
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json)
Hash identifier: T1QLfso3pVFRKau8QJLORg2lB98Njx8H684kKFNYF6M=
Subject key identifier: 70:B8:F3:AD:F0:5D:36:E3:45:14:FF:BD:44:5E:D2:26:C8:D3:B5:8A
Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
Manifest number: 51
Signing time: Mon 01 Jun 2026 09:04:40 +0000
Manifest this update: Mon 01 Jun 2026 09:04:39 +0000
Manifest next update: Mon 08 Jun 2026 09:04:39 +0000
Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: XwPxvsxWYitpdpmYWaOUV8HgyVpqTnvZ77ynJZ0UCKc=)
2: BBB1B36C387911F18844C9F1B7833773.roa (hash: sySn8z7CtimAbBeWbFVeZLj6Bb/UV3HDRIyOYd+GVX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Validity
Not Before: Jun 1 09:04:39 2026 GMT
Not After : Jun 8 09:04:39 2026 GMT
Subject: CN=6a1d4b28-8f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:c0:3a:97:88:6f:3b:b4:37:ba:f5:47:ad:
09:73:85:c4:ed:1e:aa:8a:38:3c:4a:ec:ec:ed:ac:
dc:e8:31:7d:15:28:8e:f4:c2:b7:4a:ce:c9:54:34:
79:5e:15:c4:81:dc:df:50:9f:a2:2d:54:2d:5b:fe:
bb:1c:59:b0:3c:0c:d9:ea:e2:57:05:f8:63:11:46:
63:bf:aa:e3:e4:0e:69:bf:67:a2:d9:fd:31:9d:0c:
b5:3c:c3:18:0e:37:20:d3:3b:e8:71:89:9f:4b:73:
2e:c5:1b:64:e4:83:71:26:eb:ac:7b:97:3b:d4:4c:
b4:d5:04:34:a2:57:33:23:67:b6:92:69:81:e9:eb:
50:96:1a:fa:08:82:0a:7d:ed:53:dc:19:f4:1b:03:
f3:55:e3:e9:48:b2:5f:a1:08:a9:42:50:36:70:5b:
db:28:e2:f2:f6:22:3d:d4:63:d6:93:ae:ce:64:65:
6f:20:39:53:d7:0d:38:2e:dd:c2:81:3b:64:d1:d9:
c5:b6:b7:af:92:a4:dc:48:65:ea:08:4a:0b:a0:8f:
a9:4a:ba:05:5b:59:93:6a:4a:83:79:f5:02:07:58:
bf:5a:bb:71:22:05:a4:24:97:c4:71:d9:9e:81:38:
52:b7:69:2c:65:f2:ee:d9:50:c3:2d:0d:0b:85:df:
05:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:F3:AD:F0:5D:36:E3:45:14:FF:BD:44:5E:D2:26:C8:D3:B5:8A
X509v3 Authority Key Identifier:
keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:91:bc:d6:c3:e0:33:8e:dc:5a:eb:8e:1a:07:1f:f0:63:
46:0b:bc:30:98:35:26:06:0a:ed:1f:38:30:09:7b:1d:68:db:
d9:ea:7b:9d:fc:1a:b8:0c:08:f6:74:36:24:3b:b8:da:7d:92:
c0:e4:89:56:ae:b4:24:1c:b9:8c:9e:c0:f6:dc:ec:a9:ad:e0:
67:43:a8:93:7e:0a:4a:fe:eb:89:75:37:a3:da:a3:6c:be:30:
c8:8d:1f:8c:46:9e:d0:cd:c7:b2:93:9a:40:20:99:4e:c8:82:
1a:1f:de:0d:cf:95:44:0d:22:74:e5:40:69:df:4e:c2:75:93:
fb:9e:a5:bd:86:e4:64:be:a5:a2:cc:4d:1b:3c:c6:c3:db:d5:
98:83:05:af:9f:31:4f:eb:b0:52:7f:5e:98:6a:de:8e:83:6c:
d0:91:dc:bb:01:72:a8:f6:ad:df:77:c8:b9:a8:d8:ed:ca:4b:
25:98:81:cc:19:3d:70:54:56:2b:5e:24:80:0e:ea:f9:67:c7:
f1:8a:2d:4a:44:c7:ca:70:64:39:2b:33:f8:e0:e8:3e:5a:16:
f9:dd:be:61:5e:d4:18:92:00:7b:fe:6d:de:18:04:5d:b6:bb:
47:b8:f2:8e:75:2b:19:54:88:cc:ac:41:bb:da:38:a8:3a:e9:
cb:8a:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:11 2026 by rpki-client