
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json)
Hash identifier: sLM6Xos5oDT+G39oxGMzeNIyA7UGo5ArqpzsEzYiZhU=
Subject key identifier: 83:AC:B6:97:C5:F6:BB:58:90:9E:65:10:47:BD:5C:0F:F7:15:DA:B6
Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C
Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
Manifest number: CD
Signing time: Wed 13 May 2026 06:57:28 +0000
Manifest this update: Wed 13 May 2026 06:57:28 +0000
Manifest next update: Wed 20 May 2026 06:57:28 +0000
Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: pfTyTyPRnkacXVkqTb2wtNBfpsYqNjT+vLF5HZgP4/4=)
2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: cYV9Wu/6Wqn6zp3BwuSN18Ue5SEFgQnX6CcttNooSvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl
rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
Validity
Not Before: May 13 06:57:28 2026 GMT
Not After : May 20 06:57:28 2026 GMT
Subject: CN=6a0420d8-7663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:e2:35:1b:9e:7a:5c:4e:81:ef:f2:6f:87:
ff:5a:ac:90:ad:d8:eb:58:c0:fe:11:58:7e:bd:30:
c5:39:44:8b:34:06:6a:48:78:fb:ae:f0:4a:74:e2:
10:38:09:02:c9:23:27:9c:6c:d4:2d:89:32:c0:60:
a7:eb:31:cb:97:ce:52:d8:fe:54:1e:67:e0:b0:85:
f3:65:a4:cc:6a:db:5e:e8:02:82:e5:64:0f:b1:ea:
a9:fe:d7:98:7b:2b:cc:5e:24:ae:fa:44:13:5d:66:
9f:c6:7d:c5:f9:40:62:30:a4:c6:a0:c9:fd:91:8f:
6c:6a:77:e7:64:26:91:48:a1:e6:26:fa:57:6b:5c:
02:3b:9b:8a:de:d2:e7:d9:83:cc:93:25:58:a1:8e:
8c:d2:da:45:29:71:d6:37:c3:8c:60:01:41:ab:46:
93:41:3d:49:cc:86:04:e9:1b:2e:2b:a7:56:18:51:
15:d7:1d:8c:e7:de:66:9c:e5:15:b8:14:bb:f1:85:
7c:7b:ae:39:e1:0e:9b:f7:e1:aa:9c:1c:46:07:39:
b3:59:a3:06:df:d8:5e:da:07:70:d3:98:85:ac:e1:
54:4f:16:f6:eb:d0:ee:78:77:90:f5:d3:5f:98:37:
73:59:e2:d7:a2:b2:89:26:17:ca:3e:64:e4:8e:76:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AC:B6:97:C5:F6:BB:58:90:9E:65:10:47:BD:5C:0F:F7:15:DA:B6
X509v3 Authority Key Identifier:
keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:29:e2:44:f5:ae:ce:ab:fc:a0:f4:cc:3d:b3:27:c1:9a:69:
15:d9:be:a7:29:59:1c:38:97:b0:c6:77:e8:0e:4c:e0:48:26:
dc:17:80:88:e3:3d:f2:ad:bc:56:95:a2:6b:9e:ae:4a:37:fc:
6c:92:53:45:b1:a8:dc:ea:ef:a9:6a:4b:18:d7:77:19:b9:57:
17:5a:62:3c:cc:fa:29:1d:83:02:44:7f:4b:e7:e7:87:f5:9d:
6d:ae:f6:11:be:6b:52:42:03:3d:3c:6b:d6:9d:5e:fd:0b:70:
a7:3c:3a:f0:22:96:89:28:0e:4f:39:d4:7d:54:b6:dc:cf:68:
1c:a0:58:64:1c:40:30:29:9d:98:55:a5:4b:78:f8:54:78:d8:
84:53:6b:a5:74:e2:19:e1:e0:da:3d:04:6d:d6:64:50:a6:ca:
81:78:d9:af:65:18:45:10:60:4a:4f:81:5d:c0:74:a5:24:03:
3c:42:dd:4e:c5:32:df:21:75:f0:52:4a:b6:95:42:5c:25:4d:
6d:b0:48:c9:74:d6:ae:5d:c2:29:8a:28:09:d0:5b:bb:b8:4c:
9b:0d:fa:a2:1e:ab:4b:d1:41:19:32:1f:f5:4a:df:6e:2b:e0:
04:0d:9a:7e:eb:9b:ae:41:2a:f9:c9:17:4d:23:a5:e2:80:47:
58:fe:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:18:07 2026 by rpki-client