
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier: w4nh/QilpD5JeTigZpRO7ZyY4dznwoq7ot1yApj+Un4=
Subject key identifier: 58:52:D3:C3:35:85:D6:AF:12:9C:28:2C:34:DE:5F:0F:40:08:8B:EF
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1CD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number: 1C98
Signing time: Wed 10 Jun 2026 16:11:43 +0000
Manifest this update: Wed 10 Jun 2026 16:11:43 +0000
Manifest next update: Wed 17 Jun 2026 16:11:43 +0000
Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: +jAYGfI4idraLbwyx8JGP1gS2WYDEzQIRXMq24NSk9Q=)
2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: 5s6wPVYQGH5s3qyYU5XWxXqoobJzGy5t477auxbm+wA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7383 (0x1cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Jun 10 16:11:43 2026 GMT
Not After : Jun 17 16:11:43 2026 GMT
Subject: CN=6a298cbf-eab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:9f:92:cf:6f:ce:53:41:00:e6:f9:48:2f:
0f:c7:56:c5:42:05:2a:18:46:2e:8f:15:b0:42:86:
a4:a8:c5:9c:a1:f2:17:47:34:c8:eb:b0:22:87:f2:
2d:08:c2:29:ea:a8:a5:ab:30:06:fe:0c:0d:9b:46:
10:23:55:45:4a:e2:23:eb:a7:e6:a4:eb:1e:73:80:
52:de:d6:e0:cd:ca:82:cd:d4:05:66:74:3b:3e:f5:
12:1f:32:0c:99:d3:a4:a5:e8:f9:ab:23:b6:eb:80:
1f:3b:a6:4f:78:7b:1b:3e:5c:e9:bc:17:20:4b:e2:
b8:59:15:ea:cc:ac:b0:50:c0:b5:db:a3:70:d2:e2:
3e:7a:d7:e7:ea:f6:14:80:a8:d8:0d:01:e4:4d:09:
e3:14:06:c9:e9:a4:07:21:30:02:d7:6f:ab:16:6b:
2b:68:3d:d3:c6:2f:22:0b:48:eb:61:ba:2e:b2:e5:
c1:cd:c4:ed:23:39:a8:f5:ef:b8:2c:0c:e1:d0:f1:
60:ba:54:3d:bd:94:cd:57:b5:f4:98:fa:b7:bf:97:
e4:f3:9a:19:16:a0:77:ed:ab:52:53:8c:75:7f:48:
e2:14:9e:b4:4c:56:77:b9:67:ba:41:61:70:27:52:
82:72:2a:d1:98:81:71:2b:67:c5:39:8f:fb:cd:27:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:D3:C3:35:85:D6:AF:12:9C:28:2C:34:DE:5F:0F:40:08:8B:EF
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:74:21:b4:5c:18:e9:cb:ef:53:88:a3:79:7a:25:6b:cb:93:
76:ff:39:b3:86:ee:b0:d8:34:54:1e:b2:35:62:5e:f9:94:74:
21:1e:ef:42:05:a5:07:0c:ee:e9:1f:3e:fe:dc:b7:38:85:ef:
09:27:b7:11:d8:94:ed:d6:5e:b3:19:f1:e6:f9:18:22:9d:e5:
66:a6:db:89:65:2b:a5:b9:69:ac:21:1a:6a:1b:11:a5:f5:5d:
0f:08:af:89:ae:f9:e5:54:0b:f7:e8:72:65:34:8f:de:4d:4c:
68:f1:4d:3f:22:95:18:9e:68:51:2b:65:5e:7e:6d:31:4b:ab:
2b:8e:06:7b:57:63:4b:e0:80:81:00:19:d8:c6:02:49:db:3a:
a8:90:5e:84:47:cf:2e:5f:c5:9a:92:b4:d1:a3:10:ce:d6:58:
8d:7b:ce:47:a2:10:7d:4f:9f:bf:f0:10:b2:2e:90:5d:a0:c8:
64:b1:38:39:3a:cd:6e:0f:8d:fd:17:0f:63:e3:1f:b7:19:b2:
12:45:e0:22:76:6a:c1:db:96:c0:da:bf:48:b4:3a:e7:3e:61:
9c:a7:ee:5c:0b:8a:65:28:30:bb:a7:37:a3:55:c0:7b:95:08:
ff:0a:f9:e5:0c:b2:38:d0:9f:f8:39:bc:73:9c:98:39:b1:a6:
32:21:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 17:12:28 2026 by rpki-client