
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier: LhIIUY1n6nH/7p7xUHRsj7IEwtHHEmwPHdZFSck7Imc=
Subject key identifier: 13:65:65:4D:BE:25:8C:8E:D5:87:63:46:91:85:88:60:0E:12:A1:6F
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial: F1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number: ED
Signing time: Mon 11 May 2026 06:30:52 +0000
Manifest this update: Mon 11 May 2026 06:30:52 +0000
Manifest next update: Mon 18 May 2026 06:30:52 +0000
Files and hashes: 1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: qX/ZxzMidDuPwmA2VmPhlnv+xKTndp/myhKOn3Kns8Q=)
2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Validity
Not Before: May 11 06:30:52 2026 GMT
Not After : May 18 06:30:52 2026 GMT
Subject: CN=6a01779c-1efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:61:6a:03:6f:da:b7:2f:a2:e5:f7:26:09:
5f:e8:6c:b8:29:41:7a:25:c8:c2:3f:ab:e7:db:7f:
34:c0:0f:6c:70:f4:8a:c5:e0:00:a5:3b:50:42:32:
9d:4b:2e:67:9f:06:e8:86:fa:41:16:6f:02:e9:0d:
ef:a9:bc:ee:d6:7a:09:58:53:8f:88:e7:7f:0a:bd:
ab:3a:f0:51:4c:4b:1f:5c:04:0a:98:50:44:ae:d1:
74:18:21:fa:b4:5d:84:e2:ab:2b:73:6d:cf:8d:27:
a5:06:6e:ba:b7:7f:b9:d3:5d:52:6e:d0:3e:30:07:
23:fb:58:32:50:ac:b8:f2:29:25:e5:da:3f:81:90:
6b:d8:30:bb:16:57:04:56:c3:8c:71:f3:7b:c8:aa:
fa:22:68:b2:0e:2c:7f:d3:fa:b2:cb:60:13:73:b1:
20:85:58:14:29:09:49:be:96:85:6d:16:5e:42:eb:
e0:d2:64:1a:ca:bc:fc:73:5c:d4:09:da:72:68:91:
a3:e4:ee:03:f0:65:07:94:23:99:b7:dc:36:55:63:
e0:83:1a:a4:c4:f4:3e:37:ac:bb:d1:98:6d:54:2c:
d4:b1:59:2f:fd:eb:54:24:89:95:85:47:40:91:ac:
ca:a6:53:f4:f5:f6:b7:30:7e:31:8e:6e:93:4d:fe:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:65:4D:BE:25:8C:8E:D5:87:63:46:91:85:88:60:0E:12:A1:6F
X509v3 Authority Key Identifier:
keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:b0:2a:9c:a5:c1:83:0a:20:a7:2a:a9:41:d9:a1:6d:46:e5:
49:40:4b:d2:6f:bc:dc:0c:72:12:7e:32:a2:3a:e3:3b:53:cb:
d9:c6:ef:01:4f:04:81:48:22:ac:91:cc:0d:4b:3a:a4:5e:eb:
10:43:f2:5b:41:be:b1:43:9c:fe:04:5f:95:45:67:4a:ca:d2:
72:2f:32:bb:84:a8:1a:d8:82:df:53:b8:13:58:2b:77:c0:1b:
4d:30:b9:8d:ce:c8:ce:91:9e:b5:e1:5c:2f:5a:dd:ca:d0:c4:
c6:23:74:1d:21:09:f6:51:b3:4c:d2:25:ea:1c:d6:5a:b8:62:
b4:ba:fe:b3:b7:85:66:ef:cd:b8:77:6d:47:f7:8e:2c:ad:b4:
2d:5c:47:00:40:75:4c:ea:d7:b6:dc:70:8d:cb:66:57:c1:4f:
88:b7:00:41:b8:e0:75:d4:13:d6:e3:f5:3a:22:22:a4:47:19:
0c:19:58:c4:71:e7:79:77:67:ec:79:dd:90:17:42:80:1a:d7:
7b:29:48:a3:74:f5:56:15:db:f9:99:da:4e:7c:59:ce:30:62:
ba:7c:87:71:d2:33:35:47:07:20:7b:c2:d7:48:2f:02:6d:57:
8e:3d:24:ed:99:97:a8:41:d2:e5:83:ac:63:45:70:71:2b:ba:
cb:12:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:00 2026 by rpki-client