
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: PoNn1HkPFEnLHOng99az9jGI4/GJ7doUdUaSEhtvr1E=
Subject key identifier: 89:55:5E:A3:5E:D0:0F:C1:D0:65:6F:D1:AD:19:D8:18:24:E9:6D:5A
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 05C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 05B2
Signing time: Sat 16 May 2026 23:12:30 +0000
Manifest this update: Sat 16 May 2026 23:12:29 +0000
Manifest next update: Sat 23 May 2026 23:12:29 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: vKkgdlyqbbbTs+RROrA+AqxevPGdNvQnAXvKqIKTIAo=)
2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
4: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 23:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1475 (0x5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: May 16 23:12:29 2026 GMT
Not After : May 23 23:12:29 2026 GMT
Subject: CN=6a08f9dd-d824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0a:01:77:36:a2:9b:43:c8:1e:c1:21:59:e8:
7a:4c:93:97:9a:32:c6:7e:b2:dc:08:ed:ff:ce:9a:
46:2f:18:ce:47:87:04:09:9f:46:19:a5:3b:97:cc:
4b:61:d0:59:8e:f8:39:eb:33:a4:5b:72:fc:78:8a:
cb:71:2b:b0:35:e1:fa:a3:e7:54:8c:05:88:b6:fc:
64:f5:89:a0:30:fa:c8:3f:92:3c:f4:d6:77:27:34:
2f:54:79:25:c2:8a:52:4a:08:47:7b:95:d2:a7:40:
ed:ed:85:e8:cb:b1:cb:22:3b:66:f2:88:3c:0f:e6:
c7:ee:71:8d:29:16:26:80:ca:bc:c8:61:93:d5:e5:
01:ec:ee:18:e2:f8:5e:e5:5d:ad:67:6b:aa:c0:c4:
34:1f:e3:0f:36:22:66:01:d2:4e:bd:9e:35:30:22:
2c:73:2f:ef:72:85:6c:f6:8f:49:70:b8:9e:cf:14:
e2:d4:5c:64:e4:e5:05:1c:92:0e:06:a8:8e:d9:2a:
3c:60:9d:99:d0:db:dd:b9:6e:e1:a7:39:d2:75:ff:
fa:30:0c:80:0e:ff:b7:d8:d3:d2:14:b6:bb:64:af:
c0:b6:01:ca:b2:76:6f:89:78:72:12:40:d6:38:cb:
72:51:63:9f:60:c5:57:13:31:4b:a1:dc:ff:0e:96:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:55:5E:A3:5E:D0:0F:C1:D0:65:6F:D1:AD:19:D8:18:24:E9:6D:5A
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:89:f5:0e:70:3d:5f:72:66:51:a6:f3:08:20:f2:43:bf:b8:
39:aa:75:25:0e:bf:56:56:58:c5:66:5b:80:76:64:ed:7e:40:
39:0c:6e:25:fd:41:cd:f7:17:78:a7:0c:fa:d9:09:5c:dc:aa:
01:9e:7a:de:a2:de:09:4a:a1:5b:23:b8:de:7a:3f:b3:5a:14:
26:f1:bb:05:c3:86:e4:8b:8f:a4:bc:77:1a:c3:35:6d:ca:46:
6d:52:79:40:9b:14:d3:54:39:ec:c1:76:fb:47:4e:ed:87:c1:
40:44:96:26:e5:d9:b8:8b:c6:19:9b:07:a6:47:1d:d1:81:e2:
13:b8:85:97:17:2b:a0:89:20:dc:9b:8d:4d:17:ff:4b:6f:59:
b8:0f:32:42:30:5d:4e:3b:62:a3:52:ad:e6:35:69:c4:76:ea:
82:e8:67:78:11:3b:c6:93:7a:cd:a6:8b:75:37:c1:5f:c0:30:
1b:e5:b7:e0:60:74:ef:82:d6:44:86:53:74:ea:0a:ed:d4:67:
35:27:d3:0a:c8:49:2c:1d:3b:50:3a:66:32:90:66:77:e1:e1:
fc:90:74:f6:6f:9e:7c:a9:2a:c3:ff:0d:7b:f7:ea:50:7d:2a:
52:14:14:76:2a:b4:67:7e:71:37:1b:83:e9:31:98:4a:5d:d5:
67:b1:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:52:55 2026 by rpki-client