
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
File: q30L1dKrXe4vHNaWuCm675d_eM4.mft (raw, json)
Hash identifier: jSiq9KUaDQecajndBQclw45ejNWsPY0xc1wBg4zG5ig=
Subject key identifier: E6:54:DD:55:B1:07:24:C5:37:61:85:4A:8B:47:45:75:9C:12:7B:AD
Authority key identifier: AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
Certificate issuer: /CN=A9171A5B/serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Certificate serial: 198E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
Manifest number: 1971
Signing time: Wed 20 May 2026 16:25:45 +0000
Manifest this update: Wed 20 May 2026 16:25:45 +0000
Manifest next update: Wed 27 May 2026 16:25:45 +0000
Files and hashes: 1: q30L1dKrXe4vHNaWuCm675d_eM4.crl (hash: EuOB51gJlxg2j4DwYLFpXwrOL63X1fbSw6JQmrhsv98=)
2: EC8BB4F2B2B411EF8B387C7CC4F9AE02.roa (hash: i4NWXoIOqvLLIDoT5vnJRlML/dfECc5wW/haWblxm44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6542 (0x198e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171A5B, serialNumber=AB7D0BD5D2AB5DEE2F1CD696B829BAEF977F78CE
Validity
Not Before: May 20 16:25:45 2026 GMT
Not After : May 27 16:25:45 2026 GMT
Subject: CN=6a0de089-4f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:6b:87:2f:dd:80:7d:33:dc:13:a0:25:e0:
bd:78:20:e1:a3:ad:55:09:e6:64:15:a6:7c:98:c4:
db:ca:fb:9d:4c:c9:8e:d8:2d:a8:bc:dc:a5:98:30:
f6:5d:e9:73:6c:33:3c:5f:3f:d5:63:4d:77:6e:72:
1b:8a:38:2f:02:c4:94:4d:7e:26:1d:af:66:23:6c:
4a:fd:77:cb:95:19:8d:0e:9f:ea:08:c7:fc:73:64:
f6:67:95:49:67:e0:21:a6:0e:2a:eb:03:5d:4a:1c:
80:59:32:e3:2c:a8:06:ef:d5:17:11:cf:e6:42:60:
48:89:1b:a4:b2:b6:08:88:5d:bc:e8:fd:ee:f6:d3:
61:88:01:af:c3:20:d7:7c:f7:77:2c:77:e5:5a:88:
1c:00:e3:8c:a9:f9:18:bd:3b:34:d0:67:88:d3:a7:
cb:4c:4b:58:b2:72:bb:9d:c5:85:25:81:10:2c:d4:
8e:67:7a:46:49:5c:f0:b1:8b:36:ec:3b:2b:3b:a2:
79:d9:26:aa:20:f5:1a:f0:c6:8d:4d:65:37:74:36:
09:69:94:c3:27:3f:e5:af:e0:30:d6:ab:5a:a9:01:
23:7b:81:8d:3e:55:8a:85:a8:70:58:92:13:05:6f:
d2:7c:fc:bb:1a:a6:0e:e3:42:21:ed:a5:85:90:bd:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:DD:55:B1:07:24:C5:37:61:85:4A:8B:47:45:75:9C:12:7B:AD
X509v3 Authority Key Identifier:
keyid:AB:7D:0B:D5:D2:AB:5D:EE:2F:1C:D6:96:B8:29:BA:EF:97:7F:78:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q30L1dKrXe4vHNaWuCm675d_eM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A5B/17E10102993B11E79ABB8181C4F9AE02/q30L1dKrXe4vHNaWuCm675d_eM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:82:3d:ef:5a:a6:b1:d6:4a:f2:f9:57:4b:a2:c1:aa:58:7f:
95:b2:68:30:ae:7f:a1:b2:4b:9c:8d:f1:b4:13:cd:b1:1c:13:
37:23:cf:36:4d:2a:2d:05:c2:2e:f3:f6:0e:c6:0a:25:74:2b:
7a:4b:81:28:45:30:45:ee:c4:35:b8:81:09:56:e0:a3:ce:2a:
87:a6:6d:95:9b:47:b8:ff:f7:10:c4:cd:c8:e2:55:5d:51:3d:
63:0b:d9:c6:05:34:dc:31:76:0d:e6:2b:27:bb:c4:9c:b0:43:
d4:a4:af:df:d5:f8:70:1e:d6:cf:56:be:c5:a1:d0:29:ec:01:
38:59:eb:e8:01:71:b0:a7:e4:5a:06:b5:f0:ca:05:14:89:4b:
81:dc:0d:2a:1d:95:0c:4c:4d:e0:e2:bd:8a:f1:70:45:d8:01:
76:f7:e8:ea:b5:32:37:ae:a8:be:53:88:2f:12:30:2b:d4:7c:
ff:d9:6f:31:8b:eb:42:85:42:47:c7:ad:b6:b2:13:9c:a0:be:
d6:74:ea:3e:3d:f9:78:2c:89:8c:3f:af:40:14:14:64:7a:40:
2b:d5:6f:18:2a:2e:5b:5f:ec:ee:0c:df:a0:4f:b1:f0:96:26:
03:5d:5d:28:16:1c:91:fb:0c:c8:81:79:12:19:5c:27:e4:66:
d1:d9:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:16 2026 by rpki-client