
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier: ISYrmLEL/j0dzxv0h3u1KBEYA1TyRIAxGwLxXYBf5g4=
Subject key identifier: 58:79:4A:8F:51:A1:D7:C7:6C:81:CF:71:A3:61:FC:34:D4:ED:DF:C3
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 07E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number: 07C6
Signing time: Wed 20 May 2026 21:29:28 +0000
Manifest this update: Wed 20 May 2026 21:29:28 +0000
Manifest next update: Wed 27 May 2026 21:29:28 +0000
Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: g6TJDmMimignp1qNmhT2Ows+t6MCn55pRGcPuVCrKP0=)
2: 68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa (hash: w5VOo/6r3NeoiKj8fNZOZ/VJngKbDV07+QpgEuw1iFA=)
3: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: 1duLitLlKe5JGX7eQUYs2Azf52gj3DJyaqa7K/tCUk4=)
4: 66667640547B11F1B35F59E4B9833773.roa (hash: xUvcOGfbKcgryK4sqev8kZ+k3b3AHJ+6QuD/2AevDnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 21:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2020 (0x7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: May 20 21:29:28 2026 GMT
Not After : May 27 21:29:28 2026 GMT
Subject: CN=6a0e27b8-6008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:73:b9:bc:e6:66:9d:26:e5:2a:06:5b:95:
0d:cb:67:22:99:b9:2e:0c:73:22:00:c2:d5:b9:b9:
ca:9d:2b:2a:b1:c5:86:55:17:14:65:4d:9c:71:5a:
05:f0:97:35:58:2b:8a:f9:9f:e1:0b:4b:5a:ce:16:
4d:b2:d7:ee:65:a6:72:ae:f6:55:9a:c3:f3:b5:0b:
cc:db:92:d5:4b:98:ca:09:0d:91:27:64:a1:61:83:
11:c9:67:f6:c5:fe:9e:e3:ab:29:33:c2:64:07:96:
2d:f9:f0:31:2a:e6:a8:b4:d1:d4:72:f6:0c:27:f0:
78:67:98:60:84:4a:45:44:c8:9e:34:24:cc:73:00:
d7:f2:b2:05:b2:41:e9:09:6c:63:24:cd:3f:b9:5e:
a5:d6:1a:b3:d4:37:cd:20:36:0a:d9:1f:79:aa:30:
a2:ca:4a:18:87:e4:f6:26:67:dc:7d:6f:50:36:b0:
ca:b1:b4:80:8f:96:07:ab:76:9d:6a:72:c9:54:1b:
59:07:4c:e5:94:f1:96:40:69:f4:32:3e:46:fb:50:
c5:69:cd:11:30:60:50:49:97:f8:a2:93:f9:56:8b:
20:38:37:cf:76:20:fe:0d:fd:04:31:1e:2b:cd:bf:
e1:4c:24:17:38:f3:45:32:2b:ae:24:ef:83:0b:9e:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:79:4A:8F:51:A1:D7:C7:6C:81:CF:71:A3:61:FC:34:D4:ED:DF:C3
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8a:e6:74:0c:6f:39:5c:81:20:a9:49:1b:9e:6f:62:e3:92:
d8:b2:59:7d:ff:5a:fd:7c:a2:ca:22:02:73:c3:78:f4:a7:8a:
9f:98:52:7d:89:40:21:6a:e0:63:6d:48:b6:30:79:86:aa:d0:
40:cc:79:fd:6b:de:92:93:65:9e:be:74:e9:ff:24:89:65:35:
16:15:cb:a4:c4:7c:86:7e:fc:38:8a:8b:8f:e9:95:e9:95:55:
9a:d3:73:6a:dc:e9:a6:94:db:0c:06:fb:b0:a0:ac:64:f4:b9:
69:b2:f3:33:dd:28:fc:de:a5:d1:d4:7c:b8:34:32:3f:63:b1:
28:06:27:b8:0f:a0:2b:d1:92:ce:8d:a5:53:1f:0b:60:cc:cb:
0a:a0:60:a7:be:3c:e7:4e:88:1f:6e:71:1e:a5:2d:77:b0:3e:
df:a4:49:c6:47:8d:4c:c4:e1:ae:c6:68:82:08:d8:56:d1:d5:
80:13:4b:f4:cf:ca:cd:e4:ed:e6:65:d1:a7:d8:de:90:ba:0a:
06:2f:08:dc:f2:92:bc:55:0e:f0:e3:48:0c:04:aa:e6:82:7a:
8c:a2:ae:21:ea:fd:16:34:ff:8c:1f:19:d6:9a:4d:65:ea:19:
22:2b:4f:95:bf:65:22:09:94:e7:19:80:45:97:7d:6d:00:d1:
10:6b:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:51 2026 by rpki-client