
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json)
Hash identifier: +C4Y0fHkCbY6bpavBKi9P8E6/r42YD4rWmzmQf2orkw=
Subject key identifier: 61:98:C4:2E:E5:BE:46:CA:96:CB:33:54:28:9E:C8:6A:CF:B6:37:D6
Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
Manifest number: C9
Signing time: Wed 13 May 2026 06:58:25 +0000
Manifest this update: Wed 13 May 2026 06:58:25 +0000
Manifest next update: Wed 20 May 2026 06:58:25 +0000
Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: a8x5y8e3NLC+ChiKvpKMe96SrJvS3OS21TNOz8qEGy8=)
2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: uj9BtH+Gx30PB+Rd8YZACkYl9VczoWS9fHCOeF8FuCQ=)
3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: N+2dubiMuqB/4gWD0ppVA6QZJO1Q/1zqaBt+voV0zVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Validity
Not Before: May 13 06:58:25 2026 GMT
Not After : May 20 06:58:25 2026 GMT
Subject: CN=6a042111-2ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:42:81:50:93:a9:3c:0e:2e:0f:ce:cc:25:58:
ae:41:c1:38:1f:c2:41:3b:2f:2b:a5:46:25:8d:60:
e8:28:a9:2e:09:ca:76:17:b7:d9:e7:d0:98:84:ba:
dd:67:80:98:98:86:53:d8:a5:07:10:45:ef:4c:81:
a0:58:17:db:22:86:8d:fa:23:e7:e4:33:b2:5c:08:
9a:c3:4c:9a:8e:b7:de:4f:68:f6:65:bd:53:00:24:
8e:45:2c:ff:d7:b3:37:52:74:38:43:e3:21:7e:34:
8a:19:3a:55:48:b0:dc:ca:bf:40:58:ae:92:5a:05:
1c:8b:14:08:00:2b:dc:1c:11:a4:40:d7:34:c6:d7:
ed:5a:84:f7:fc:f5:69:7b:2f:3a:eb:41:17:a3:4e:
26:75:23:df:35:3f:ea:36:78:6b:a2:2d:e4:95:d5:
3f:45:f1:87:74:32:4a:3d:2f:8a:3f:54:1c:42:e8:
c3:6c:79:78:f1:31:47:89:77:0c:02:c0:e2:84:57:
ae:bd:7b:98:05:cf:ff:f2:bc:09:71:66:39:a7:e5:
82:2f:29:c7:bc:62:fe:a2:b6:93:a1:5d:0c:96:45:
83:40:2a:03:c0:a2:bb:75:95:9d:69:ee:c0:31:f3:
78:51:4a:73:83:df:a5:b0:83:14:a1:3e:b2:2c:83:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:C4:2E:E5:BE:46:CA:96:CB:33:54:28:9E:C8:6A:CF:B6:37:D6
X509v3 Authority Key Identifier:
keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:b2:7b:42:3e:21:1b:20:2c:19:f1:13:51:f7:f0:56:c7:4a:
7b:48:2b:ed:d8:a9:3e:cf:f9:af:d6:05:18:43:b3:28:3c:90:
4f:75:77:a0:c5:71:07:0a:84:0a:16:f0:21:66:32:e0:71:9f:
15:f3:a3:3e:10:c6:8a:21:18:d3:6b:ff:ce:7d:6f:f4:f3:92:
c8:aa:7b:c4:9e:9b:1c:b5:1a:ca:00:b6:1e:98:ea:07:d0:dd:
8d:6c:35:96:6e:a6:ff:31:b3:18:63:f4:5c:ec:44:cf:c4:b2:
8a:5b:c3:74:d7:6a:07:e9:5e:84:61:06:1d:72:8c:74:a6:03:
23:33:82:04:a9:eb:b7:a0:a5:43:94:47:33:8d:fd:b2:78:26:
9c:89:e8:52:37:0c:00:bc:46:a4:8f:00:3e:66:0a:b3:04:f9:
62:cb:ac:44:ce:01:8c:7c:6a:9f:9a:6e:61:86:3c:78:12:2c:
73:91:75:ac:9a:75:66:9a:5b:52:2b:bf:2c:04:e5:b7:8e:92:
53:86:90:d9:ad:03:57:26:63:2e:02:c6:54:2f:34:63:5e:8e:
ec:a8:97:a8:86:4d:0b:e8:57:3d:c4:37:e6:c9:31:66:7e:8c:
dd:ac:6f:fe:83:12:1f:2a:46:f0:a8:94:93:3f:b1:03:e2:d0:
e7:06:ab:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2RDkxMTAvBgNVBAUTKEFCNjJEOTYzOTA4Q0MwRTNBODAxOTlBNDNEMzEyQTM0
QTA0ODgxRjAwHhcNMjYwNTEzMDY1ODI1WhcNMjYwNTIwMDY1ODI1WjAYMRYwFAYD
VQQDEw02YTA0MjExMS0yZGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6UKBUJOpPA4uD87MJViuQcE4H8JBOy8rpUYljWDoKKkuCcp2F7fZ59CYhLrd
Z4CYmIZT2KUHEEXvTIGgWBfbIoaN+iPn5DOyXAiaw0yajrfeT2j2Zb1TACSORSz/
17M3UnQ4Q+MhfjSKGTpVSLDcyr9AWK6SWgUcixQIACvcHBGkQNc0xtftWoT3/PVp
ey8660EXo04mdSPfNT/qNnhroi3kldU/RfGHdDJKPS+KP1QcQujDbHl48TFHiXcM
AsDihFeuvXuYBc//8rwJcWY5p+WCLynHvGL+oraToV0MlkWDQCoDwKK7dZWdae7A
MfN4UUpzg9+lsIMUoT6yLIMHQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGGYxC7l
vkbKlsszVCieyGrPtjfWMB8GA1UdIwQYMBaAFKti2WOQjMDjqAGZpD0xKjSgSIHw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjZEOS83NzQzRDUxRTFF
NUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdPT29BWm1rUFRFcU5LQkln
ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdmQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjZEOS83NzQzRDUxRTFFNUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdP
T29BWm1rUFRFcU5LQklnZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFbJ7Qj4hGyAsGfETUffwVsdKe0gr7dipPs/5r9YFGEOzKDyQT3V3oMVxBwqE
ChbwIWYy4HGfFfOjPhDGiiEY02v/zn1v9POSyKp7xJ6bHLUaygC2HpjqB9DdjWw1
lm6m/zGzGGP0XOxEz8SyilvDdNdqB+lehGEGHXKMdKYDIzOCBKnrt6ClQ5RHM439
sngmnInoUjcMALxGpI8APmYKswT5YsusRM4BjHxqn5puYYY8eBIsc5F1rJp1Zppb
Uiu/LATlt46SU4aQ2a0DVyZjLgLGVC80Y16O7KiXqIZNC+hXPcQ35skxZn6M3axv
/oMSHypG8KiUkz+xA+LQ5war/g==
-----END CERTIFICATE-----
Generated at Wed May 13 11:15:46 2026 by rpki-client