
$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier: KjPV5soZd2Ael0a7q+FhWX4g0FcyIxuHjHDAN7HlvpM=
Subject key identifier: E4:A3:FB:85:59:4A:D5:54:18:D7:94:CE:6A:A1:47:53:63:75:0F:53
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial: 0312
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number: 0309
Signing time: Thu 11 Jun 2026 03:21:17 +0000
Manifest this update: Thu 11 Jun 2026 03:21:16 +0000
Manifest next update: Thu 18 Jun 2026 03:21:16 +0000
Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: Zo6gkOyL60RrynZqAE4O0UJb40DjVFuAPYGKzEY/WMo=)
2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Validity
Not Before: Jun 11 03:21:16 2026 GMT
Not After : Jun 18 03:21:16 2026 GMT
Subject: CN=6a2a29ad-3bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:4f:c5:c0:0a:b0:1b:9d:6d:90:55:e5:b1:
4a:e8:de:d8:2c:fd:f6:3c:2b:e2:bf:ab:3b:b5:a7:
2a:66:5c:e5:ac:01:6f:51:a2:d9:0e:9b:31:3e:81:
de:85:80:6d:17:f7:0b:08:82:31:b4:3c:55:ab:d3:
c4:ee:a0:53:a9:cc:28:54:43:a7:c8:2e:f5:cd:bc:
b9:7b:d6:60:53:9a:0c:31:f3:e2:01:ce:af:a9:ef:
47:8a:57:38:bd:1d:ac:cf:46:1d:69:71:b5:31:4c:
3e:2f:d4:4a:f8:b1:80:63:27:f6:7d:a5:fb:02:66:
98:fa:77:07:e3:0d:ec:49:de:46:cc:6d:aa:87:7f:
48:d0:30:80:be:3d:86:34:7e:e0:a1:aa:fb:eb:7b:
9e:31:cb:9e:b5:ff:6b:29:09:a5:da:31:c2:4a:78:
ae:c2:2b:a3:fe:28:40:4f:fd:b4:f9:f1:4c:4e:d3:
2e:03:46:f5:64:a4:2a:6a:67:01:23:35:ef:f6:86:
9f:87:c9:cb:8e:44:98:95:54:84:94:57:2d:ce:36:
89:cd:c7:24:d3:5d:7d:e4:c6:ea:b5:d1:20:43:76:
57:64:19:ba:22:3f:ef:59:c2:64:90:72:7b:d4:88:
9a:26:42:2b:d6:f3:bc:0f:8e:54:20:e3:1f:62:47:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A3:FB:85:59:4A:D5:54:18:D7:94:CE:6A:A1:47:53:63:75:0F:53
X509v3 Authority Key Identifier:
keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:f0:fe:c6:e3:86:4a:17:1f:18:b7:a0:c5:07:ae:10:c0:38:
8c:02:72:85:32:9a:a6:a6:7a:93:24:68:d6:63:02:89:98:b7:
27:d0:28:5b:7e:49:a6:20:6a:90:f5:ab:85:cc:34:d9:5d:6e:
31:bc:c9:c0:40:7d:98:0b:c7:79:d0:a0:9c:6a:56:dd:b0:2c:
ea:0a:47:3a:ab:a4:26:93:cf:4a:25:85:78:d8:c7:e5:8e:7e:
41:8b:c1:d1:63:a0:43:fe:00:95:29:63:c8:b3:74:a8:97:da:
24:ca:4f:6b:83:6b:20:b3:55:53:9e:88:38:74:b8:17:f3:16:
ed:88:c4:15:e2:28:56:2d:40:22:14:30:dd:db:85:fc:3e:38:
f3:41:54:c5:26:c9:f5:e4:92:b0:bd:7a:51:12:2f:79:f0:6a:
76:61:a6:ab:d7:36:22:2b:69:d2:78:eb:b9:b2:88:6f:57:ed:
b0:66:ee:9f:7e:8a:a1:af:ac:31:01:d3:65:cb:22:08:10:d9:
77:0b:75:0a:bb:e7:87:29:d3:c7:59:a1:44:d2:f8:6b:70:1e:
28:24:26:39:cd:d0:a3:85:26:f1:07:59:4e:81:84:6a:2a:42:
c2:06:3e:63:7b:0e:a5:19:85:fb:fd:7e:45:da:5c:64:df:6e:
8c:79:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:51 2026 by rpki-client