
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
File: qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json)
Hash identifier: sFp59g0o+2uo6PnDyrQjjYC/QwZYlbZBKd3llFDS9Lg=
Subject key identifier: EB:13:01:D6:AA:85:65:A3:D2:D1:B5:1E:68:49:72:C2:88:F9:F5:74
Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
Certificate issuer: /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Certificate serial: 097D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
Manifest number: 0973
Signing time: Wed 20 May 2026 20:06:04 +0000
Manifest this update: Wed 20 May 2026 20:06:03 +0000
Manifest next update: Wed 27 May 2026 20:06:03 +0000
Files and hashes: 1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: STFnlmhUKJm4GXxnkaaopDzFV2t3elaKx22OSatfGbs=)
2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: 6Y/pEvT0pNfH6xtp6yr5Lbw66np3FvqbE7a4waoUJL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2429 (0x97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Validity
Not Before: May 20 20:06:03 2026 GMT
Not After : May 27 20:06:03 2026 GMT
Subject: CN=6a0e142c-7269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:49:d7:bd:c6:1f:8e:f5:42:4d:8e:56:fd:
3a:da:15:6b:c3:9f:c4:9f:ba:13:73:3e:10:b5:c7:
b4:bd:3c:e6:a1:cb:4a:c9:f6:47:38:23:df:b8:04:
1a:0e:ba:a7:fa:82:6c:07:19:a5:c3:cb:83:46:d5:
fb:8c:04:01:2b:f7:97:d5:db:38:45:b4:e2:81:48:
70:32:57:4b:5e:2e:aa:67:2d:08:f1:40:ff:ac:4e:
29:b1:c0:91:f4:61:42:c5:c6:69:65:7d:5e:1a:d7:
07:02:44:ca:1f:e0:60:6c:3a:86:71:ac:80:f4:23:
b8:71:5c:97:38:56:48:3c:6a:cf:f4:22:10:0d:ba:
6e:c6:9a:24:69:52:be:4b:0b:ff:13:1c:00:e9:bd:
52:52:50:af:52:5d:36:ee:6a:a2:6d:7c:5a:a0:15:
e9:57:40:e6:8c:20:30:6d:81:33:d9:a2:e7:4c:c0:
c5:e7:91:03:a5:0c:a0:6a:8b:eb:67:7c:f5:90:b4:
f5:dc:3f:3b:7b:a6:4c:36:16:eb:23:9b:06:b3:c4:
88:ef:43:13:07:03:17:92:e4:ba:4b:1a:59:b0:b6:
b0:dd:1a:66:84:fa:3e:0f:4a:85:2b:63:1e:5c:88:
af:2c:19:80:f4:cf:e4:37:e8:b9:75:29:ff:85:f5:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:01:D6:AA:85:65:A3:D2:D1:B5:1E:68:49:72:C2:88:F9:F5:74
X509v3 Authority Key Identifier:
keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:86:f2:aa:a0:11:0f:85:4b:88:c2:37:41:fc:dc:6f:b2:db:
5d:d7:8c:0e:27:ab:66:77:32:51:97:35:34:d6:35:96:70:d0:
b3:da:ca:d3:4e:30:a6:52:7c:a6:ec:f1:0f:5e:5b:9b:94:6b:
81:4d:e1:6d:32:4d:1a:89:3c:76:23:77:1d:56:e8:7e:84:1d:
8e:0a:da:c7:ed:19:8c:92:e3:7b:e7:be:31:72:74:a4:36:53:
8a:9f:6f:72:ab:50:ff:27:40:de:34:4b:69:64:10:4a:bf:84:
25:63:82:c7:51:a0:20:01:16:46:26:83:f7:91:18:3f:b4:35:
6f:71:82:37:86:12:42:11:46:e6:fd:0a:52:0b:d6:57:30:f7:
86:9f:e1:2c:e4:fd:55:a9:a4:bd:10:52:f3:82:2b:ab:52:5b:
32:b4:e8:21:bc:22:b5:f1:f7:56:98:ca:2b:12:f0:e4:89:44:
13:a7:bd:c4:8d:c6:33:78:35:c9:62:9d:f4:fc:b3:34:25:a4:
94:17:ec:c3:cc:f8:da:b7:89:b1:c8:78:6a:8b:7f:14:02:30:
1a:2a:7b:4e:67:4c:e8:ab:63:ce:b9:bf:66:e7:75:ce:e0:7f:
d1:bd:30:96:a6:99:b4:db:9f:7a:c2:95:5f:c1:1a:5a:aa:07:
6a:db:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:23 2026 by rpki-client