
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier: k848GGr8/0fvC8bLqhTGCxBiLbZyCsqy/A9anlr4xB0=
Subject key identifier: 43:64:5D:EE:EE:E8:C5:5C:B2:B7:A4:13:BC:AD:B7:51:64:9B:29:BC
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial: 0647
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number: 063D
Signing time: Tue 12 May 2026 22:49:06 +0000
Manifest this update: Tue 12 May 2026 22:49:05 +0000
Manifest next update: Tue 19 May 2026 22:49:05 +0000
Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: JFG4qXK5sKPGsCy3aKKgpKRaqXtZZ5GmM6YlpxqGRN4=)
2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: APtBc0Fg5uoB90s7FYUbm7HkOE2poEQup95WnZBKZc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1607 (0x647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Validity
Not Before: May 12 22:49:05 2026 GMT
Not After : May 19 22:49:05 2026 GMT
Subject: CN=6a03ae61-d16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:5f:a2:32:81:05:fd:c0:de:d5:d4:3d:eb:
8a:c3:6f:5e:22:be:6d:62:ec:f2:ad:f1:5b:c7:9d:
1d:61:6b:96:6e:03:a1:b8:7e:44:66:ca:41:07:e8:
0f:54:e1:2a:a1:ce:43:b7:06:6b:ae:c0:86:13:38:
86:0a:98:88:64:f3:bf:79:ea:23:73:14:42:44:92:
49:c8:76:ca:e2:20:d6:8f:f2:a3:7d:bf:50:c7:a8:
86:42:29:a3:8f:c6:5d:1b:d7:c1:20:99:de:73:da:
08:2b:72:a0:73:cb:33:51:b4:2a:dd:d3:56:36:47:
c9:9c:7b:07:78:d9:8d:c6:8f:87:2e:1a:75:1f:c1:
22:30:5a:3b:92:b3:d0:2d:2b:f2:49:da:b5:87:ec:
a6:32:81:53:66:40:14:54:b7:2b:58:41:01:82:c7:
9b:9f:3d:23:ff:98:2a:14:0c:3a:11:59:56:21:de:
1f:6c:32:ab:51:3d:ee:4e:0e:49:00:f0:6b:8d:eb:
70:9d:c0:7b:c7:1f:37:2f:99:f0:09:23:fc:f5:8a:
5b:99:62:ae:c0:07:cd:77:89:7a:15:70:67:fe:ce:
b3:d3:8f:f3:c7:45:3e:b0:8b:1c:ba:6b:ac:15:14:
31:3f:9f:34:7a:d5:dc:0e:59:18:b7:36:29:78:d0:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:64:5D:EE:EE:E8:C5:5C:B2:B7:A4:13:BC:AD:B7:51:64:9B:29:BC
X509v3 Authority Key Identifier:
keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:4d:1b:7c:c0:dc:54:2d:60:d3:00:98:a2:0b:13:55:18:
64:0c:1d:62:ac:63:26:9e:a1:39:94:c3:3f:1e:11:5d:14:a1:
bd:83:62:59:8d:72:11:c5:fd:2f:b8:a6:d0:55:9e:45:a6:a0:
fd:a5:ff:21:94:42:d8:c9:14:d3:31:4a:26:e4:2e:73:b0:1c:
92:3a:cc:23:07:72:1d:c0:b6:fe:bd:9a:5f:69:b5:9b:76:38:
7d:d7:b2:e8:2f:f8:52:d7:f4:77:4a:27:db:cb:e4:06:6a:4b:
31:09:36:96:12:3c:dc:d7:2e:c9:e2:55:db:d5:12:28:28:e3:
31:1b:0c:d0:78:66:e7:85:c0:e7:e5:7e:f9:40:c9:d1:1f:84:
43:6d:9b:7c:d6:31:2b:5d:48:63:89:ef:5d:0b:22:38:16:36:
88:50:b4:1e:9b:c2:bd:3f:e7:0c:a4:90:27:73:d6:8b:cf:c8:
d1:48:48:26:43:e9:72:44:af:73:61:38:a9:bb:08:1b:e0:86:
fe:f6:d9:fc:3b:ef:2c:52:1f:79:c0:20:6c:30:78:70:31:56:
78:8f:b6:b9:17:01:0d:02:5c:dd:80:d1:7f:8f:d0:b1:ec:1e:
2d:ca:c9:9f:ef:13:b4:bc:a6:ec:77:f5:5a:99:42:8b:da:ad:
04:17:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:15 2026 by rpki-client