
$ rpki-client -vvf rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
File: qtP-OSFFYMILVrZr17neXikZTf4.mft (raw, json)
Hash identifier: ZJdBiwB30FXpY7nBawJhbplxwdkTr38hdFTkypPXIGc=
Subject key identifier: E7:1C:02:7C:9A:89:FF:F2:60:F7:0C:00:E6:BC:0B:3B:91:2D:6C:35
Authority key identifier: AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE
Certificate issuer: /CN=A915273A/serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
Manifest number: 1A
Signing time: Tue 19 May 2026 08:52:37 +0000
Manifest this update: Tue 19 May 2026 08:52:37 +0000
Manifest next update: Tue 26 May 2026 08:52:37 +0000
Files and hashes: 1: qtP-OSFFYMILVrZr17neXikZTf4.crl (hash: m3BEIXe789hmjj3NjiJyxGGxoJ2nfRvxEYM+Itiak8Q=)
2: 68C95B4044C811F1AF05867DBD833773.roa (hash: EgnYcd9zGGkBLRDkgrSpZMFzkZue4mGm6N7R+D7HArs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl
rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 08:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915273A, serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
Validity
Not Before: May 19 08:52:37 2026 GMT
Not After : May 26 08:52:37 2026 GMT
Subject: CN=6a0c24d5-24b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:d3:fd:16:61:26:ba:e0:40:11:f2:ad:65:
8a:d2:13:ea:6b:9b:dd:74:37:ba:43:b8:e6:db:c4:
74:4b:a7:0d:27:1a:f8:75:e4:08:87:81:00:b6:0f:
35:0a:24:59:ee:5e:e4:6f:9c:ed:9f:fb:7f:c5:c9:
9f:3b:94:fc:46:4b:44:fa:e2:6b:65:ab:00:2a:7e:
88:ba:cf:2c:ff:d3:66:66:f5:a5:6f:b2:5f:0c:1e:
d6:62:a0:4d:27:87:44:39:ec:20:00:12:06:b7:2c:
01:4c:13:46:8d:95:44:cf:26:6f:b5:38:6f:b5:40:
bd:7e:b9:36:a3:0c:c9:64:e2:bd:ab:52:2e:cf:c6:
a4:3e:cb:0a:86:d5:b6:30:01:f1:9a:63:b0:db:49:
8f:20:31:71:ad:b4:8a:0b:e7:d8:b2:2b:67:87:b4:
c2:59:31:cf:69:b1:d4:f2:09:79:a6:03:6d:f8:b9:
c3:1e:1e:00:2e:60:21:1c:57:d1:a2:3a:9f:fa:8d:
0e:92:77:35:5d:02:68:80:30:26:12:95:a2:78:1c:
f5:0d:77:f0:84:ea:a7:7a:b7:4f:0d:d9:f6:83:0c:
dd:1d:b3:be:08:eb:47:19:7e:1e:e3:9c:54:9a:41:
f3:f2:6f:5a:dc:ba:d5:11:2f:cc:73:86:d9:99:70:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1C:02:7C:9A:89:FF:F2:60:F7:0C:00:E6:BC:0B:3B:91:2D:6C:35
X509v3 Authority Key Identifier:
keyid:AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:08:21:e9:58:9f:97:dd:42:a9:28:87:2e:d0:d2:88:3c:
4e:8b:85:92:49:21:97:bc:0c:77:78:dd:00:28:2d:ca:0c:ab:
d2:23:48:d4:b3:e7:fb:9c:89:cd:ea:c3:9b:99:1b:72:59:cb:
9e:50:bc:8f:d3:53:e2:d8:ad:0f:81:ae:7b:2d:bb:80:83:fd:
35:e9:57:13:08:54:35:73:5d:ef:35:82:9d:60:72:8f:2a:12:
d1:f7:ee:09:32:44:1f:bf:70:9f:10:81:7d:ee:75:b0:82:ad:
dd:73:ae:a2:f8:8d:93:28:61:39:35:ef:5a:fc:98:bb:4d:75:
06:09:57:4e:96:da:ed:70:a6:fa:cf:04:4a:f8:8b:94:54:5a:
b5:f1:38:19:fb:a3:f0:d6:55:0e:d4:99:b9:48:d0:53:c8:17:
6b:e3:8a:d3:22:1c:6a:ed:b0:61:35:14:78:de:b8:03:4c:e6:
2d:76:5d:e7:60:83:a6:a1:93:c6:c1:2e:24:7b:dc:f2:63:8d:
93:00:c3:8a:46:a1:3a:f2:0a:e0:7d:16:be:3f:f3:8b:9c:56:
87:42:57:c1:8e:95:6f:f1:48:c4:bd:cd:5e:51:ee:42:1f:b9:
46:9b:39:ed:e7:06:42:a8:81:d4:d6:8d:a7:cd:0c:b0:55:ef:
30:26:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:21 2026 by rpki-client