
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier: y1Xbzf4q8xoUc1vuLy4P/LEvs0krdJmdJzUV+6HeuBg=
Subject key identifier: 90:9D:62:57:A2:97:5E:B6:AC:1A:00:81:2A:A4:37:E9:53:EA:A7:E0
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: 027B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number: 026D
Signing time: Mon 11 May 2026 02:10:39 +0000
Manifest this update: Mon 11 May 2026 02:10:39 +0000
Manifest next update: Mon 18 May 2026 02:10:38 +0000
Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: zkcHr0iaOpD7OpuaszBPM7Emfasx93RhaiAsM9Fn6Gc=)
2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635 (0x27b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: May 11 02:10:39 2026 GMT
Not After : May 18 02:10:38 2026 GMT
Subject: CN=6a013a9f-e0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:c7:11:e0:ca:d8:d4:69:dc:7d:0e:36:0e:
8e:98:74:ac:92:c1:79:e8:77:a4:27:3b:67:31:dc:
89:7c:a9:d9:c3:fa:77:50:28:35:a0:b8:94:2f:28:
22:70:13:9e:50:48:e9:1c:da:e7:6b:89:93:fc:41:
db:21:5a:87:ec:1d:d6:86:e0:62:e0:99:90:83:0e:
fd:35:15:03:23:84:ab:d2:f9:48:e9:08:56:08:00:
8e:e2:78:03:f2:2a:d2:d5:ad:b4:ca:a1:02:56:d4:
ec:66:74:e3:90:1c:20:80:74:b2:a2:f3:cb:d0:a0:
b0:9a:bf:57:0a:c6:4e:b5:0b:53:38:7c:35:f2:a1:
d8:72:41:6c:00:cd:d4:d0:46:59:56:22:b2:af:4e:
26:31:2d:ce:4a:4a:52:0e:3b:3d:32:76:11:24:03:
37:87:64:01:c8:46:a0:0e:28:fe:f3:db:bd:40:58:
1c:83:54:cc:99:21:6a:7d:f7:74:a9:cd:82:cd:ac:
f0:a1:d0:d2:95:29:11:ab:0e:88:a9:62:87:cc:d3:
37:3d:19:8e:44:ba:ac:36:e4:9a:a5:0e:55:09:2a:
d9:59:c5:6c:9d:c7:96:d0:57:6d:77:79:e0:c7:6c:
4b:86:20:ac:59:f8:d0:aa:c3:c0:9e:a4:91:3d:9b:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9D:62:57:A2:97:5E:B6:AC:1A:00:81:2A:A4:37:E9:53:EA:A7:E0
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:a5:25:bc:6e:fc:e7:a1:df:4d:01:6a:f5:14:30:a9:b7:
9b:34:ec:8d:d4:4a:2d:3f:fa:c8:95:53:4c:ec:62:3d:47:78:
42:45:49:79:ba:dd:46:37:ae:76:d0:fa:34:56:23:37:40:6d:
90:63:d0:25:9b:9b:96:53:82:2e:18:0e:e7:5c:ef:43:ce:18:
79:f9:8b:59:e5:c4:2f:fa:d6:dd:e2:d2:52:e9:7c:3b:99:23:
5c:a2:8b:92:10:2c:67:92:f8:df:a9:10:f4:79:58:e0:6f:6c:
76:36:4b:8d:a1:27:00:6e:0e:a2:41:9e:31:c3:99:36:4b:dd:
f8:61:d4:00:25:38:cc:19:6f:e8:41:6d:7c:f8:a7:82:3f:64:
70:a3:81:54:6d:6e:0d:9c:83:81:47:43:f6:6f:18:a7:b0:6e:
31:08:c7:52:1e:e9:89:07:89:63:5b:36:bb:b3:ab:db:02:e5:
44:9e:fa:e8:bf:3e:9b:3f:40:cc:94:b7:4a:8a:a2:33:cc:a2:
14:d5:86:b2:b7:50:b8:7c:c5:57:11:e5:ee:3e:1e:be:3e:e7:
2f:2a:08:ca:0b:1e:72:10:60:73:ff:5b:9b:01:77:bd:4b:15:
a1:2b:21:9d:39:8d:53:19:a7:d5:88:9e:54:09:5f:ce:cd:25:
01:3e:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:13 2026 by rpki-client