
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json)
Hash identifier: ZcvGRIXsUFpcU3my5L28V3IoZ8qTmogBoH0Va2UZNoU=
Subject key identifier: 8C:AD:63:0D:22:EC:94:D0:87:C1:3D:44:EE:00:C6:48:C8:0B:CF:C1
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0B90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
Manifest number: 0AD6
Signing time: Tue 12 May 2026 19:42:00 +0000
Manifest this update: Tue 12 May 2026 19:41:59 +0000
Manifest next update: Tue 19 May 2026 19:41:59 +0000
Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: xqde5A90oO4yBoppibxCf+JB1+/sjmKD1b1y1v0NPZg=)
2: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: FMzg28ZdQ4F0sdhtK2wuRkllmrqXUEFKB65mg1sG8L4=)
3: 553170245AC511EBA052F663C4F9AE02.roa (hash: 7erTlCvInc3AVRLw7wvtHf/eZ1jEoIGiOeY13F8Zqv8=)
4: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: jZ6Iauv/dN/4P0hBUVndivCUUgxGO8TMbCYwzqgk7iI=)
5: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: If1p2T4ry814caqPtmeuOiTH0yVCnehjVYiIPxJ8aBs=)
6: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: M8kgzZ/qskhWT6RqbwLXgYKBgdTgBhgTCm6VDEfCRyI=)
7: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: xyMhDnjS1J7j5KhCCxE7FkpfD0zlq+Ub21i1KmDM4ok=)
8: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: zt8ovKN7+n8nwUz7dlHlvLBjh4KwXCc4mYOMPsqbe38=)
9: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: lxrRVOjIONZ0+sk1QUPdtSqTSIWnhV1Sgp2inbSvE0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2960 (0xb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: May 12 19:41:59 2026 GMT
Not After : May 19 19:41:59 2026 GMT
Subject: CN=6a038288-5189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:93:d3:c1:ca:12:8e:06:58:5c:ce:35:ab:89:
8d:57:90:7f:25:5c:a4:7a:89:23:a6:13:ca:58:9e:
17:6f:7f:28:76:a6:dd:01:d5:ec:4d:a9:93:66:aa:
f1:a9:bd:d7:f9:15:62:00:6c:24:31:1a:aa:f6:5c:
42:a6:1f:2e:fe:e5:01:e9:ad:cd:e1:b0:26:2f:57:
dc:95:e7:e9:c8:56:b1:d1:8d:c4:d9:7b:e1:9b:8e:
85:e7:0b:d0:13:9b:8f:04:45:9d:5d:66:e2:80:da:
44:71:13:ce:5f:0a:eb:73:8a:bf:97:05:a9:b8:15:
7b:19:67:b9:70:ef:6c:fe:67:a1:4e:25:c3:7e:7a:
88:6e:51:f2:e1:e9:4a:d2:00:6a:27:1a:69:02:01:
78:21:ec:43:55:66:62:49:43:52:9b:05:1d:de:13:
55:06:9d:cb:86:1b:84:f9:6f:32:2c:fb:c0:8e:7f:
ba:54:78:1f:a4:5e:f4:5b:ed:95:d9:3c:6a:47:a2:
ef:a5:80:51:07:4c:c7:b2:b1:1d:fe:d3:2c:c3:98:
0b:49:5e:c7:4a:8c:63:a9:b2:98:6a:f1:e3:d1:74:
ec:d9:2c:82:6e:37:e8:54:f2:6e:40:2d:e4:10:dd:
9a:16:1b:fe:81:86:65:05:37:43:08:21:cb:d6:c2:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AD:63:0D:22:EC:94:D0:87:C1:3D:44:EE:00:C6:48:C8:0B:CF:C1
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:5c:ca:19:72:02:0f:29:3b:f6:d8:e2:21:2c:5f:37:b6:
b8:22:ef:e7:2e:59:e8:46:1d:5b:2b:ad:88:51:86:e2:6c:25:
45:3e:c1:e1:f7:4f:16:3e:02:cb:f4:3a:9b:d1:67:68:db:74:
d7:23:8a:43:e7:0f:a0:da:b5:78:a1:ae:ce:d7:2f:b9:d3:60:
86:8f:b6:21:c4:0b:20:9f:8e:bb:50:4a:96:e0:15:76:59:d5:
92:d0:c5:49:7d:37:10:20:f3:d2:b8:11:6f:5c:c0:70:b8:fe:
62:27:f4:92:e1:36:49:58:0f:93:ba:be:0c:d4:8a:4a:b8:88:
fe:cb:10:ff:e6:86:a4:63:55:a8:83:66:63:d7:a2:d8:54:6e:
ab:48:9a:33:db:37:4a:81:d5:c3:e7:25:27:46:db:35:81:d6:
4c:2c:df:cf:e1:98:df:29:7a:57:20:d4:cb:46:7c:7e:f7:d2:
c5:cb:7c:84:e0:01:cc:6e:05:c9:43:cb:3d:68:83:05:f7:25:
43:6c:07:90:a3:4f:3a:dd:30:31:3c:25:99:c7:70:31:a4:84:
61:6a:c7:69:3c:df:30:6b:a0:a0:bd:48:76:2a:15:55:da:a9:
af:e5:29:a9:de:ef:42:a1:5b:e7:ab:6f:f1:2e:10:27:b4:de:
74:f4:1f:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE
NTQ0QTYyQTYwHhcNMjYwNTEyMTk0MTU5WhcNMjYwNTE5MTk0MTU5WjAYMRYwFAYD
VQQDEw02YTAzODI4OC01MTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjpPTwcoSjgZYXM41q4mNV5B/JVykeokjphPKWJ4Xb38odqbdAdXsTamTZqrx
qb3X+RViAGwkMRqq9lxCph8u/uUB6a3N4bAmL1fclefpyFax0Y3E2Xvhm46F5wvQ
E5uPBEWdXWbigNpEcRPOXwrrc4q/lwWpuBV7GWe5cO9s/mehTiXDfnqIblHy4elK
0gBqJxppAgF4IexDVWZiSUNSmwUd3hNVBp3LhhuE+W8yLPvAjn+6VHgfpF70W+2V
2TxqR6LvpYBRB0zHsrEd/tMsw5gLSV7HSoxjqbKYavHj0XTs2SyCbjfoVPJuQC3k
EN2aFhv+gYZlBTdDCCHL1sIP0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIytYw0i
7JTQh8E9RO4AxkjIC8/BMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1
MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL
ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEH1cyhlyAg8pO/bY4iEsXze2uCLv5y5Z6EYdWyutiFGG4mwlRT7B4fdPFj4C
y/Q6m9FnaNt01yOKQ+cPoNq1eKGuztcvudNgho+2IcQLIJ+Ou1BKluAVdlnVktDF
SX03ECDz0rgRb1zAcLj+Yif0kuE2SVgPk7q+DNSKSriI/ssQ/+aGpGNVqINmY9ei
2FRuq0iaM9s3SoHVw+clJ0bbNYHWTCzfz+GY3yl6VyDUy0Z8fvfSxct8hOABzG4F
yUPLPWiDBfclQ2wHkKNPOt0wMTwlmcdwMaSEYWrHaTzfMGugoL1IdioVVdqpr+Up
qd7vQqFb56tv8S4QJ7TedPQfNQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:54 2026 by rpki-client