
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier: wr2hOBUE+PrRpgx+MlGFTp4P1Xhlhwz3jJIW4RN/OJc=
Subject key identifier: FB:DA:59:D7:F7:CF:9F:F1:18:53:FB:0B:A7:1F:34:3E:64:F5:A0:79
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer: /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial: 11E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number: 11DD
Signing time: Mon 22 Jun 2026 17:08:33 +0000
Manifest this update: Mon 22 Jun 2026 17:08:32 +0000
Manifest next update: Mon 29 Jun 2026 17:08:32 +0000
Files and hashes: 1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: UXwea0MSK5MYEBSD6b5QMjR3vYwui/7eSYpHEd8fkYk=)
2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: p2avfwbA5rKR8w+8rtSYTQz3CfMf5vT3jgg0mIj4V8c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 17:08:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4585 (0x11e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Validity
Not Before: Jun 22 17:08:32 2026 GMT
Not After : Jun 29 17:08:32 2026 GMT
Subject: CN=6a396c11-d9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:3f:a3:60:96:a1:3d:ff:6c:1e:7f:1c:38:
29:6d:4e:a2:65:4c:63:29:4c:60:8d:09:e7:35:d1:
13:96:b9:fd:fc:93:12:4d:28:12:b2:fc:68:af:ff:
0c:98:4a:9a:e0:7e:2e:f9:56:c6:93:23:99:6c:32:
f9:cc:10:0c:12:54:81:2f:46:ec:26:ec:ca:20:61:
57:64:1c:1c:67:67:b9:e4:2b:b4:a0:82:f9:d0:d6:
f6:e3:32:7f:33:45:e6:08:38:59:e9:06:30:d6:18:
b9:49:97:67:01:82:fb:bc:e4:92:d6:76:d6:b2:a0:
04:62:d4:be:b6:e7:2f:fa:5e:73:13:7c:b9:99:63:
ef:ef:57:6a:66:5f:66:99:65:fe:4a:5e:f5:6c:2a:
37:89:13:ea:5d:1c:63:f1:b1:86:93:d4:cc:5f:33:
c3:0c:b3:44:7e:c0:66:a1:81:18:41:04:19:9b:c5:
bf:71:6b:92:28:f7:d4:a5:97:62:5b:5b:e9:82:4f:
7d:8d:b8:9e:88:cb:9c:1e:2d:cd:70:61:10:41:2b:
ea:b4:03:2b:de:43:0e:2a:61:56:63:79:31:d9:aa:
b9:fa:3b:13:1b:5c:09:34:f1:9a:20:61:c0:a9:f7:
da:40:a3:32:5e:13:0c:ec:64:88:48:28:f4:b1:5c:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:59:D7:F7:CF:9F:F1:18:53:FB:0B:A7:1F:34:3E:64:F5:A0:79
X509v3 Authority Key Identifier:
keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:32:f4:fe:20:f2:1d:b1:e7:3c:be:4c:cf:6d:2f:72:e1:c2:
64:7e:b6:2f:da:e5:2c:dc:5c:50:d8:e2:71:cc:60:11:b5:44:
5d:69:ce:4e:10:af:39:ab:62:ac:0e:93:78:0c:c9:e2:36:bc:
df:fc:f4:c5:07:cc:b3:a5:44:1c:bd:5b:3d:a1:de:55:2d:ff:
02:a0:f8:d5:c3:ef:57:d9:3a:16:cb:1f:88:bb:b1:5d:e9:1d:
4a:c0:d2:d9:86:98:5d:e4:bf:2b:66:2b:60:db:b1:22:c1:8d:
7c:1a:55:0e:8d:82:b1:f2:f6:3c:77:97:57:f3:50:e7:51:c8:
e3:cc:0f:3f:11:14:99:d3:05:b4:a1:77:43:5e:e6:66:6a:a7:
f7:b6:98:ae:4c:59:46:14:51:8e:87:bf:d1:68:a0:36:c9:00:
42:b6:64:d8:de:9b:7f:57:16:fa:b8:e5:74:ba:90:28:f2:d3:
22:64:24:b8:6f:60:a2:ae:f1:6d:7b:22:95:9a:43:52:37:80:
48:f9:3f:b3:66:bc:70:27:57:86:93:8f:d6:67:3e:14:d2:0d:
d5:55:98:2b:3a:a2:52:d7:e2:5e:ca:bc:52:0b:d5:5a:d9:82:
21:d8:64:54:f8:f7:f7:32:fe:e1:d7:c6:fe:75:ee:fb:24:1e:
28:30:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:31 2026 by rpki-client