
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File: qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier: mUAbcJUMQphaxK3ya1gk7mzIsI0XdcKX/mRae13rwXo=
Subject key identifier: FD:2F:1B:4D:14:CB:BC:DA:7C:24:24:C1:F1:BC:68:C3:F3:81:4D:F7
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer: /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial: 0B8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number: 0B7B
Signing time: Tue 12 May 2026 19:13:54 +0000
Manifest this update: Tue 12 May 2026 19:13:54 +0000
Manifest next update: Tue 19 May 2026 19:13:54 +0000
Files and hashes: 1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: BiTcNb5vIYRsiKU+QhD8cK0Kzxyfi97WGCeorgCLDes=)
2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2956 (0xb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Validity
Not Before: May 12 19:13:54 2026 GMT
Not After : May 19 19:13:54 2026 GMT
Subject: CN=6a037bf2-f9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:a8:48:b6:d7:d5:fd:41:be:cf:1b:0f:ee:
71:8c:b6:6f:74:00:ce:f4:d2:ed:5e:01:ce:fa:48:
16:6a:2f:8b:e1:ee:5d:59:67:fd:12:fa:57:c0:ec:
ec:69:69:a1:48:ae:e7:79:ac:0a:69:59:a6:03:f3:
e3:be:56:67:a0:d9:a4:ea:f9:b2:41:37:bb:c5:c9:
19:84:1d:19:b0:1a:39:a0:1f:52:48:fa:d9:2d:e9:
0e:5b:dd:ee:93:66:52:93:4a:0b:50:d8:e1:11:3b:
1d:31:b3:92:6c:db:78:eb:8a:73:f4:2e:10:1e:16:
e9:d4:9d:4f:2b:a8:b7:6d:f8:2a:4f:a1:81:0f:e4:
04:0a:f4:42:0d:60:3d:9b:65:cd:b8:ee:c3:7d:d9:
3d:04:e2:ae:02:36:30:82:9a:3a:f3:a5:24:4f:42:
fa:87:88:31:eb:8c:ed:12:41:70:36:40:fc:ef:e4:
02:3d:57:31:e5:c0:18:7d:45:16:da:2e:c1:bc:3f:
c1:4e:67:52:a0:db:8b:c8:60:2f:20:2c:b7:05:6c:
3b:6c:2a:5a:19:fa:a2:89:9c:10:2d:57:8c:0d:33:
a5:64:37:30:91:3a:fa:58:d5:c8:9d:6a:53:8d:24:
09:d2:95:78:c1:67:b0:66:d7:b2:32:fa:ce:49:5e:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:1B:4D:14:CB:BC:DA:7C:24:24:C1:F1:BC:68:C3:F3:81:4D:F7
X509v3 Authority Key Identifier:
keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:d0:f6:99:a0:bb:13:65:af:a2:2f:66:8e:c1:da:2e:07:04:
25:fb:40:f2:0a:f5:68:b3:31:9e:b6:dd:9e:a6:ea:64:98:15:
7d:8c:4f:f4:00:4d:aa:7a:89:7f:f4:3b:d1:e6:5f:2d:c2:aa:
c9:74:f1:c8:4b:79:fa:2c:ed:c3:e8:32:b0:04:de:86:9b:14:
41:53:e2:d2:13:83:46:3c:88:9c:c4:96:e5:89:38:e1:1e:da:
16:a3:84:ec:6f:cd:ef:cd:19:be:a9:2e:ff:ca:78:0b:db:49:
a9:97:ce:e3:ab:d4:97:fe:b8:15:35:b2:c9:d9:cb:21:e9:5e:
c9:0a:69:95:68:22:e7:36:cf:2d:ee:fb:b0:0a:fe:9c:81:b1:
34:ab:80:17:ef:67:6e:f4:64:8a:7d:b0:33:48:e6:8c:fb:09:
cc:71:12:9d:1e:ec:ab:cf:31:3b:71:26:00:ed:3c:6c:77:bb:
d8:e8:70:70:2e:7d:79:a7:46:54:f3:14:48:0e:71:16:45:c0:
f8:a7:e7:dd:2c:cf:af:6d:eb:6b:7e:23:34:7e:8d:35:83:0f:
ee:a5:66:de:3f:9d:c8:d6:0f:91:ab:87:5f:ee:4e:c5:37:57:
e2:e2:07:76:06:29:1f:3f:9f:58:32:e9:f0:e6:cf:64:66:60:
92:0e:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:04 2026 by rpki-client