
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: a1kXuqouPVouao484XffqOaYDOAIFdEbZEBymi77zQY=
Subject key identifier: B2:6B:3D:96:B8:E3:5D:1D:5C:B7:79:2A:00:97:5D:97:90:17:52:9B
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 0849
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 083F
Signing time: Tue 12 May 2026 21:00:57 +0000
Manifest this update: Tue 12 May 2026 21:00:56 +0000
Manifest next update: Tue 19 May 2026 21:00:56 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: Do74W9oWdw7gPFV/keyU6DjRcp9E/w5iyl6HBCmq3fo=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: May 12 21:00:56 2026 GMT
Not After : May 19 21:00:56 2026 GMT
Subject: CN=6a039509-1507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:ac:94:1f:e3:b9:a2:e3:c1:b1:9a:c1:0c:
fb:91:b8:d9:83:5e:74:1b:c0:a3:08:78:d7:74:13:
c7:ee:36:13:44:50:cc:b5:30:77:4d:d4:cb:6b:b7:
e0:3b:4f:81:60:c3:f2:66:99:ca:96:ba:31:d5:5a:
e6:f4:90:d4:f0:d5:9a:fa:f7:e9:ea:56:2b:e3:ee:
de:e3:c2:21:a0:41:f6:b9:c3:23:b6:42:06:37:aa:
18:57:5b:31:bb:8b:f8:94:a8:34:d5:7d:dd:f2:52:
fd:4b:0e:19:05:2b:5c:f3:07:d7:81:21:cc:bb:74:
37:8a:fc:cf:39:ea:57:e0:5a:5e:93:9a:05:ac:e3:
2a:e8:69:4b:96:fa:e7:56:1d:8a:d4:7b:41:25:c8:
9b:5e:0d:f8:98:38:b9:85:e2:0f:71:e3:03:3d:af:
ef:98:f2:08:3a:dc:5c:45:51:24:f6:5b:a0:60:b9:
7e:28:91:89:fa:d0:ac:47:3c:62:9e:1e:77:43:e7:
52:6e:76:86:1e:d3:d1:30:82:ec:a4:08:0e:68:3c:
4d:ac:e5:77:72:45:8e:17:9d:dd:8b:24:97:42:57:
ce:3b:44:99:1f:e8:45:9c:54:c4:ac:02:1d:1b:38:
4d:15:c4:3f:d5:c6:43:53:98:86:88:21:11:04:c3:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:3D:96:B8:E3:5D:1D:5C:B7:79:2A:00:97:5D:97:90:17:52:9B
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:e8:8a:5d:23:9a:0c:1d:9e:97:f0:3d:c3:58:a1:12:8b:a4:
22:b2:a7:08:a1:3b:f0:c2:3c:58:4d:87:c0:ad:1b:12:e5:56:
0b:f8:a9:81:e0:0b:8b:0f:51:0e:b0:ab:45:d4:01:84:6f:5f:
10:44:0d:34:99:c7:2d:1b:b4:e2:bd:8c:48:1b:b5:7f:48:c6:
1e:55:5d:81:40:0e:7b:85:01:75:3f:fc:20:3a:0c:d5:71:80:
41:2e:88:38:3b:88:c6:4f:e8:70:fa:0b:82:79:aa:e7:97:26:
f8:3b:33:65:46:a8:17:eb:51:94:08:d7:70:fd:00:06:0f:dc:
df:af:9e:be:48:ec:d2:b3:d9:6b:05:47:61:9e:8b:ae:c1:6f:
ba:2f:cb:7c:55:d2:e5:11:0b:7c:13:24:da:cf:7e:b6:58:3c:
6f:34:47:5c:c9:2f:a2:17:1d:9f:f9:b1:3d:6e:a3:e9:79:8e:
51:04:fd:51:e9:4b:1e:62:d6:a9:eb:0e:d5:dc:89:75:ae:74:
92:cc:3c:d5:f7:e1:4b:b7:e7:03:71:cc:6b:6b:7e:5e:a3:1c:
7d:2b:7f:9b:25:60:fe:14:f9:58:03:8c:87:19:9c:28:50:9f:
9f:f4:bb:5a:6f:af:cb:44:a0:d1:1d:22:95:a1:dd:eb:88:f1:
16:0a:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:49 2026 by rpki-client