
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier: 0pYAQI77XXI1bIvXdrwPCAuhl1IqTDgcj9lLth4//Yo=
Subject key identifier: 64:9F:84:CE:49:81:2D:BD:16:80:5A:27:CA:C2:8E:C2:34:4D:F9:94
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial: 06A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number: 069E
Signing time: Tue 12 May 2026 22:30:38 +0000
Manifest this update: Tue 12 May 2026 22:30:38 +0000
Manifest next update: Tue 19 May 2026 22:30:38 +0000
Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: lDkRzA/rET9+eSl+sA2JWinpfn6jCRM/sMCswVksSHM=)
2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1702 (0x6a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Validity
Not Before: May 12 22:30:38 2026 GMT
Not After : May 19 22:30:38 2026 GMT
Subject: CN=6a03aa0e-e8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:e5:6d:3f:c3:39:44:7d:41:b6:63:be:b4:
8d:3c:54:78:80:62:9b:d5:44:82:57:41:be:f2:14:
d2:1f:ee:38:18:d0:4d:4a:e7:56:b9:ff:14:10:bc:
22:a8:7a:29:e6:f0:f3:17:eb:6c:21:d4:58:13:f1:
bc:b9:d7:e0:53:7f:b1:56:ea:74:6d:8a:5f:e6:a6:
12:b9:02:05:fa:c2:12:8f:6d:5a:0f:28:a4:a0:b6:
a5:7a:6e:22:f3:8e:f7:35:c9:7b:8d:e0:7e:f9:a6:
88:30:86:5a:71:1a:7e:dd:b1:a5:b6:ce:4a:67:d2:
83:6a:df:5d:69:cc:86:d4:e6:95:1f:ef:bc:28:a2:
95:29:16:e7:29:c4:ef:f9:a4:b0:83:a1:6d:19:9d:
d4:96:c0:45:28:e2:e2:3f:44:45:e2:66:60:a4:b4:
af:fe:8f:44:ac:88:ee:4f:3c:83:9f:ec:62:68:bb:
9a:36:53:ef:0d:56:9e:09:2a:68:8d:71:d2:bc:7c:
95:e9:6a:25:1d:41:b6:0c:c8:cc:85:56:47:11:a8:
fd:06:dc:cf:c2:85:3c:9f:f7:ea:cd:c7:86:b4:1e:
9a:c1:62:a8:01:6a:17:b2:9f:7f:cc:c1:4e:2d:43:
41:27:f1:f9:38:6a:a5:f5:8c:f4:ce:4e:8a:71:39:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9F:84:CE:49:81:2D:BD:16:80:5A:27:CA:C2:8E:C2:34:4D:F9:94
X509v3 Authority Key Identifier:
keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:18:62:b8:ad:cb:d6:b5:1d:31:65:7a:b8:e4:69:89:43:82:
b1:10:0b:8a:95:95:54:0f:c2:0d:b4:ec:ba:f6:aa:35:de:0a:
b2:62:e2:b3:77:3b:58:79:f5:95:a2:f5:8f:a0:a2:26:73:3a:
e3:ee:77:d4:0a:47:0e:37:f4:0f:bd:d7:93:2c:ac:13:32:83:
b4:d9:da:55:94:60:3e:c9:63:af:fa:3e:f1:ee:2e:4d:80:5b:
0c:34:90:5a:87:e4:31:32:71:c8:cd:f5:a6:46:91:f2:44:05:
38:0b:69:28:c9:77:fd:0b:0b:09:c5:97:40:f3:0c:46:93:b2:
b3:5a:9e:5e:7c:7b:27:c0:6d:ba:9e:d6:b2:46:b8:7c:cb:34:
2f:00:e9:07:3d:89:51:a3:b8:8a:c8:4d:ce:03:d3:ed:a6:c4:
30:eb:44:90:fe:67:b6:e6:22:3d:9b:20:2d:65:93:b0:42:68:
a7:97:fd:ce:ab:6d:99:73:0b:68:9a:e5:e2:0d:17:0d:f0:98:
26:e6:44:7f:ef:c1:26:3b:fe:bc:6a:22:d0:39:d3:58:37:8e:
65:e7:19:61:18:83:71:4a:a4:39:45:75:13:6a:af:24:d8:ba:
c4:80:e9:df:ea:76:96:75:2d:2c:7f:1f:8b:2b:9d:a5:f8:27:
5a:87:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:25 2026 by rpki-client