
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier: wGrtaz66/qsHqx2AYkHKQtiz5bbi40GGQLgrPEZcH7Q=
Subject key identifier: 2D:D1:28:A6:7A:6A:3D:79:D3:64:FC:70:33:D5:90:AD:6C:B0:12:03
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number: 0226
Signing time: Wed 13 May 2026 02:49:03 +0000
Manifest this update: Wed 13 May 2026 02:49:02 +0000
Manifest next update: Wed 20 May 2026 02:49:02 +0000
Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: O3YcFvu6nXQdcrgubu75A9oosRvzxvuW4MDAbwZuFKc=)
2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: zpm4WI/rpoX+PhSp4A1fa7cTi+uUSsWISqGvT07i/hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Validity
Not Before: May 13 02:49:02 2026 GMT
Not After : May 20 02:49:02 2026 GMT
Subject: CN=6a03e69f-0d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:83:fc:53:d7:92:9c:3c:7b:84:81:5b:4a:
6d:20:74:90:d9:0c:32:01:e5:0a:b1:4f:92:d7:1e:
a3:f3:0c:8c:7f:49:09:fd:32:fe:ae:df:78:d9:e9:
c8:51:eb:d8:55:e7:de:5a:01:0c:ef:52:bf:01:a7:
f8:ff:e4:11:78:cd:b3:74:cb:62:bc:5f:0f:f1:54:
27:33:c7:a6:87:65:16:14:7d:b7:ac:0d:bf:a6:9b:
52:ea:b7:2f:43:02:1b:e9:f2:65:4a:09:c5:7e:7b:
02:64:eb:5b:cc:6b:5d:73:91:23:4c:a7:42:ec:29:
e6:7d:d4:30:24:e2:ce:52:a2:90:dd:e4:4e:39:d1:
51:8a:2d:fe:dc:cb:c0:48:d6:fe:c4:b6:fc:39:39:
29:f8:3e:0e:0f:11:1a:b2:5f:6d:5d:d3:6e:93:55:
db:8a:5d:bd:dc:2e:34:45:c9:ca:5e:b1:1b:a9:e9:
71:19:04:ab:93:c7:95:6f:8a:71:16:72:4f:2c:e4:
1b:2f:c5:bc:74:b3:09:3a:41:40:de:33:dd:ef:35:
f5:2d:e9:60:31:b2:a1:44:09:c5:56:f4:a7:a5:5b:
16:16:9e:6e:b5:3d:65:8d:33:f8:5f:b8:7d:ac:3f:
b6:98:4d:7a:b0:fe:60:2b:9e:83:b2:38:23:3a:ab:
2e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:28:A6:7A:6A:3D:79:D3:64:FC:70:33:D5:90:AD:6C:B0:12:03
X509v3 Authority Key Identifier:
keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c8:30:96:89:16:f3:67:9d:e3:df:e5:92:9d:e0:1a:1d:36:
9a:8e:13:3a:50:e3:a7:71:82:fd:1b:d3:e1:26:44:18:9c:07:
3e:39:4e:19:fa:b1:13:27:37:0a:34:1d:eb:67:e6:7d:32:b5:
a1:87:1a:ff:88:0b:75:c9:48:33:80:3f:de:83:b1:13:08:ca:
33:0d:66:80:bb:b3:09:53:a2:e5:6d:1e:2a:54:6a:4b:f7:c9:
f5:12:e8:eb:55:fa:b7:10:4e:95:c1:a4:3d:fd:7a:fd:6a:41:
30:ed:00:63:95:ca:8e:9b:61:5f:57:2f:1a:ea:3a:b6:0b:c4:
2e:b7:26:53:61:b6:28:9f:45:3c:7c:0a:f8:11:aa:c6:ae:64:
4e:65:c8:47:15:cc:79:b3:09:d9:a7:ce:5f:12:6f:d7:84:0b:
29:74:f4:48:2f:36:7d:ea:7c:89:d5:4b:b3:c0:33:cc:cf:6c:
07:69:72:74:7c:0b:89:aa:4d:4d:21:67:62:84:8d:d6:dd:df:
8f:36:49:c9:7f:43:a0:a4:18:76:c9:98:0c:bd:b0:02:f8:00:
d0:cf:08:fb:cb:b7:a2:bb:54:47:48:78:7b:c5:9b:74:68:f4:
7e:a6:7e:0a:3a:2f:4b:11:fd:82:0e:dc:9c:44:7b:47:23:88:
76:b3:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:48:39 2026 by rpki-client