
$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: A7qt6qks4Slo2kVgCgsrm5suogqMPgkzCPhVy5P6cec=
Subject key identifier: 79:35:55:BA:06:7A:5B:7F:11:C6:D7:9B:B9:F5:00:7A:BF:EC:67:BC
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 02C5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 02B8
Signing time: Thu 04 Jun 2026 21:58:25 +0000
Manifest this update: Thu 04 Jun 2026 21:58:24 +0000
Manifest next update: Thu 11 Jun 2026 21:58:24 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: Rkeg/fdXwtYXa9jeXHBepZrJea7hJ/KfYn3J6ps2Jo0=)
2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=)
3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 21:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Jun 4 21:58:24 2026 GMT
Not After : Jun 11 21:58:24 2026 GMT
Subject: CN=6a21f501-00d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a1:89:a2:1b:4a:73:28:57:94:88:57:f2:22:
82:3d:4a:ad:20:2e:ae:4c:50:59:4e:63:25:59:6f:
91:5c:29:c1:8a:51:d5:8c:84:3b:80:a1:b6:7b:43:
6a:75:0e:63:a8:d8:ed:79:32:4a:59:39:fb:a4:67:
a0:9d:03:3e:a4:3d:16:55:e6:a1:bf:4e:bb:cf:d9:
64:6a:73:7c:e5:dd:98:d5:19:bf:80:8e:ff:1c:8b:
0d:28:81:6c:a8:c5:66:6e:b0:7d:eb:dd:9b:74:db:
19:61:29:68:72:f1:62:d8:3e:92:59:16:39:73:8f:
e8:84:fa:77:54:f5:eb:ef:a3:10:75:b5:da:7a:4e:
74:6e:b1:2f:25:93:1e:4e:cb:99:04:52:54:82:36:
84:d4:f7:b3:c1:19:be:7e:91:a0:95:78:ab:86:52:
bc:db:cb:12:42:23:8e:24:76:b6:25:27:5d:eb:0e:
e2:5d:09:f0:7d:0e:48:ac:31:07:b4:4e:5c:a6:8d:
65:03:3d:03:74:a7:15:29:52:18:03:8a:64:ae:7a:
fe:0e:35:8b:16:97:e9:cf:34:ea:77:c3:0d:85:ee:
c8:d3:03:f3:94:c4:a7:32:b4:a0:b5:e2:34:e6:22:
38:ad:e5:39:a9:54:bf:8a:ef:b8:4c:4e:d7:51:69:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:35:55:BA:06:7A:5B:7F:11:C6:D7:9B:B9:F5:00:7A:BF:EC:67:BC
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:59:27:99:ef:73:c6:b2:b9:ab:a6:88:a0:52:3d:2a:ff:92:
74:5a:a7:78:3a:9b:82:3a:f7:50:63:ab:12:23:65:35:38:d8:
75:5e:a3:05:d8:6f:ef:36:d0:4a:38:7f:a3:87:95:92:a4:1d:
24:69:30:f9:ba:3f:d4:a4:ff:78:30:98:a7:01:c6:f3:68:08:
f7:b0:62:9f:9a:71:ad:77:19:8b:5c:bf:86:be:37:0f:21:05:
6e:11:b0:20:6b:cd:b3:88:fe:fa:1b:27:ef:bf:55:ad:d0:3b:
ac:aa:e4:34:f6:02:a5:fb:b2:ad:7b:5a:81:2e:d3:f7:a8:68:
1c:a9:c9:17:0f:ce:ac:1e:f5:a3:5e:e2:38:15:d5:9d:ab:8a:
96:45:f9:6d:0c:84:45:63:93:0c:58:c2:33:e8:57:e5:fb:8c:
e3:24:0f:17:25:1c:a9:1b:19:09:b1:d6:c3:41:cf:42:b2:7c:
68:60:fa:06:05:d4:54:4d:ad:14:6b:d7:4c:be:e2:c3:83:d0:
d1:3b:33:d6:47:bc:a6:a9:4a:2b:ae:27:44:ea:38:88:99:89:
06:3b:74:b6:5a:b0:64:7c:e1:04:ca:c5:59:8b:59:f0:1d:6a:
4b:29:60:ad:04:b1:63:d7:17:91:3b:ca:88:aa:0e:9c:66:2f:
4b:c4:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:50:15 2026 by rpki-client