
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
File: sQG1q1GcKuZKv61qVvhD3AmQqFM.mft (raw, json)
Hash identifier: iczlLD4LeCOsCJBkyU+1Z27F7umHURpsjm0ACgZo0qk=
Subject key identifier: 38:64:11:78:2C:35:B3:A3:8F:AA:DD:80:52:C6:30:31:BD:BE:E0:DA
Authority key identifier: B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
Certificate issuer: /CN=A919B06C/serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Certificate serial: 122E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
Manifest number: 20EC
Signing time: Tue 12 May 2026 17:09:17 +0000
Manifest this update: Tue 12 May 2026 17:09:16 +0000
Manifest next update: Tue 19 May 2026 17:09:16 +0000
Files and hashes: 1: sQG1q1GcKuZKv61qVvhD3AmQqFM.crl (hash: 8oZdySX6cZKOSF/k5RoFoM1O+KXGxDoiH1L0Y1hea9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4654 (0x122e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C, serialNumber=B101B5AB519C2AE64ABFAD6A56F843DC0990A853
Validity
Not Before: May 12 17:09:16 2026 GMT
Not After : May 19 17:09:16 2026 GMT
Subject: CN=6a035ebd-c97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:1d:e1:42:f4:ac:f1:5d:1f:3c:9e:9c:4c:
a3:21:55:22:52:50:88:ff:12:dc:3e:a5:2b:77:12:
a8:ff:dd:9d:f7:4f:ef:14:56:45:31:de:a3:4f:15:
b9:34:07:91:4c:03:4f:f4:cc:ee:f6:72:9a:8f:13:
44:40:62:2d:59:59:9a:dd:87:04:78:95:aa:49:30:
a1:63:41:9b:00:ad:c0:f2:87:00:3c:a4:86:97:d4:
00:ee:74:e2:ed:af:0e:49:93:19:ee:d0:3d:52:d3:
e2:5d:59:b7:da:ab:b7:1d:27:f1:2c:5a:0f:5c:93:
46:90:3f:c3:0b:c6:05:de:a0:c8:51:7b:a1:c6:61:
11:80:fe:18:0e:ff:d3:90:20:ec:35:89:df:c6:8e:
01:3e:5b:20:e9:a3:19:58:9c:b8:c2:5a:91:b8:50:
ce:df:d2:4c:a5:c0:a7:39:fa:04:b4:f4:3e:40:ec:
af:38:d7:4d:c8:ab:e4:69:d6:b9:ff:be:02:ce:7d:
97:96:b9:f8:02:ab:ef:7d:ef:5d:2c:85:c8:63:10:
bb:db:8a:e1:77:b1:f9:5e:fe:12:98:12:6e:fe:46:
97:81:36:5d:b3:e3:af:89:88:c7:ed:c7:29:b7:c1:
67:11:b4:16:a6:70:26:cc:c8:de:39:5f:b6:5e:19:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:64:11:78:2C:35:B3:A3:8F:AA:DD:80:52:C6:30:31:BD:BE:E0:DA
X509v3 Authority Key Identifier:
keyid:B1:01:B5:AB:51:9C:2A:E6:4A:BF:AD:6A:56:F8:43:DC:09:90:A8:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQG1q1GcKuZKv61qVvhD3AmQqFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/sQG1q1GcKuZKv61qVvhD3AmQqFM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:57:49:5c:2f:bf:83:74:ad:8a:cd:88:78:d1:8f:f4:ba:a3:
cd:92:50:52:0b:27:75:17:b9:7f:1e:1f:58:e4:c9:d8:c3:af:
7a:66:44:09:36:2e:34:9f:4f:7f:58:36:60:f7:42:6b:ec:2f:
b4:8d:16:f0:aa:35:f7:ac:79:73:58:cb:d2:4e:15:90:b3:26:
26:e1:c8:3e:89:e9:21:8d:fc:12:02:85:75:c4:cf:29:ca:38:
26:2c:41:dd:e4:9b:ae:19:fa:44:e1:60:2b:1b:60:ca:9e:c5:
50:cc:e9:a0:0b:4e:94:e5:ce:7f:4d:ab:47:8f:6d:6f:1e:a5:
50:b4:89:31:27:d6:a6:13:a2:14:74:c7:51:a7:72:89:ea:49:
53:26:dd:f3:62:e8:55:e7:d1:06:f5:7e:ce:1f:c6:6d:c8:59:
1c:d2:f2:dd:1d:6b:34:ff:06:6d:68:74:5e:4b:f8:a9:e0:f9:
c2:56:e3:5f:cb:42:1e:22:71:52:15:05:ae:48:88:5a:4a:2e:
1d:60:73:4f:ec:de:36:90:d6:8f:b7:87:3d:b1:92:e0:c5:5c:
41:6e:eb:45:ec:e9:d5:18:d4:da:d7:f9:fd:e3:16:95:3a:ea:
49:fa:9a:c4:94:46:6b:7c:dc:a5:4c:81:60:88:92:58:bc:aa:
1b:58:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:18:33 2026 by rpki-client