
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json)
Hash identifier: l129MIG3nRipgqxnZrZpBNZS4bfEnXiuCNSodwJNYiY=
Subject key identifier: 97:87:48:77:EF:17:55:31:10:A0:01:11:69:BC:EB:69:5D:0E:78:43
Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Certificate serial: 2E3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
Manifest number: 2E1B
Signing time: Tue 12 May 2026 15:29:58 +0000
Manifest this update: Tue 12 May 2026 15:29:58 +0000
Manifest next update: Tue 19 May 2026 15:29:58 +0000
Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: 4BQRC61WKWK51D7XMG7qHuvcwemBzqLxnRqdjw6vmd4=)
2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: RRtlZPLxNXoaDY5ECfLrXwJY6e1jfEEkw/UE23pwwM0=)
3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: Wc0o48iov7rXKqvl8HBWTbUP09bv/Hb3Sn4CiAQcsog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11837 (0x2e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Validity
Not Before: May 12 15:29:58 2026 GMT
Not After : May 19 15:29:58 2026 GMT
Subject: CN=6a034776-9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:e9:f9:42:bb:02:34:cd:cf:b5:24:63:5d:
eb:76:70:bc:ea:78:db:95:a9:e2:f4:e0:4c:37:d6:
3b:01:25:5f:a4:47:12:f1:78:f4:b5:4d:81:31:01:
54:2c:66:ec:90:4a:72:5d:b7:20:a7:ee:16:1f:69:
c8:70:29:48:a7:94:00:dd:70:7c:d4:bc:b4:f7:c6:
83:29:fe:e2:f1:4f:be:e0:d1:02:8c:54:3c:c9:f6:
01:6b:19:06:37:b1:d9:5b:d9:0f:b7:0f:81:0d:07:
5f:5e:d4:6e:bd:5d:64:2e:23:a0:68:d9:fd:40:4c:
d9:6d:d6:4d:fc:e6:1a:b7:96:8b:43:0f:47:73:c8:
c7:05:5f:99:62:ca:76:1d:0a:2e:ee:e6:0f:a1:1c:
58:9a:d9:40:47:e5:ab:09:c0:98:4f:cd:52:ac:ab:
3e:37:08:75:78:39:3e:c2:65:96:46:3c:b7:15:8c:
87:06:35:f0:ff:b8:58:19:66:c8:98:d7:28:b0:40:
e0:6d:3e:42:1f:26:e4:b5:54:86:83:42:66:41:ae:
73:da:80:2c:b4:51:f3:33:d6:40:cc:43:c6:86:52:
c8:f1:f3:89:3e:c7:ec:56:89:d2:a4:e1:94:21:65:
5c:dc:32:da:49:6f:b2:1d:ab:8c:44:17:ca:82:1b:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:87:48:77:EF:17:55:31:10:A0:01:11:69:BC:EB:69:5D:0E:78:43
X509v3 Authority Key Identifier:
keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b2:0e:e5:7b:00:a6:3a:ff:3b:a5:5e:ff:51:26:d4:28:05:
16:52:b2:c2:58:80:5b:bc:6b:77:ef:07:fd:8f:33:67:ec:2f:
f1:eb:01:a1:c5:2c:a1:9d:7c:b5:4f:0d:85:c8:8e:87:ba:25:
77:7f:b4:ea:d3:d2:bf:b5:b3:e0:a2:14:1c:b5:4e:65:d4:e4:
8e:5d:77:f1:b0:68:b0:5b:47:d3:de:8c:37:23:00:4b:97:90:
f4:aa:e6:c7:01:c9:38:db:60:c7:be:cb:87:15:c0:3b:57:4c:
ae:f0:08:ab:f5:5c:3d:ba:4e:32:5a:e4:a6:13:28:0e:b1:ac:
72:93:53:ef:a1:fe:73:da:53:9b:d1:d7:eb:1f:9a:c8:52:ce:
89:30:f8:e9:d9:fa:34:15:01:3d:7c:ac:77:a9:f8:84:b4:ce:
70:6e:c0:6e:b6:a3:14:18:90:88:bf:53:f7:cc:4d:6e:7f:bd:
eb:17:b6:6d:71:d0:b4:63:07:5e:6f:82:33:82:53:f7:87:bc:
df:c5:a4:7f:53:b3:42:ee:03:0d:84:95:3f:5d:f5:1c:fd:5d:
45:29:98:ec:07:76:89:aa:6a:fa:f2:43:c0:b3:30:00:21:20:
42:6c:af:dd:80:c5:7f:c1:00:12:6a:c2:bf:55:8e:e6:27:c2:
9b:0c:35:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:53:23 2026 by rpki-client