
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json)
Hash identifier: uy7g140tCGrXAU5eVwmgG6caj+Zp2e12mofkNiBwhY0=
Subject key identifier: 3A:C1:EA:25:49:F3:D3:E0:BB:3E:50:F4:21:B2:BC:A2:03:FD:98:0E
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial: 198A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
Manifest number: 196D
Signing time: Tue 12 May 2026 16:26:27 +0000
Manifest this update: Tue 12 May 2026 16:26:26 +0000
Manifest next update: Tue 19 May 2026 16:26:26 +0000
Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: xMkP7psUURV/VizdvrFc4WOMr9cG7wrHnmVGEKm/fGw=)
2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: i4NWXoIOqvLLIDoT5vnJRlML/dfECc5wW/haWblxm44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6538 (0x198a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Validity
Not Before: May 12 16:26:26 2026 GMT
Not After : May 19 16:26:26 2026 GMT
Subject: CN=6a0354b3-5148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:75:b3:44:c4:35:d1:bc:48:35:bd:0b:30:
22:a5:c4:fe:40:03:6e:a1:72:94:28:1a:11:cd:9d:
6a:92:48:9a:18:b2:ff:30:c4:de:5d:96:d3:4a:08:
28:70:89:2e:d1:98:6a:bc:3f:b7:0a:a8:ff:5a:29:
c5:10:30:57:09:ef:ce:63:5d:1f:e8:6b:35:d1:9d:
cc:11:60:0e:f6:2e:49:a2:a8:ef:6a:e1:31:3d:e3:
6d:a4:1b:ee:fe:f6:7b:a5:14:56:48:5c:46:92:41:
75:a7:3c:8e:82:c1:7b:8a:4d:dd:18:51:ec:c7:76:
76:dd:a2:a1:15:2e:ea:25:87:9e:88:e7:a0:6b:81:
fd:19:5e:0d:c4:ba:9b:f0:9f:25:ea:0e:ce:bc:8c:
e8:5c:94:29:07:a1:78:cb:cf:1c:9c:44:4b:d9:3f:
8e:11:f1:6e:54:16:61:fc:2e:d8:2c:cf:13:e2:5e:
60:e9:62:c9:83:6d:24:9c:4c:5b:c3:9c:b3:4b:01:
84:6f:2e:db:f7:a4:38:b6:bf:7c:69:bb:51:be:d8:
9d:2a:97:20:e6:ed:a4:f5:80:f2:5f:e5:ad:1d:e2:
2a:ce:75:39:e0:14:28:d8:08:41:2d:ee:48:5b:f2:
f3:e5:30:00:43:e7:11:12:da:5d:37:7c:11:e3:29:
be:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:EA:25:49:F3:D3:E0:BB:3E:50:F4:21:B2:BC:A2:03:FD:98:0E
X509v3 Authority Key Identifier:
keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3b:e1:58:7e:de:64:ab:5e:f5:27:91:5c:2f:0a:b9:dd:8c:
a4:38:83:1d:fd:4d:9a:44:ca:3b:48:6d:3b:e5:21:58:a0:8d:
64:96:53:44:c5:e7:03:6c:16:5c:12:29:6d:ae:b9:5c:05:00:
44:df:7b:9c:8d:e3:a6:2b:b0:0a:11:11:87:87:38:7b:4f:f1:
33:62:31:eb:af:33:f9:ff:9f:0b:9e:29:d1:42:bf:1d:23:97:
e2:ac:9c:61:7d:26:9e:8d:81:f4:ca:3e:48:e1:a7:97:4a:77:
7c:59:f3:79:3f:5a:9e:ae:ca:c5:68:4f:ce:b7:24:50:e5:70:
01:ff:e7:7b:2f:a9:b2:09:89:63:68:4d:54:1d:87:0d:01:ba:
11:9f:8c:8c:31:cd:3c:92:e4:f0:a1:4c:db:16:cb:49:85:6d:
7e:88:b0:82:b4:c2:9d:8d:1f:cd:da:12:a3:9e:69:34:43:2c:
38:2f:79:c8:db:40:56:8c:fb:a0:9b:97:38:0c:c2:aa:90:5e:
f3:eb:52:d2:27:77:25:4f:2c:72:3c:1e:f6:d5:82:47:1e:1a:
22:9d:56:92:49:11:3e:bb:27:05:2e:d3:ed:32:12:e9:ea:90:
88:6f:6c:72:fe:14:51:a8:2c:ed:63:2a:9f:df:89:0c:01:0d:
f8:c4:4c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:11 2026 by rpki-client