
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
File: Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json)
Hash identifier: KAXd2Aue+3+CDo2N6+uLxpxkR8rC+wSLDlIo54ishUI=
Subject key identifier: 9E:BA:6A:C4:4F:75:6A:14:72:A8:40:5D:32:C6:0B:FA:94:5C:BD:C0
Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
Certificate issuer: /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Certificate serial: 2E41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
Manifest number: 2E1F
Signing time: Wed 20 May 2026 15:29:55 +0000
Manifest this update: Wed 20 May 2026 15:29:55 +0000
Manifest next update: Wed 27 May 2026 15:29:55 +0000
Files and hashes: 1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: czC7gIGwKjio7NEYAgpr7lIdy1qirhjTYV2TElB5HIE=)
2: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: Wc0o48iov7rXKqvl8HBWTbUP09bv/Hb3Sn4CiAQcsog=)
3: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: RRtlZPLxNXoaDY5ECfLrXwJY6e1jfEEkw/UE23pwwM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11841 (0x2e41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Validity
Not Before: May 20 15:29:55 2026 GMT
Not After : May 27 15:29:55 2026 GMT
Subject: CN=6a0dd373-db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:0b:ca:9c:bd:12:06:43:9a:12:99:d0:09:
5a:1e:b6:7f:2d:37:64:cb:94:39:6a:b8:17:81:9b:
bd:4f:50:57:87:0f:57:b1:41:8f:46:08:a3:72:40:
bc:5a:e9:f5:cf:50:45:1a:5a:94:3e:a1:20:1b:2f:
ff:43:ff:d0:38:8a:5f:5f:c1:da:bd:f5:1b:b8:7a:
7a:32:e1:f1:fa:70:de:df:48:f8:ea:b9:92:50:0f:
9e:f5:0b:be:73:ba:e5:89:43:15:d3:e7:32:c2:6d:
e3:aa:eb:5f:bd:89:b9:01:e8:74:4f:0f:68:3b:c3:
77:fb:85:97:06:68:ad:fb:b7:25:a3:09:c8:48:55:
bf:fb:63:e2:b9:4c:65:81:af:a4:55:47:a7:1c:f1:
97:20:27:20:74:37:43:0a:b7:a6:fe:ed:c9:9b:69:
09:14:be:63:f2:cc:e9:a5:5a:cd:94:6a:dc:09:f9:
c2:5f:36:fa:a6:ca:21:e7:5f:23:60:6f:8d:3d:06:
b5:06:9d:b5:56:09:72:f6:d6:5d:bf:11:cc:48:27:
18:89:7a:d8:8c:8d:1d:d8:27:15:f7:d0:a4:04:6b:
28:8e:f0:a9:cb:44:75:44:eb:6f:50:c8:75:b3:51:
6c:de:f5:96:a0:a7:08:3e:0b:70:0e:e1:4a:94:72:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BA:6A:C4:4F:75:6A:14:72:A8:40:5D:32:C6:0B:FA:94:5C:BD:C0
X509v3 Authority Key Identifier:
keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:f5:8b:2e:9f:56:24:31:d7:2b:1f:85:87:0b:48:8f:f1:26:
08:f6:95:d0:72:4e:74:c6:29:6c:f3:75:f2:df:db:7e:e4:66:
d2:85:d3:f5:22:58:05:4d:41:23:03:af:64:7a:10:44:eb:f7:
0a:47:f0:0b:9a:b0:28:3e:22:e1:eb:fc:90:45:ec:a9:d4:a8:
b5:00:fc:b1:11:2f:24:ab:b0:0a:b1:35:2b:f2:43:3d:12:43:
2a:55:6d:84:d7:b3:15:73:7e:21:fe:23:32:86:fe:de:0d:63:
68:5f:6e:0d:a6:24:97:59:50:ed:2d:21:b0:5f:4f:ab:2d:2d:
8f:61:d8:fe:97:34:04:94:4f:41:af:0c:f8:be:0d:39:fe:63:
9c:12:05:b7:bc:94:d1:45:a8:10:f7:d7:2b:68:9f:a8:4c:71:
c1:17:f1:46:a5:63:af:10:3e:80:fe:5a:76:82:81:a7:20:48:
2a:c9:4b:ac:ae:07:72:b6:47:b4:77:a5:4c:94:92:c9:ad:d7:
eb:ed:c2:6a:28:c5:4d:6a:18:b3:42:29:04:25:42:36:5a:62:
a1:f4:8a:70:c4:6f:a3:59:19:ed:d8:0a:7c:79:18:7b:0b:ed:
74:d1:7b:33:c6:3f:71:3c:e8:99:f2:6c:fb:30:d8:24:ff:ae:
a0:6c:19:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:12 2026 by rpki-client