
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
File: 0qCHG82DdsEajwSaOYVa_NsYMGQ.mft (raw, json)
Hash identifier: pk/WHSfTWFoBZqy8Te6cp9j4xsH9kT3+MBvQgppIvSE=
Subject key identifier: 44:A7:B4:0E:1F:44:AD:22:BB:70:10:E3:3C:3D:FB:25:DB:CD:1C:94
Authority key identifier: D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
Certificate issuer: /CN=A911CA82/serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Certificate serial: 06EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
Manifest number: 06CD
Signing time: Sun 31 May 2026 23:09:34 +0000
Manifest this update: Sun 31 May 2026 23:09:33 +0000
Manifest next update: Sun 07 Jun 2026 23:09:33 +0000
Files and hashes: 1: 0qCHG82DdsEajwSaOYVa_NsYMGQ.crl (hash: YwyzTr6bBHagPdmyA/uiuJpgKlfLFBv8H5e2bo2VEIc=)
2: CB304C36307111EDB0CBD946C4F9AE02.roa (hash: ODIX3oDpfnNWOwtgKPini7l1bVtlb/9n+o+dXisnTbg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 23:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA82, serialNumber=D2A0871BCD8376C11A8F049A39855AFCDB183064
Validity
Not Before: May 31 23:09:33 2026 GMT
Not After : Jun 7 23:09:33 2026 GMT
Subject: CN=6a1cbfad-a639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:63:c8:cd:ee:0f:df:d1:de:b9:1d:d1:df:
35:31:8f:39:d2:e7:7f:50:67:bf:b2:62:a1:f1:af:
7d:a0:70:08:0f:ef:7e:01:98:e3:ff:d2:84:04:39:
ff:78:9a:6b:2b:3c:9f:9a:41:b3:94:50:45:e6:23:
2c:95:c1:51:08:37:e5:2a:02:79:e7:fd:df:97:e0:
76:8c:9b:0e:05:ee:57:27:36:c2:93:df:b4:85:af:
98:d6:f5:e3:1b:4c:e6:0b:eb:98:91:dc:e7:10:5a:
88:5f:45:ad:a1:7b:d1:14:8e:45:86:13:5d:c3:5f:
53:41:e8:58:d6:bd:64:a3:ad:7a:2e:26:43:2e:40:
2b:9c:a6:5c:e3:3f:81:b1:f1:9c:f0:77:52:27:6e:
54:46:75:20:19:0c:70:68:7e:66:9b:5b:83:b7:01:
c8:c0:33:de:c4:91:d9:e2:f6:19:53:19:c6:88:52:
fd:e3:ea:da:e1:b1:1a:11:18:62:40:64:b3:3b:09:
43:d2:b9:3d:bf:0f:3a:c4:31:2a:f8:e0:99:f4:b6:
fd:04:45:31:ab:05:8f:74:0c:9c:d2:94:37:3d:ce:
a4:ae:1f:de:12:d2:f2:4b:a9:2c:d0:02:af:e1:ea:
50:46:32:f8:a4:6f:76:f7:9f:29:1c:92:aa:da:5a:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A7:B4:0E:1F:44:AD:22:BB:70:10:E3:3C:3D:FB:25:DB:CD:1C:94
X509v3 Authority Key Identifier:
keyid:D2:A0:87:1B:CD:83:76:C1:1A:8F:04:9A:39:85:5A:FC:DB:18:30:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0qCHG82DdsEajwSaOYVa_NsYMGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/0BEB375ABE4411EBAE3D4348C4F9AE02/0qCHG82DdsEajwSaOYVa_NsYMGQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f4:1a:5e:58:54:28:2a:ec:54:c6:9c:aa:1a:21:e4:70:ca:
df:bf:58:85:ca:49:e3:32:84:2c:96:8d:85:dd:b6:ee:58:9a:
3e:72:67:b7:2c:d3:68:14:bd:af:7d:b8:17:42:72:c4:82:ff:
1c:42:f2:fc:59:5a:13:cc:ae:25:fb:bc:b1:b8:23:67:66:ff:
41:7b:83:a7:97:a8:b7:58:2f:f9:36:1a:49:37:90:79:d4:d2:
b3:5c:a5:64:82:b4:f4:4e:f9:ba:d0:db:e3:68:b1:65:8c:dc:
f8:5c:70:ba:e9:8a:7e:d2:ed:c5:a6:e0:a5:2b:ac:13:1d:30:
93:1c:22:3e:a2:f7:64:ae:9f:ae:53:0a:c2:76:c5:d2:aa:9b:
33:99:9d:74:ef:db:ac:57:1d:fe:3f:2b:bc:1b:50:ac:c6:88:
47:46:11:4a:41:38:73:6c:28:8a:fc:a1:98:e1:6f:2a:1a:da:
8d:60:d7:9e:59:d6:b1:e9:82:23:9c:a3:b3:98:6c:8f:3d:25:
ac:24:40:f2:3e:25:59:ff:ea:91:68:96:fd:63:fa:20:62:ac:
63:4e:d4:7b:10:dd:40:25:bb:ec:8f:19:b8:ad:d5:da:46:b5:
55:9e:02:0d:7a:48:82:04:51:e4:a0:11:c4:33:f2:9e:19:11:
5c:34:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:01:45 2026 by rpki-client