
$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier: jOGV652Pdqz9PqGcOY1Eth9l0GAZs9jCiVZM6SmW4L8=
Subject key identifier: 61:2D:37:B9:40:B6:57:75:48:66:3C:26:FA:FD:CE:2B:2F:89:8C:3C
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number: 0191
Signing time: Thu 21 May 2026 04:28:59 +0000
Manifest this update: Thu 21 May 2026 04:28:59 +0000
Manifest next update: Thu 28 May 2026 04:28:59 +0000
Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: QrRaB8D8Dgvz8S3/AF1zx/mgNhqNcTdRNtB+Wcd61kM=)
2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: KlNM/yfkSE+noMo4pBbPbKUObjnAMx3gXh75VDyO61o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Validity
Not Before: May 21 04:28:59 2026 GMT
Not After : May 28 04:28:59 2026 GMT
Subject: CN=6a0e8a0b-0a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:2b:8c:b9:c3:f6:74:d7:22:9c:a0:45:ae:
14:df:88:b2:a8:a1:7c:bf:57:f8:c3:13:0e:d0:1e:
79:a5:0a:05:bb:1f:f5:21:da:73:32:27:31:84:9e:
1a:2f:4d:c9:9d:30:d2:6e:c8:10:f5:51:28:3f:4c:
b7:09:85:06:85:36:2a:64:91:fb:d5:2e:a2:fd:2a:
3a:07:a6:3a:55:94:02:c4:44:34:83:65:0d:ac:1c:
20:3f:f0:44:5b:9f:69:1d:de:89:ce:04:15:ef:d5:
f7:2a:78:47:63:a8:58:80:f7:5b:ea:26:3d:95:e9:
8d:2c:7b:fc:4c:21:17:04:f2:b4:89:75:b7:a5:80:
0f:de:c2:df:fd:ee:99:74:6e:0c:a2:5b:cf:9f:32:
78:e3:59:7e:2f:a0:19:6e:8e:b9:42:12:54:ef:9a:
26:55:84:9d:16:92:5f:23:8f:98:58:c1:94:f0:4f:
9b:1c:b9:4c:4f:36:41:9d:ff:98:73:40:44:c0:00:
07:da:ea:40:fc:5e:6f:1b:0f:42:52:5f:2d:7b:97:
03:23:3f:bf:1b:45:19:cc:96:d4:98:91:d8:23:8a:
b8:d5:01:06:cf:d3:5c:df:e5:6f:48:f3:85:67:57:
83:3b:3b:c5:6b:ba:26:c6:94:70:28:a7:09:bf:d8:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:37:B9:40:B6:57:75:48:66:3C:26:FA:FD:CE:2B:2F:89:8C:3C
X509v3 Authority Key Identifier:
keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:b8:f1:2e:d6:7d:a2:d8:75:0e:b2:2e:4e:8f:87:ca:bf:
76:4f:50:8b:17:ac:d2:8a:fa:3b:22:9a:dc:b4:04:03:fa:8e:
a9:e0:ac:08:ca:ef:3e:1b:88:63:0d:78:80:1e:d3:b8:7a:9e:
1e:e0:b0:c4:da:e8:e7:ad:da:67:39:fd:80:31:e7:f4:fd:ec:
03:83:4d:55:33:13:42:6f:0b:cd:95:cd:fc:a7:e6:b0:bb:a9:
aa:96:fd:20:49:4f:6e:af:bd:e9:d7:12:b8:ae:38:dc:92:79:
9c:8d:b8:1e:51:32:00:cb:24:96:7a:85:2c:dc:c3:d1:20:dc:
16:92:ec:c8:ca:75:4b:99:69:c8:4f:25:91:42:df:19:0d:35:
28:1e:ca:21:85:bd:41:38:bf:bb:48:db:9b:89:28:7a:1f:df:
a7:a5:98:fa:49:e4:8a:49:e4:e5:48:21:9e:f8:d3:d7:bf:bd:
9a:a6:a9:1a:c2:48:6f:1b:81:dd:43:61:18:86:5c:d0:d5:dc:
3f:46:62:b5:6d:d1:3b:3e:f6:d8:ca:3b:f1:92:30:80:a7:19:
15:b8:57:e0:79:b4:8a:c0:1e:a1:fb:26:f2:33:7b:c5:4e:2f:
dc:1f:a8:e2:8d:ef:a2:c6:0a:cd:b9:21:db:b9:7f:25:f9:2f:
30:1b:48:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:58:24 2026 by rpki-client