
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json)
Hash identifier: 9HLqUOUkwFJ49JJWqqoY2QCkOzvraRscrnat4IKaPZc=
Subject key identifier: 7F:68:AC:9A:0E:37:2F:DA:43:D5:93:12:08:1C:BE:06:34:1C:A6:AB
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
Manifest number: A1
Signing time: Mon 11 May 2026 07:32:49 +0000
Manifest this update: Mon 11 May 2026 07:32:49 +0000
Manifest next update: Mon 18 May 2026 07:32:49 +0000
Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: v9r1eIvNvN4kKmCRn6jnOO15tIvLcce6OOqntlxum6k=)
2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: EriMxkKUBJx5Xw15e8N5dYbbr/AUbZc0WvM0QC4DQFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Validity
Not Before: May 11 07:32:49 2026 GMT
Not After : May 18 07:32:49 2026 GMT
Subject: CN=6a018621-c85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:85:6b:d8:de:37:43:c1:41:b5:a6:34:53:
ec:3c:86:71:46:53:0f:e9:98:9a:2d:13:68:42:1d:
3a:45:25:66:bf:30:97:8e:95:ce:7b:90:29:56:ab:
b7:63:aa:a6:90:3f:a2:d1:51:4a:3f:a0:87:e0:57:
5e:c1:ea:b5:af:f0:3c:e2:94:cd:90:4b:2e:54:75:
15:a8:3d:14:ee:06:2e:90:87:3b:39:03:8c:e4:58:
33:f6:c2:8e:63:01:3c:6f:98:5c:f6:f8:35:91:94:
e4:1b:32:a0:06:58:1c:1c:83:87:fc:ca:63:14:c3:
7e:a0:db:91:18:47:aa:aa:18:db:76:7a:d7:5b:aa:
f2:26:95:13:9a:1b:f2:90:eb:e8:b7:c1:83:50:a9:
dd:33:be:da:d8:96:31:7c:96:53:7f:1e:1e:7d:0d:
a9:a5:fa:dc:4a:49:33:00:b3:5f:c0:b9:29:07:f9:
50:91:54:22:ff:0d:58:75:60:03:4d:73:9b:e6:48:
46:44:65:6f:c2:58:98:cf:17:20:07:31:3a:a7:70:
63:64:b5:c1:10:2a:75:6e:07:3b:33:48:c2:08:2e:
74:e7:a8:ed:05:c2:2c:a3:b5:48:11:98:e8:04:22:
09:5a:82:98:b7:02:49:09:a7:4d:99:a7:01:01:18:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:AC:9A:0E:37:2F:DA:43:D5:93:12:08:1C:BE:06:34:1C:A6:AB
X509v3 Authority Key Identifier:
keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:11:b7:46:ad:4a:25:d1:46:66:27:67:b6:04:a7:4e:b1:20:
fe:4b:ca:b0:54:c9:3c:35:ea:74:4b:65:ac:07:7d:d4:23:55:
83:7b:96:d7:36:29:0d:df:db:99:1e:f7:5f:33:18:c7:e4:a9:
28:60:23:5f:b7:7f:d1:dc:b2:87:a4:35:1d:42:3c:95:85:07:
79:e2:30:67:e9:64:75:4a:de:bc:31:09:56:f0:5c:06:2a:a5:
77:a2:eb:69:50:dc:c0:6a:30:e0:af:1e:dd:88:21:98:10:5d:
44:fd:ad:2b:8a:4f:8f:2f:59:75:87:11:62:a5:64:3c:76:53:
4e:7d:fc:ad:d4:49:79:f9:2c:04:83:7d:ac:69:2e:61:2c:5e:
7f:9f:ac:ad:8d:ff:85:c7:cd:54:68:0e:61:4b:41:c0:62:68:
51:7e:a7:69:c2:a4:c9:79:99:8f:e7:ee:6d:77:91:7d:1e:55:
14:81:8b:59:ee:72:a8:8d:46:c7:70:cf:89:df:01:23:20:ae:
83:ef:05:10:bc:40:17:55:e7:02:5e:71:47:58:cf:d3:d1:ca:
02:0e:d1:3f:60:90:fe:9f:9f:36:11:2a:f4:a9:a2:0f:3e:71:
1b:b4:59:c9:f2:cb:90:d0:c0:10:c1:7c:d6:dd:91:ec:1a:f8:
b4:6a:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:08 2026 by rpki-client