
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
File: QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json)
Hash identifier: KY7kFLpLfVm+UOGNJJbft49AglIbgef1u/IkgWYfE44=
Subject key identifier: 46:E7:99:84:22:C2:D3:53:EB:77:FE:9B:C5:25:FC:3D:9F:2A:EF:AB
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
Manifest number: 013D
Signing time: Wed 13 May 2026 05:29:41 +0000
Manifest this update: Wed 13 May 2026 05:29:40 +0000
Manifest next update: Wed 20 May 2026 05:29:40 +0000
Files and hashes: 1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: 1aho/XV9TfT2g0mGyRKIvexkiwCK+Hbt2H2EaHWF7z0=)
2: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (hash: GxPDZkNh8z2WUss9dJUvSPDera09jYCHZ5i3DQqj99E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Validity
Not Before: May 13 05:29:40 2026 GMT
Not After : May 20 05:29:40 2026 GMT
Subject: CN=6a040c45-5178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:f5:52:4a:d0:1a:4e:2d:b3:e9:74:b3:13:
05:43:ec:64:a1:91:5d:d9:bb:07:4a:c0:3e:ce:4b:
76:bd:5e:78:9d:41:54:23:11:d0:4c:c4:b9:74:66:
f8:9e:27:b2:69:6f:ff:5b:33:c0:e4:98:10:5a:f2:
9b:12:c3:4f:fc:d7:1d:15:aa:66:52:ec:c1:d3:00:
2f:97:e0:1c:64:20:19:a4:32:d8:53:60:20:5c:82:
cb:5a:50:91:a2:80:1d:d8:15:5e:18:61:62:78:9c:
00:cc:03:ae:42:a1:3e:a7:aa:9b:57:eb:6a:ff:9d:
9a:f3:4b:4a:d0:e4:67:b8:bb:eb:af:f8:a0:37:b2:
d1:d3:b2:54:b6:87:38:fc:7c:54:06:3e:3a:95:75:
67:d5:27:cb:96:f0:c8:b6:43:34:ae:7c:6f:ed:88:
b3:93:2b:15:f3:07:40:f6:b6:13:9a:13:19:d9:dc:
49:f1:ae:9b:dc:97:f0:36:c7:43:c6:30:a7:a2:16:
19:85:d8:2e:bf:d5:97:51:45:59:23:6d:9a:f0:61:
e3:e9:1d:e4:47:78:7b:b4:aa:ec:9e:06:e5:9f:f3:
e1:e9:d2:59:49:dd:3c:17:5f:71:ca:a9:ea:7a:64:
ee:90:03:c6:b7:8a:83:72:fd:d5:ea:21:71:7f:8e:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E7:99:84:22:C2:D3:53:EB:77:FE:9B:C5:25:FC:3D:9F:2A:EF:AB
X509v3 Authority Key Identifier:
keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:53:37:ec:ba:b6:38:ed:47:f8:36:bd:5c:84:ac:3d:3d:b2:
2e:de:49:9b:97:13:3c:65:11:57:aa:18:a8:20:a3:d6:1f:0d:
2e:07:ea:5b:2a:fc:bc:83:76:19:4b:2b:4f:57:02:0d:79:c9:
25:c6:16:f6:b8:5d:72:30:f0:26:88:40:32:1b:0c:45:fd:7d:
fb:1b:d0:be:55:7b:18:85:76:3e:19:38:51:db:53:ff:89:a9:
0f:9d:8b:12:3b:b3:21:12:97:e8:0b:18:e6:40:b9:cf:ca:1d:
f9:2c:32:3e:7a:e0:48:20:82:3e:31:44:88:06:c4:ad:1e:52:
7a:fc:25:61:33:35:e0:b5:59:c4:d7:c5:f6:a4:1f:e3:cc:53:
f6:75:c4:d0:3d:7e:d5:de:1f:dc:b4:e4:ba:d0:cf:c9:cc:e7:
b8:a3:92:03:9a:1e:a8:d5:34:c5:18:75:7e:1d:f7:b0:64:5a:
f6:f1:a4:a0:72:67:00:cc:99:f8:fb:15:fe:44:d8:02:34:3e:
70:60:20:2e:3b:b0:46:0a:8f:b7:03:4e:e8:aa:79:ed:4a:f9:
01:08:21:11:a6:b0:f5:03:fe:5b:60:16:74:32:db:7c:cb:ba:
8e:7f:b2:a6:bf:82:86:d6:17:2f:d2:3c:d2:9f:2e:32:4a:c5:
68:37:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:57:11 2026 by rpki-client