
$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier: cC3o1muX4c/pgkJQDfUFACzZzKivQV5YxZ8juq8plEc=
Subject key identifier: AE:DF:31:DF:0F:D9:97:B1:A1:95:3D:BC:E8:30:D6:E3:FE:B0:25:B8
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number: FE
Signing time: Wed 13 May 2026 06:19:28 +0000
Manifest this update: Wed 13 May 2026 06:19:27 +0000
Manifest next update: Wed 20 May 2026 06:19:27 +0000
Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: Cbftm7zPCgXA0ObYdtHY0Os3t/eUwEzjZEtMb4kqEY8=)
2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Validity
Not Before: May 13 06:19:27 2026 GMT
Not After : May 20 06:19:27 2026 GMT
Subject: CN=6a0417f0-0460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:1d:f0:03:1c:b3:fb:45:80:4f:47:c5:13:
44:9a:10:27:2b:9a:d2:18:6b:e2:69:19:89:46:78:
ce:5a:46:2e:a0:91:13:b4:67:34:dc:08:6b:b7:05:
e0:a9:30:59:39:f9:cc:af:d7:f3:5f:12:1e:d1:09:
8c:31:2e:0a:bd:cb:59:ae:dd:e1:a4:d8:f0:96:89:
85:ab:c5:df:cb:30:d5:75:ac:09:a2:90:1c:ab:db:
a7:dc:35:51:48:56:2a:e4:06:7d:09:78:6b:1b:31:
5d:fc:56:dd:4d:b5:b6:8a:0b:cb:19:44:3d:c7:99:
d9:c8:c9:bd:f8:1f:45:e6:0d:ec:40:06:d9:55:73:
15:39:4e:e2:b9:7e:85:bc:a8:4e:8a:9a:e1:c2:db:
51:93:eb:87:f1:42:58:13:f6:b5:51:41:d5:f6:2f:
6a:f7:40:d6:c0:0b:d7:6b:3a:68:c0:97:ff:20:cb:
60:eb:95:54:39:b9:34:1b:b9:aa:58:63:5b:5f:3c:
09:14:a3:56:f2:a8:3f:cf:60:ca:69:b6:fc:9f:57:
05:29:df:99:92:63:d5:52:7f:c9:0d:d1:3a:40:e2:
eb:fc:b6:71:e5:9a:20:14:9f:2d:3f:3a:3f:f0:4d:
18:08:ab:5d:aa:6f:4b:e4:6f:2b:96:6c:84:32:ef:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DF:31:DF:0F:D9:97:B1:A1:95:3D:BC:E8:30:D6:E3:FE:B0:25:B8
X509v3 Authority Key Identifier:
keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:28:b1:3f:be:cb:f7:ca:6a:cf:e1:0f:7c:eb:fd:80:32:49:
46:25:b6:0f:38:e3:48:57:ef:a3:19:23:e0:a2:55:18:f0:44:
6a:a4:70:66:4e:a5:98:ea:1d:1e:92:94:20:bd:5e:4c:63:5b:
65:1c:c1:75:25:a6:0d:99:37:9a:ed:14:eb:30:9a:94:d9:70:
fe:e8:e5:b6:67:d7:d0:61:e0:6f:7a:83:a1:03:46:13:59:dc:
d0:fb:a4:b3:99:dc:ac:7c:84:41:88:17:13:d3:32:a6:e9:13:
6b:93:26:c1:3c:e0:ac:01:c4:38:1c:a6:f3:51:e8:90:f1:4e:
4c:93:ad:1f:64:0e:85:63:d1:34:5a:2c:24:05:04:20:63:83:
5b:b5:80:92:36:13:19:ff:c0:7d:7c:f8:f5:77:00:55:fe:5c:
64:29:f5:87:57:ba:cc:da:03:11:61:55:7f:9e:14:86:c2:8a:
53:52:53:aa:8f:59:8b:9d:2e:53:38:57:f3:b6:ba:6d:9a:86:
ff:77:e5:ad:56:6f:5c:a9:a0:86:a8:13:97:32:fa:79:76:0c:
08:f9:c5:5b:3e:9b:76:b2:6f:23:17:a1:cf:fa:a7:5f:ce:b0:
a9:e0:d6:94:d4:72:44:83:a1:d6:23:99:4c:a6:69:60:6b:22:
18:33:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:42 2026 by rpki-client