
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier: 7kVyxP7kuGpNu4pYk9BYh3pay4E1vNb6tQMdAwMVMXc=
Subject key identifier: 4B:75:18:79:D3:C2:3D:96:93:22:C6:50:20:D7:77:D6:52:15:E5:83
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 36D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number: 35E5
Signing time: Tue 12 May 2026 14:29:37 +0000
Manifest this update: Tue 12 May 2026 14:29:36 +0000
Manifest next update: Tue 19 May 2026 14:29:36 +0000
Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: foAJtyJShMpvEFvPfeZTPMAW6Rpvwwo9+uDuH5/wFmE=)
2: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=)
3: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=)
4: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=)
5: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=)
6: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=)
7: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=)
8: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=)
9: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=)
10: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=)
11: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=)
12: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14035 (0x36d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: May 12 14:29:36 2026 GMT
Not After : May 19 14:29:36 2026 GMT
Subject: CN=6a033951-2620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:9b:16:4b:da:d3:2f:96:c2:cd:6d:8e:dd:
9d:12:f6:cc:6f:c3:70:2a:1d:0e:b8:d0:9b:a0:41:
53:a6:4f:57:18:90:7d:d3:53:d7:92:5d:8b:a5:b0:
f0:44:ac:4e:c9:83:ec:d3:1c:56:bf:9d:f1:e1:f4:
e6:d1:a1:75:db:40:5f:02:a4:05:8e:d4:8c:a1:0e:
5c:37:02:b8:6e:b7:c0:b1:06:ae:1f:40:da:3b:ac:
69:e5:e4:3c:49:c6:54:4c:87:2a:c3:2c:03:5c:52:
00:c0:05:73:5a:7a:b8:33:14:ab:40:b8:36:6e:06:
d2:7a:e7:4e:bf:5e:10:fa:dd:c1:40:c7:93:33:65:
2a:27:6a:99:93:76:97:e8:2a:b5:b2:67:60:2f:13:
6c:db:f5:f5:88:d8:9c:95:d4:37:e2:89:f2:d6:d6:
f1:56:a4:06:50:fd:40:0b:7f:c0:96:72:8a:b1:ef:
c3:c1:a4:e1:7a:c4:72:fd:d1:62:3d:99:93:5b:f7:
f9:67:02:bd:31:8f:09:fa:29:8b:4b:75:ac:16:43:
14:d7:55:e9:99:22:79:c1:f3:01:76:e0:42:27:31:
e0:a6:ec:ff:36:8c:e0:37:7b:2c:5b:28:1a:a5:36:
45:a2:59:d1:a1:8a:ec:de:eb:6e:74:0b:72:72:c1:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:75:18:79:D3:C2:3D:96:93:22:C6:50:20:D7:77:D6:52:15:E5:83
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:92:1c:d4:2d:55:13:7b:99:ff:c3:d8:f1:98:7b:e6:2b:82:
42:93:cb:a5:7d:6a:c9:f7:f4:45:81:78:c7:66:1b:ca:79:b3:
d4:7b:ec:32:ca:a5:aa:4a:02:6f:17:37:32:33:a3:a5:d5:af:
f9:e0:cb:2a:8a:63:d3:e4:4f:3e:50:db:4c:af:bd:c6:28:2b:
3b:6b:06:35:4e:88:ad:97:ab:02:ce:da:26:a4:cd:bc:50:1f:
e2:d4:e3:00:b6:cc:5e:02:08:0b:45:1c:e1:43:a7:a3:38:b9:
5b:84:34:4c:19:53:0e:b1:5d:c9:ff:5b:f2:80:94:73:bb:e8:
02:4f:cb:24:3e:a1:ef:c8:c8:b4:04:3d:d2:29:8f:61:f0:b8:
0f:f0:21:8d:98:2b:8d:02:ab:e3:2e:80:07:f1:cc:0e:bb:31:
c1:ab:c4:d8:6c:85:3f:bd:9d:51:34:36:d0:98:f6:4f:50:0a:
c3:48:74:1b:2c:a6:fe:07:74:dd:9d:9e:a5:55:87:df:fc:05:
cb:05:7e:d8:f1:c7:f8:c1:61:c8:15:54:cf:88:9f:71:f8:a5:
16:cf:b1:dd:44:c3:e5:77:b1:9b:8e:b8:db:41:ac:e8:04:d1:
cd:d7:39:ff:05:c4:b3:c0:60:f9:74:a8:b7:8d:16:00:ac:96:
43:35:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:31 2026 by rpki-client