
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
File: qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft (raw, json)
Hash identifier: EjWU+UwyuU5gsTb91/NldfsKOWyTjXaGEU0CB4uiRno=
Subject key identifier: D2:7A:AC:24:39:B0:14:23:B1:68:0C:04:35:3C:6F:27:27:ED:89:6C
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Certificate issuer: /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
Manifest number: DB
Signing time: Mon 11 May 2026 06:54:19 +0000
Manifest this update: Mon 11 May 2026 06:54:19 +0000
Manifest next update: Mon 18 May 2026 06:54:19 +0000
Files and hashes: 1: qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl (hash: FInHuflNyz3/xxJNtqJC1HzYNhThOQdMYGBeI3X62d4=)
2: FA9003D2D76B11F095EF502678D3641D.roa (hash: o3QxQZu5zodurwcTs5Rk1UZplrBOuwGoI1ym+ksUZ3E=)
3: 73667C2ED76B11F09495728677D3641D.roa (hash: 2Tj5hzFvoJCRrQMRxhtl/1QUyJ76MVlUsJwInbigzME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Validity
Not Before: May 11 06:54:19 2026 GMT
Not After : May 18 06:54:19 2026 GMT
Subject: CN=6a017d1b-7129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:0d:6d:af:4e:d9:8f:46:9a:58:03:08:43:
bc:e2:ef:ce:2f:83:c3:d6:1f:01:5e:ed:f3:31:55:
6a:c4:b4:97:b2:c0:f4:cd:59:4a:5a:c8:b5:2a:bd:
8a:02:8d:2b:47:9f:4c:c7:a3:f2:bf:e0:cd:8e:fa:
e0:81:81:9a:9c:e0:19:0d:ad:51:f8:91:7a:1c:de:
63:3d:bd:54:0f:2b:a5:49:83:7f:5c:35:79:e9:aa:
3b:d3:0c:dd:e5:22:8d:b5:03:91:d9:75:76:3a:e8:
27:b1:2f:47:b7:4e:a2:0a:45:3e:db:a5:2e:be:42:
be:b8:b5:d3:64:d0:e2:a9:a0:b4:c9:57:94:ea:b3:
cf:3e:69:fd:6d:62:42:79:a7:39:30:2b:4a:3f:a4:
8e:12:ad:da:84:95:8f:c7:e8:fe:f2:19:9d:21:25:
01:8f:a3:f5:d9:87:26:b1:c6:6b:60:2e:71:34:3d:
db:43:ca:d9:fc:7b:08:8b:66:ff:21:70:7e:bb:a5:
57:1d:36:19:83:f3:f5:ac:d8:51:5a:61:3e:a2:75:
0f:08:f0:d6:69:1f:db:60:29:0f:24:70:0d:2a:42:
48:90:58:5b:23:66:b9:63:f1:bb:9c:28:97:f0:30:
66:02:62:6d:65:19:13:ee:62:9c:c0:08:f2:92:e1:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:AC:24:39:B0:14:23:B1:68:0C:04:35:3C:6F:27:27:ED:89:6C
X509v3 Authority Key Identifier:
keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:92:10:4a:55:8d:25:fe:5d:2c:ef:9d:9a:b8:c2:50:6e:
ee:37:bc:12:d6:04:fc:47:2f:cf:84:34:08:f2:c2:3b:60:c2:
dd:8f:26:c1:0c:66:da:b4:b3:6e:82:ac:48:1b:a2:26:6c:0c:
aa:d9:76:fe:a8:cb:4c:9d:b7:3c:aa:3b:0f:9e:f2:c6:1f:c6:
61:63:6e:ef:14:66:68:45:7f:4c:eb:49:05:8c:ff:62:58:86:
a8:e4:0e:2f:de:60:d1:3c:5b:4a:08:c9:64:68:e3:18:57:22:
ff:ed:c9:c9:bc:8f:92:5e:91:6c:17:17:07:50:55:02:57:12:
44:1e:57:a5:82:75:ef:22:78:a3:c2:77:c4:0d:bc:23:14:a7:
94:6a:9b:1c:d8:d6:24:b5:42:b8:5e:73:7b:df:ca:9e:bd:43:
b2:75:ab:de:93:d0:86:6f:e2:51:6e:8c:0a:af:b5:64:2b:fe:
03:a7:27:1f:e9:e0:98:a9:3b:68:7e:47:70:a9:f2:e3:65:60:
b0:2e:1a:2b:7a:4e:5d:45:e7:9a:0a:41:0f:18:40:19:d1:3b:
78:46:0b:ae:5c:88:49:3d:63:c5:06:db:2e:7d:18:c6:90:26:
10:fb:77:ff:90:0c:22:fe:af:c5:cd:64:e9:1a:be:8d:ef:a9:
92:c4:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:09 2026 by rpki-client