
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json)
Hash identifier: ac6STUsA03Ga5GRkeDSYhoiM/v98cmBeXDcqMF7AC84=
Subject key identifier: 6C:F3:F8:A7:A1:12:0D:93:82:67:3C:5B:5C:3C:51:71:32:9E:01:8E
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial: 09F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
Manifest number: 16C1
Signing time: Tue 12 May 2026 18:21:06 +0000
Manifest this update: Tue 12 May 2026 18:21:06 +0000
Manifest next update: Tue 19 May 2026 18:21:06 +0000
Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: RJynTMZ4sud0yAAgcxmNZtNnLmny/nsgtshQbvbDD/M=)
2: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=)
3: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=)
4: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:21:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2551 (0x9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Validity
Not Before: May 12 18:21:06 2026 GMT
Not After : May 19 18:21:06 2026 GMT
Subject: CN=6a036f92-002e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e3:c8:0f:ca:fc:b1:33:49:b7:60:47:6c:8d:
53:70:89:3b:53:22:fc:d4:33:85:ca:5c:92:76:8c:
8b:4a:76:28:3c:ad:3d:34:6c:e9:db:8b:cd:35:02:
72:d2:01:aa:c6:b8:2b:56:ec:51:9f:ec:a1:b7:5e:
75:18:6e:fb:7f:61:fc:fc:92:a2:2c:ea:8f:a4:b1:
5e:c4:92:d7:45:d0:82:81:b7:39:30:20:57:86:0e:
3d:88:ea:77:c0:2b:f4:4f:16:67:af:2d:0b:00:c4:
d6:3c:43:7d:90:d3:2e:0c:73:f9:7b:2a:74:a6:d7:
99:f2:fa:5d:a2:5b:87:c5:64:29:0b:06:6a:31:46:
5a:48:ad:30:8a:8e:d2:6b:60:70:41:dd:20:b4:fe:
fd:2d:f1:fb:40:ef:7e:47:e5:2b:65:b9:35:72:e7:
6f:f7:09:7b:43:b1:b5:ae:69:17:4f:65:79:fe:0e:
ad:ac:78:05:12:57:b4:20:0c:2a:ad:93:97:cf:e5:
8d:84:ee:03:d3:02:75:a9:51:2c:82:74:e7:a4:0d:
a2:10:4f:37:72:e3:eb:45:61:f1:55:54:58:ff:da:
fd:a8:b3:fc:89:2c:f5:da:06:d6:b9:40:ed:4b:04:
3b:09:80:54:a6:c6:75:67:3e:37:05:5f:79:29:0c:
c9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F3:F8:A7:A1:12:0D:93:82:67:3C:5B:5C:3C:51:71:32:9E:01:8E
X509v3 Authority Key Identifier:
keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:69:60:c4:89:97:03:17:27:50:26:f3:d8:d1:8a:f1:83:c7:
4c:dc:9f:c2:8d:0d:26:dd:a3:23:0a:35:a0:ac:5b:1f:8a:72:
1c:52:44:56:d6:57:03:ba:63:8b:18:5c:47:6e:b3:8e:6b:da:
71:c7:85:88:57:03:d1:6a:01:b4:b7:a1:b4:69:31:61:76:cf:
e1:d8:3f:4f:c3:87:b1:b7:fc:53:a3:7f:1f:cb:83:be:e4:42:
9a:02:36:92:0e:b8:e2:91:7a:9c:e0:fd:ee:a6:9e:f0:ae:3b:
3c:a9:a1:a6:37:ea:59:43:2c:d8:b3:87:85:9c:56:8a:68:d7:
bd:c1:ba:0f:3b:d6:9f:8d:8c:cb:9b:f5:92:cd:dc:ac:ca:88:
57:70:f6:f0:9d:ea:16:8b:be:ff:30:5f:ab:f3:99:18:6a:bd:
ae:56:9a:13:ef:bf:fc:ba:ee:13:20:85:39:3b:e1:36:be:7f:
79:46:c4:89:15:cc:70:f6:9a:c6:f1:bd:fd:b6:f6:bf:c5:45:
52:2e:4b:31:36:0b:81:25:fc:3b:f6:81:b0:ba:02:59:fa:68:
3c:19:c6:5e:47:c6:f9:6c:f3:55:9b:c2:f8:58:2e:a7:2e:ab:
05:fc:a6:68:ec:4a:0f:5b:c8:d7:4f:4e:34:4e:c7:15:da:3d:
e3:2d:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:37:05 2026 by rpki-client