
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json)
Hash identifier: dRk2aHJR9L1+1Jtx6VumlvCAsR9kaBCRpvUbaBbrTzo=
Subject key identifier: 18:73:E5:6C:CC:7D:CC:5A:66:A1:6A:9F:13:9C:23:E9:7E:96:01:78
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
Manifest number: A6
Signing time: Thu 21 May 2026 07:26:14 +0000
Manifest this update: Thu 21 May 2026 07:26:14 +0000
Manifest next update: Thu 28 May 2026 07:26:14 +0000
Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: CMpRfcE9o7EitYrA7lT7H1Bc6hf9RLzd3QTQZ1tY8HY=)
2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: EriMxkKUBJx5Xw15e8N5dYbbr/AUbZc0WvM0QC4DQFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Validity
Not Before: May 21 07:26:14 2026 GMT
Not After : May 28 07:26:14 2026 GMT
Subject: CN=6a0eb396-653f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:28:eb:d2:3b:9e:25:a8:d4:e5:ac:c6:2d:
8c:a5:8f:05:41:b0:8c:5e:8e:29:cd:74:f9:ac:5d:
e0:b2:45:55:83:5d:2c:8d:d2:6e:4b:5a:20:a3:ab:
1f:e9:8a:d5:bf:e2:b1:66:69:d0:fd:a4:03:65:4f:
d7:50:b0:fd:fc:1a:a4:57:15:3e:b1:0d:36:1d:4e:
26:6c:4b:e4:81:c0:dc:55:41:0e:73:e5:d3:a5:32:
6e:d5:b6:c8:8f:67:37:c2:cf:8d:21:c0:76:4a:b7:
9a:fa:33:eb:7b:87:31:28:dd:1e:14:7a:22:29:47:
23:b6:40:dd:c5:69:7f:42:7e:6b:2c:bb:b8:03:52:
ed:ee:01:85:6e:10:86:f4:75:20:01:ed:ec:46:f6:
c4:bc:28:b5:3d:13:b7:b3:93:1f:33:23:f7:b9:6d:
79:21:f7:93:ee:cc:19:5c:2b:93:c7:de:8c:33:ee:
76:4f:62:ac:7a:b6:a5:94:20:3f:34:7e:70:e6:6b:
58:4e:2d:16:bb:4a:1c:bb:77:0c:8d:65:e0:21:73:
c4:cd:1d:32:10:3a:95:bf:97:20:b5:41:61:53:44:
ba:f2:aa:1b:a4:25:06:f5:60:4b:61:80:4b:da:a6:
8a:ed:74:75:cc:ea:02:8d:b3:65:bf:5b:05:a3:7b:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:73:E5:6C:CC:7D:CC:5A:66:A1:6A:9F:13:9C:23:E9:7E:96:01:78
X509v3 Authority Key Identifier:
keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5d:af:cd:bd:bc:33:76:83:df:76:c8:83:93:f0:bf:eb:cf:
94:17:e3:a9:da:3a:72:38:3a:12:1f:a2:a6:4f:a3:53:b2:8f:
e2:84:18:2c:32:8b:65:1e:30:77:23:48:27:a9:a9:98:b9:db:
54:c2:d1:47:d0:99:01:d8:69:0c:33:9d:d7:b6:7c:b6:2e:89:
6e:7e:a3:39:43:fe:f4:af:3f:78:09:0d:1a:b2:10:15:14:37:
f4:93:8d:13:c2:3a:af:8b:43:ce:aa:c1:29:e7:26:71:50:8f:
fa:74:ba:49:9a:a2:38:35:63:6d:c2:6f:ce:ae:03:14:fa:11:
10:53:ce:cf:ea:f1:aa:90:c5:1e:b3:2c:b9:57:b4:a9:e0:3c:
96:6e:03:4d:51:3a:c5:d0:d2:db:9c:56:26:58:7e:bb:82:4d:
80:12:a6:cf:20:19:f0:53:85:b8:9b:1c:70:04:8f:f7:b1:6c:
21:2d:c3:0e:ce:8f:62:93:98:58:50:34:69:d9:ed:ba:3b:7b:
a1:ca:23:6a:b5:9f:0c:b3:06:90:a8:0d:e5:41:06:f5:d9:04:
b6:87:57:2c:dc:43:e6:e2:39:99:bf:09:96:79:19:e7:f5:f0:
a3:b0:d0:83:f9:f3:df:38:54:e2:82:9d:b2:d8:5d:01:41:91:
d5:e3:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:58:37 2026 by rpki-client