
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
File: Q03xGF63GUxktwjMLSVjSCTiTh4.mft (raw, json)
Hash identifier: 7mD3F44k2A3+30p/LbKhajjFGYCZQsJ4uVBozsZlBDU=
Subject key identifier: FD:03:9F:B8:77:96:34:CE:FC:A6:1F:52:AC:02:2E:34:00:4E:4A:60
Authority key identifier: 43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E
Certificate issuer: /CN=A911CC94/serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E
Certificate serial: 29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
Manifest number: 27
Signing time: Tue 19 May 2026 08:40:38 +0000
Manifest this update: Tue 19 May 2026 08:40:37 +0000
Manifest next update: Tue 26 May 2026 08:40:37 +0000
Files and hashes: 1: Q03xGF63GUxktwjMLSVjSCTiTh4.crl (hash: oFRN0q09iqCJS+EoSlU4DwhNTnmyZnwy0Vdk7h17TPI=)
2: DB87563A1C5711F1811E0EC90A3D8C67.roa (hash: Uot0wKL2V+rres779GpUT7rmL47pZ4/zXDcozOfp2iU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl
rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC94, serialNumber=434DF1185EB7194C64B708CC2D25634824E24E1E
Validity
Not Before: May 19 08:40:37 2026 GMT
Not After : May 26 08:40:37 2026 GMT
Subject: CN=6a0c2206-775f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:eb:e9:f8:1d:90:5a:32:70:a7:fd:3a:29:
b6:01:99:b9:3e:83:c0:80:a1:8f:ae:9f:cb:9b:29:
da:b4:ac:62:1d:d7:ee:f0:24:18:9b:ae:97:78:3e:
93:8a:a0:ea:90:90:9d:0d:37:b5:0e:e1:c7:71:67:
35:47:9d:64:3b:2d:35:60:64:ab:84:bb:1f:e5:5f:
07:34:7a:f5:fd:5b:8e:ff:eb:4f:69:3f:ea:81:93:
27:08:e9:99:c5:5e:09:65:43:f3:ad:19:20:2a:68:
af:25:21:3d:5e:68:3c:d1:1a:72:99:b4:b7:84:0a:
dd:f5:15:ed:d9:2a:85:a4:36:78:9d:06:0c:48:c7:
bc:e4:10:f2:48:e5:a6:07:ed:31:27:d6:fb:ce:1d:
82:a6:e0:95:1c:1f:fc:35:cf:7f:0c:47:fe:b7:5b:
70:ee:9f:0b:2a:5a:c6:61:3b:fd:33:04:45:bf:75:
b0:4a:90:6d:d0:e2:33:f3:65:29:09:bd:72:19:7c:
42:a2:c4:5b:86:29:ff:59:9f:ae:86:d3:1c:80:09:
3c:83:fe:74:59:5d:14:ed:17:e7:cf:02:2e:d4:e0:
bc:91:b8:a1:9d:22:d0:2b:db:df:32:63:46:91:38:
df:28:f7:12:2b:e0:33:d1:b9:18:a7:c3:f9:2e:88:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:9F:B8:77:96:34:CE:FC:A6:1F:52:AC:02:2E:34:00:4E:4A:60
X509v3 Authority Key Identifier:
keyid:43:4D:F1:18:5E:B7:19:4C:64:B7:08:CC:2D:25:63:48:24:E2:4E:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q03xGF63GUxktwjMLSVjSCTiTh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC94/22404ABE1C5311F19D0BE5DD083D8C67/Q03xGF63GUxktwjMLSVjSCTiTh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:6e:da:43:18:54:4e:bb:1d:24:45:f2:31:9b:ad:6b:f9:a7:
4a:c9:f7:97:d3:d3:16:8a:c0:27:65:95:1b:5d:59:fb:47:57:
9d:c9:a3:a7:78:f9:19:d6:7f:c3:96:5f:4b:e6:ff:38:63:7a:
a5:3e:02:e2:00:fe:04:33:3b:de:63:e0:f5:17:ac:c6:42:1a:
7a:5b:f2:0c:a5:14:a5:4f:d5:4d:30:29:a9:df:fa:73:cc:6e:
ab:9b:01:89:c9:a5:88:5a:18:ab:5c:27:f7:4a:df:83:bc:ce:
b2:f5:99:8c:2b:41:d0:a3:d3:fb:ba:b3:db:57:96:ce:2f:b0:
8e:1f:f7:80:05:81:90:eb:fe:5b:f7:05:43:92:5b:32:9f:cb:
2e:9b:5f:3f:0f:a3:33:63:91:22:4d:df:a8:90:5f:4c:29:ea:
17:e4:6e:cb:e3:d9:5f:71:38:75:82:1f:40:03:fd:da:1c:e4:
55:54:19:11:8f:79:b4:b0:88:29:70:66:62:80:7b:cd:b9:eb:
ae:ef:9a:03:71:0c:ea:27:56:10:e8:e6:45:a9:a7:ae:ad:7b:
50:51:eb:91:2c:f3:b1:32:75:b6:c5:ec:85:8d:71:fd:9d:3b:
a7:4f:fb:17:97:ab:53:8b:03:28:00:3f:8d:33:b0:1a:2b:0a:
2d:6e:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:52 2026 by rpki-client