
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier: 1VDYKS2joj8d3CDP7zXdgArQEb/K2Z75aWED9mDgsY0=
Subject key identifier: 64:EF:74:E6:5E:C0:4D:BB:A8:66:C5:5B:51:EA:8F:C2:69:2E:C1:C9
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 36E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number: 35F5
Signing time: Fri 12 Jun 2026 14:29:08 +0000
Manifest this update: Fri 12 Jun 2026 14:29:07 +0000
Manifest next update: Fri 19 Jun 2026 14:29:07 +0000
Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: hi0O/s20iU1Ot0HjsMrKB+SpuGUDljE3sySeKDjLeBE=)
2: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=)
3: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=)
4: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=)
5: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=)
6: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=)
7: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=)
8: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=)
9: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=)
10: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=)
11: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=)
12: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14051 (0x36e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Jun 12 14:29:07 2026 GMT
Not After : Jun 19 14:29:07 2026 GMT
Subject: CN=6a2c17b4-da70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:47:f2:f1:2e:86:1b:9e:b6:c2:ec:70:ad:
3f:eb:9c:76:87:09:ab:71:6f:b9:74:31:ff:93:ea:
44:5e:d8:8b:41:d6:0b:05:a2:cb:c4:1a:cc:cb:92:
d2:b1:f1:97:03:81:53:55:99:37:27:53:16:1b:f4:
23:a8:8d:72:be:cb:eb:d3:ae:f9:12:d4:77:f3:c8:
95:e4:d1:68:d8:6f:5c:ec:2b:37:22:c0:67:df:df:
6b:12:af:46:5f:32:2a:fb:39:bf:cc:86:d7:08:81:
0d:c2:d3:47:98:14:e2:c2:92:6a:80:2e:00:d1:53:
69:5a:59:2f:d3:39:6e:a0:62:f0:46:4b:d5:6a:89:
65:5e:5b:75:a1:7c:5b:33:2a:86:54:bf:11:63:5b:
b1:d5:39:c5:ef:6c:30:d7:fa:06:e7:5e:62:6a:47:
21:99:d5:7c:ae:7c:e8:37:82:6e:d9:ad:d2:dd:b9:
04:2c:5f:7b:1c:57:c1:67:20:8e:66:3e:5f:7f:b2:
82:29:5c:f6:1c:44:85:89:1c:0b:75:3d:e3:b9:5b:
a9:b2:a8:82:58:db:4c:49:9c:98:9b:f7:0c:45:8e:
25:bb:47:4b:29:cb:96:ca:b7:5e:18:7d:fd:b4:5e:
61:7e:c4:dc:ef:97:2f:7c:80:68:a8:f7:8e:71:98:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EF:74:E6:5E:C0:4D:BB:A8:66:C5:5B:51:EA:8F:C2:69:2E:C1:C9
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e1:83:0f:1a:d9:29:4b:72:9a:39:14:ff:f0:eb:9c:e7:b0:
d7:db:fe:89:52:39:ab:e2:e0:4b:1b:24:1a:6f:f5:0c:e9:81:
15:ae:4c:59:1a:14:a0:c4:c3:d5:ed:55:d0:d5:d5:6a:c4:00:
9e:aa:b1:2a:23:a4:09:6e:60:b3:0e:f1:d6:e6:59:f5:0a:c4:
29:c3:eb:0c:8a:b3:ce:f0:ea:e2:0f:40:09:4e:97:76:b2:54:
70:74:58:1a:f6:7d:30:4d:49:4e:cc:96:8a:dc:a7:1e:44:d3:
6d:b3:fb:cd:1a:75:f8:f6:14:69:ac:dd:4d:c1:df:19:87:49:
4b:de:d7:cd:8a:30:b8:3b:0f:f4:b2:d9:5b:60:fc:2c:3b:b2:
08:65:1f:60:45:86:bf:00:93:61:c7:21:6d:fb:6e:4d:50:12:
5d:f8:35:37:24:c4:3b:5a:35:24:ce:ff:ec:b1:00:9d:40:94:
6c:01:52:75:ed:31:23:7d:71:9e:36:6b:c7:93:b5:12:3a:12:
95:a8:e3:0e:20:7f:cd:9a:ac:8e:b5:8c:c8:b2:54:c6:5a:49:
13:21:73:5b:96:17:2a:5d:24:a9:96:d4:bd:26:8d:ca:a8:ca:
ba:ff:36:59:5b:df:95:8b:20:7b:4b:de:e1:ff:9d:54:87:28:
b9:89:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:17 2026 by rpki-client