
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json)
Hash identifier: WZo9JiMoHrgWi9YUBXovISQOfAdma2072+LFJVOjVEU=
Subject key identifier: 84:B7:97:27:D5:5F:76:FA:83:87:6F:A7:F1:B1:D5:61:AC:C7:F8:E8
Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
Manifest number: 0134
Signing time: Mon 01 Jun 2026 06:16:03 +0000
Manifest this update: Mon 01 Jun 2026 06:16:03 +0000
Manifest next update: Mon 08 Jun 2026 06:16:03 +0000
Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: Ex007L+0cVP5j94fvYyGsychLVX9hlJ/M/O0AdVqZEs=)
2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: /iUDR+GzejkmITAmPKgcB03fXiVvkAuvv4cWd5x9948=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Validity
Not Before: Jun 1 06:16:03 2026 GMT
Not After : Jun 8 06:16:03 2026 GMT
Subject: CN=6a1d23a3-044d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:d4:eb:40:2f:c6:fa:58:0c:aa:8a:97:e4:
cc:4e:09:58:50:50:01:1b:7f:49:8b:91:a8:07:d6:
42:0e:36:89:9c:30:50:b0:0e:69:94:2d:c9:ec:9f:
5e:8b:3d:64:b5:e1:39:36:3d:58:cd:ac:fa:e9:db:
31:8e:5c:b6:37:2b:f9:55:af:f6:cf:a8:8c:c7:c3:
89:b8:d0:3d:ae:77:70:b7:dd:90:4d:5d:c8:a7:df:
47:83:fb:aa:ff:ce:6d:76:6f:ad:85:9e:78:44:cd:
87:83:7f:19:0f:e4:7b:36:24:d2:2c:6c:57:48:5a:
f8:41:49:2a:72:fa:a6:28:0f:c3:82:c8:e7:e7:12:
15:6c:77:61:ec:a1:62:6a:7c:b0:19:fb:83:61:16:
13:5a:8e:2a:83:e2:4c:71:3b:ba:a4:06:a3:65:c0:
69:d7:c8:46:a7:8d:3d:4a:af:3b:1f:41:f5:5b:d4:
08:a6:d6:f0:57:c6:13:64:a8:33:a7:2a:81:d9:2f:
1f:d9:16:5a:aa:b6:8e:fd:73:03:a8:ec:9b:df:f8:
ca:69:d2:7d:0b:c6:b2:a7:8d:dd:96:51:5a:c4:67:
e0:e5:bf:31:8a:62:bd:e1:10:b3:9a:46:18:82:e8:
88:6d:b2:6d:0d:aa:1a:2a:39:12:85:05:bc:e9:89:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:97:27:D5:5F:76:FA:83:87:6F:A7:F1:B1:D5:61:AC:C7:F8:E8
X509v3 Authority Key Identifier:
keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:b1:48:2e:cc:95:0a:99:bb:df:54:e1:67:60:e2:0d:06:
c7:7f:8d:a9:33:fa:93:a2:fd:b2:12:20:a6:62:34:3b:7c:97:
0e:7a:a8:bf:54:e8:86:f4:77:e6:7d:b7:23:1e:20:2c:1a:95:
32:d7:96:5f:ba:5f:3d:89:c6:a0:00:31:de:ca:f8:c5:f9:4d:
71:5e:b2:1e:74:d8:dc:20:b0:bf:5b:b2:3b:7f:e5:87:17:59:
f2:8d:7a:de:76:d4:87:84:d7:20:46:be:ee:ef:7d:13:12:b0:
99:6d:2f:fb:09:54:d5:40:6f:56:a5:fd:36:dd:b4:d2:6d:f7:
7d:72:36:8f:79:0d:9f:27:f2:c1:6e:6f:87:37:f6:ac:7c:ac:
86:96:50:51:61:74:e0:66:3d:6f:e0:ab:5f:c5:2e:c3:b5:83:
c1:db:a7:35:7f:db:29:aa:29:b2:20:7c:d6:ff:63:c0:b9:8a:
fd:fa:b2:a0:07:30:5f:b9:b4:d2:45:15:fa:61:75:f6:76:d1:
5f:c9:47:82:29:47:c2:e5:d2:c5:2d:b9:83:d0:d3:84:eb:33:
15:0a:06:45:4e:73:c7:81:f1:db:5b:49:d8:1e:d5:6f:88:c6:
a2:90:5d:35:56:9d:e7:83:05:fe:ef:f1:11:f4:c4:95:9d:ac:
c3:a0:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:41:35 2026 by rpki-client