36:99:7f:6d:16:ab:d9:f8:30:6e:9c:
56:d1:f0:7a:20:b2:14:ad:3e:a1:7a:a7:97:5a:58:
32:61:93:d5:a1:22:ac:cc:95:94:e1:45:93:c9:5d:
36:f0:16:eb:ef:97:17:41:1a:4e:ba:71:5f:a4:ec:
35:c7:7c:98:fc:50:22:28:81:0d:7d:87:25:48:b5:
02:65:69:7a:e8:c1:cd:62:33:19:24:b2:db:12:6d:
fd:e5:df:b3:c5:19:93:c0:09:9d:d2:20:3b:13:49:
bb:66:87:d1:52:68:b4:f2:fe:81:69:50:54:cb:7e:
4d:f8:47:79:23:3c:bc:9c:ab:ea:66:98:1b:50:68:
f8:ea:39:e1:7c:c7:79:53:c8:6d:2f:12:35:ce:10:
18:2c:65:6e:a0:4f:fe:1e:00:7f:05:3d:b6:58:41:
2f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:CD:91:37:FA:B5:18:F1:B1:4B:57:CF:F8:AD:87:AE:9C:8B:96
X509v3 Authority Key Identifier:
keyid:0A:A0:0F:A5:8C:40:8D:06:C8:94:D8:EB:AF:38:9D:4C:50:10:54:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqAPpYxAjQbIlNjrrzidTFAQVEM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9C95/98E731C847A011F1B09F60C1A2833773/CqAPpYxAjQbIlNjrrzidTFAQVEM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:5d:d2:ea:8e:ba:1b:a4:ee:81:d7:1b:cf:ac:8b:0b:b4:b3:
92:35:20:a5:f6:6e:7a:c7:eb:c9:2f:47:9f:6e:d2:ef:e9:bf:
cf:57:8b:e0:d3:87:9e:8e:59:79:ad:48:f8:3b:b0:39:92:a7:
d9:c6:01:ed:e9:75:8a:a5:d3:1c:15:63:b0:91:9c:29:80:67:
4b:5a:d4:70:c2:a9:17:9c:72:cf:51:ec:89:19:21:c3:06:5d:
4a:d7:6b:7a:63:a1:30:31:50:7c:39:1d:b4:50:8f:31:ee:df:
a8:bb:ee:c4:1c:d4:72:97:db:7d:f6:d2:20:fb:01:f5:44:49:
71:65:70:df:56:66:b7:63:0c:0d:b7:88:e8:73:5d:6b:d0:dc:
6a:4b:20:32:9f:cd:10:36:78:70:7b:6e:ac:38:2c:fb:14:40:
cb:d2:a0:b1:3e:89:e5:cf:1c:79:3c:93:da:85:2f:8d:36:37:
aa:79:5f:ad:b3:de:9b:24:75:20:ce:95:51:d1:2c:17:d5:35:
a6:38:3d:7b:67:94:fe:18:7c:44:b1:1c:6d:9a:d5:4c:7d:0e:
86:5b:28:22:af:ef:8e:42:b0:56:d0:b1:e7:21:0a:23:c1:bb:
fc:ac:7d:fa:a3:d5:e1:49:7f:07:1d:c1:6b:0f:78:11:f8:6f:
f9:18:06:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:26 2026 by rpki-client