
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
File: Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft (raw, json)
Hash identifier: eRDN5bk2bKhZGMVQOxj5xV+ju9dKsKEHqML9AJEkvzM=
Subject key identifier: D9:64:67:22:00:AF:66:0A:73:8B:13:FA:06:64:A4:BF:BE:1B:E7:8D
Authority key identifier: 41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
Certificate issuer: /CN=A913D6C9/serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Certificate serial: 0548
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
Manifest number: 0537
Signing time: Wed 20 May 2026 23:36:52 +0000
Manifest this update: Wed 20 May 2026 23:36:52 +0000
Manifest next update: Wed 27 May 2026 23:36:52 +0000
Files and hashes: 1: Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl (hash: 4Z6FOlRwvMUGM93cDoRjEBg/qx0ug7XmQaxZK4++nwQ=)
2: 54AC9B64C3B411EEBF90C180C4F9AE02.roa (hash: DouU0HR255E8sWinNcaYlwzhjnFkk4nKBv8m3C8lp2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D6C9, serialNumber=41F8B6B47BADB00F6F8FE8E7E013FF55A18E7428
Validity
Not Before: May 20 23:36:52 2026 GMT
Not After : May 27 23:36:52 2026 GMT
Subject: CN=6a0e4594-1222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:1c:23:96:5c:ca:7a:c6:8d:42:f2:11:fa:
73:31:d8:9c:1f:78:67:ef:44:ef:5f:21:6c:f8:90:
f3:b0:47:a9:a2:99:da:5d:3f:b9:ce:73:94:4f:37:
46:61:ca:a7:f0:35:02:79:22:37:cc:b6:48:4d:09:
a6:8d:f7:9b:91:41:f1:36:f3:9c:aa:88:ac:e4:ef:
47:d2:e2:f8:6c:fc:3e:ae:95:20:e4:b3:bc:e4:6e:
81:a5:19:d2:3f:ff:a8:f5:db:2c:99:21:2e:17:71:
bb:70:b5:71:2d:86:f5:3d:e6:4d:57:63:a1:25:46:
e3:d6:c3:d1:c4:ad:11:e7:7d:1b:35:dd:3f:6e:29:
6b:7a:82:d0:1d:19:73:95:72:12:96:ae:11:3b:30:
34:f5:75:a2:5f:b8:ae:39:41:b0:7d:b4:e5:80:fa:
b6:d1:1c:a1:dc:3f:86:43:f7:e2:ab:cd:b4:34:0d:
64:51:cf:e7:13:ed:b6:ea:be:04:45:87:32:78:59:
fc:22:59:51:7d:f5:39:93:51:23:06:ad:46:85:72:
7b:bb:45:de:09:c7:66:d2:0a:ae:49:5f:ea:20:ee:
06:a8:49:95:98:29:d8:3e:0c:62:e6:fa:1a:6a:a3:
1b:e0:78:d9:8d:28:7d:af:38:25:c2:d1:38:3f:d6:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:67:22:00:AF:66:0A:73:8B:13:FA:06:64:A4:BF:BE:1B:E7:8D
X509v3 Authority Key Identifier:
keyid:41:F8:B6:B4:7B:AD:B0:0F:6F:8F:E8:E7:E0:13:FF:55:A1:8E:74:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qfi2tHutsA9vj-jn4BP_VaGOdCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D6C9/73FBD332481D11ECB6FEDF77C4F9AE02/Qfi2tHutsA9vj-jn4BP_VaGOdCg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:5b:a6:fb:87:72:fd:29:a7:bb:3f:37:86:af:f8:7a:b8:99:
fd:79:73:eb:a3:af:1e:00:78:6d:a8:65:68:e0:3a:03:1e:f1:
55:9a:2e:40:21:8e:11:f1:66:ca:55:5b:2c:2d:9e:8a:40:0c:
ef:92:be:ff:ab:e2:b7:39:14:90:f3:9b:5b:0e:ae:28:6d:04:
3d:37:16:c2:cd:b5:f9:6d:1e:a6:a3:96:7d:f2:1c:69:99:ac:
b0:c7:14:ad:6d:32:1e:9d:fc:0c:05:1d:75:75:b2:06:31:90:
f2:97:36:67:e1:5b:e1:ac:a9:58:85:c6:bd:af:28:90:f6:3a:
e1:43:a5:48:cb:ea:28:9c:b9:22:c1:3b:81:d5:67:54:b0:e4:
70:b4:77:3b:fc:49:03:ff:39:1b:64:89:fa:c4:1e:88:a9:4d:
ce:41:ce:3d:53:fd:ac:ae:4e:87:4d:54:05:63:5b:60:c7:36:
64:22:af:0a:95:9f:6e:f4:ba:d6:09:a8:42:e9:fb:ee:47:7b:
f7:11:bd:7b:ac:5d:0d:90:0e:54:88:58:0f:74:fd:0c:b3:6f:
20:34:49:0b:94:bd:7c:35:72:5c:82:d6:42:9b:9d:3f:c5:83:
6a:25:bd:6e:6d:35:d0:f7:ca:e5:54:2f:65:46:d6:e2:fe:52:
22:fc:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:34 2026 by rpki-client