
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: Omssh4H62hJgY0Q+iOO+3D2rLUWzTcLAr5Hw1uKJl8M=
Subject key identifier: 77:2F:01:B8:4F:C2:04:E9:5E:3A:BF:F7:62:B3:C0:90:51:27:DF:75
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0DE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0D9C
Signing time: Tue 12 May 2026 18:04:20 +0000
Manifest this update: Tue 12 May 2026 18:04:19 +0000
Manifest next update: Tue 19 May 2026 18:04:19 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: IfB0JJZrUtLOGhjhf9oiNFIK7Dp0NECb2fO6ntMqZDY=)
2: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WD74/2XgeAz/XgGtt1zWIcisMorpjdxcCpl+RUcYgd4=)
3: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3561 (0xde9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: May 12 18:04:19 2026 GMT
Not After : May 19 18:04:19 2026 GMT
Subject: CN=6a036ba4-00fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:e3:7e:3d:23:0e:a7:89:cd:85:24:ce:e6:
69:3b:f0:a7:c2:47:1c:c1:27:a6:07:7d:9b:8f:79:
f3:7b:6d:03:49:23:68:7a:4c:d6:a6:c2:ef:c6:02:
22:43:44:76:60:cd:1b:16:2f:f8:54:3e:5c:2f:32:
4b:f6:a1:b8:32:65:3b:de:d6:e3:75:5b:ff:f5:ff:
c1:b3:4b:3f:31:a5:ea:65:12:c2:5c:cc:aa:39:e5:
5f:54:c5:54:a3:2c:0a:45:ac:db:15:ef:40:c2:cb:
1c:bc:50:e3:49:04:7f:f2:06:69:44:dc:07:92:7a:
aa:0f:83:18:a3:02:0a:0d:fc:dd:29:f9:62:dc:17:
6a:47:7f:5d:1e:d9:90:96:fe:72:3b:f7:2b:b1:26:
54:29:41:a4:ef:94:17:0b:d3:57:b5:4d:e9:fc:0c:
75:1c:c9:14:f1:80:5b:95:b6:ff:ac:00:2f:20:66:
74:06:d7:ac:a2:06:96:8c:6a:60:6d:1d:f2:8c:e3:
88:c4:9d:c7:f5:fa:3e:f8:f1:32:83:8f:f1:b2:b7:
a1:f1:6e:04:5b:53:be:62:67:f9:32:d5:40:6d:59:
58:7f:e9:20:ae:ce:3a:e8:31:c9:e9:d6:37:65:03:
85:b2:31:ae:bd:8a:57:d2:97:73:07:f0:f2:11:f2:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:01:B8:4F:C2:04:E9:5E:3A:BF:F7:62:B3:C0:90:51:27:DF:75
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:95:bc:ec:13:76:70:d8:65:e8:82:66:22:a8:ba:1e:38:
c7:56:29:36:c0:db:3b:a7:d3:94:9c:aa:b7:fa:9a:55:f3:f3:
ba:9d:b7:de:47:79:d7:8e:e2:df:43:24:d2:80:e8:f8:20:68:
d6:f3:31:63:fd:93:a4:19:ab:bb:eb:c1:8b:c2:e9:01:1a:23:
a2:a5:22:97:84:b6:71:3d:96:a0:e8:ce:45:81:9e:0c:dd:93:
58:a8:f9:34:24:0e:c1:df:af:0c:4a:8f:c7:6f:6c:cd:75:66:
4e:99:33:77:4d:cc:f4:29:3a:79:20:e4:4e:cb:4c:d9:d0:13:
3c:40:e3:0f:6c:35:06:d6:e8:8e:1e:b0:6c:e4:3e:6d:1c:0f:
48:fc:ab:65:24:43:32:2f:98:16:30:8f:1f:ca:dd:39:a3:e1:
a4:e4:83:1f:29:3d:ed:30:b1:15:8e:03:5b:66:44:4b:2c:6e:
6e:86:49:bc:fe:69:34:84:46:3f:82:2f:12:72:41:4c:0a:08:
0f:5e:cb:11:48:05:36:d2:d7:4a:0a:8e:a1:63:ad:82:e8:ad:
ff:f1:80:0a:4b:5b:49:df:bb:07:0a:46:17:23:6a:08:c5:ec:
db:cf:cd:d1:c3:3b:78:11:43:e3:a0:c5:dc:48:3c:5b:e4:7a:
b1:02:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:31 2026 by rpki-client