
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json)
Hash identifier: GCh0g4Ks4BXefsfpaTdEQ7bnG3Npr/Un8Z+JhAUc/78=
Subject key identifier: 06:0B:B3:0B:4E:96:04:EA:FB:B1:DC:31:DF:29:56:D8:E5:70:2F:2F
Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Certificate serial: 2E60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
Manifest number: 2E3E
Signing time: Mon 20 Jul 2026 15:33:40 +0000
Manifest this update: Mon 20 Jul 2026 15:33:39 +0000
Manifest next update: Mon 27 Jul 2026 15:33:39 +0000
Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: oBlbqljXDJIk1ZxW3zmz+cSpcMAk+a4TjuiX/5H5TmM=)
2: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: RRtlZPLxNXoaDY5ECfLrXwJY6e1jfEEkw/UE23pwwM0=)
3: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: Wc0o48iov7rXKqvl8HBWTbUP09bv/Hb3Sn4CiAQcsog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11872 (0x2e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Validity
Not Before: Jul 20 15:33:39 2026 GMT
Not After : Jul 27 15:33:39 2026 GMT
Subject: CN=6a5e3fd4-128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:3f:5f:8e:00:e2:5e:18:de:50:0c:33:29:
6c:da:60:58:a0:2e:5c:48:42:bc:be:70:5b:df:a2:
2c:f7:0d:5e:be:03:28:58:27:c5:c2:03:6a:35:cf:
f0:24:19:18:ed:73:5c:2f:a3:e7:be:b7:fa:05:ac:
77:f8:d5:32:32:45:20:2f:8a:f1:36:67:8d:8c:74:
ce:95:b5:d9:a5:e1:f6:f2:3c:37:38:1f:b5:9a:81:
ce:57:14:30:0e:4c:04:92:0a:6a:f2:22:59:f4:20:
bb:71:3e:a2:12:78:b8:8c:f0:7a:52:7c:3b:ef:2d:
77:5c:5b:3e:ba:f5:d2:24:22:0b:1f:7b:a5:66:02:
d8:7e:71:e7:7f:83:1f:33:12:64:b5:9b:ee:ee:2e:
07:28:1c:d6:72:91:6b:25:07:5b:0a:f4:10:bc:44:
2e:c9:ed:13:4b:1b:47:68:3a:c8:b4:b7:64:a1:2e:
75:fc:09:f3:66:14:d7:8f:fe:a1:12:bc:e8:9b:28:
9e:77:fe:fa:4c:31:0a:75:c2:03:ef:a3:3b:db:e5:
19:17:68:c3:c1:6b:3b:65:1f:22:0a:c3:28:9b:12:
a7:dd:0a:79:28:80:4d:9c:9d:63:64:fb:de:3d:3f:
94:9e:f6:ad:df:ab:b0:a8:c8:e5:88:b3:89:9d:5e:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:B3:0B:4E:96:04:EA:FB:B1:DC:31:DF:29:56:D8:E5:70:2F:2F
X509v3 Authority Key Identifier:
keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:1f:1d:e7:20:45:3d:82:fb:29:58:05:9f:8a:52:71:cb:77:
2b:ef:e6:8f:6f:62:79:87:34:34:1c:05:76:d3:00:d9:3d:27:
40:4f:d3:d8:52:6f:a6:55:92:bc:7c:b0:54:d5:35:08:4a:5a:
16:e1:ff:6d:e5:4e:74:6b:ed:39:59:d8:ce:e9:25:f4:36:7a:
56:ea:7e:ec:a2:fd:27:94:c8:ef:44:62:d8:aa:71:98:aa:88:
77:84:9a:83:c8:00:b9:88:3a:e5:5b:cb:48:17:86:52:3e:eb:
ad:52:cc:e3:32:54:30:11:e1:4c:0c:e9:5d:34:a5:f0:2f:fd:
f4:64:73:53:c7:44:cf:ae:2c:8f:54:72:9f:29:77:9f:72:45:
a0:24:20:46:3c:44:67:39:27:b7:5f:f2:1b:83:2d:25:7c:33:
a8:cc:f9:70:88:ca:14:74:5e:b1:14:c9:15:c1:73:65:cc:30:
5c:9a:ca:ad:84:15:7a:0e:88:bd:e6:cc:16:de:f3:d5:8a:be:
7b:ff:1b:45:9a:c9:30:fa:bb:17:1f:77:8e:1e:ca:11:4a:9e:
a7:52:5d:66:41:a6:73:b2:39:bd:a9:15:0e:8d:26:98:28:23:
94:88:2f:f2:95:dd:08:a3:27:69:53:7f:af:2c:e3:0b:54:27:
32:fc:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:50:53 2026 by rpki-client