
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json)
Hash identifier: 922XkaTBwDQV2ScIdvn1zHRHpY//UgLosAKACoNQU90=
Subject key identifier: 32:81:5C:3B:6D:3C:33:E1:27:3D:20:F1:F1:87:08:28:FA:00:87:D4
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 35BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
Manifest number: 3578
Signing time: Sat 04 Jul 2026 15:10:46 +0000
Manifest this update: Sat 04 Jul 2026 15:10:45 +0000
Manifest next update: Sat 11 Jul 2026 15:10:45 +0000
Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: Rz9tRgGe0NV1quNotsjER5keZGXvASmegdQWZAky30Q=)
2: 6AE0DC4E1AC711F191E10968393D8C67.roa (hash: EIquPTmzhNm/EgMF6y+odwoHMOmuWe10Hl5flxr8E0U=)
3: 861025FE5FE811F1B01C65CA7947A888.roa (hash: b93az1yEMQhuoit5EC4BrPCFQcc8SDWXmLB4a9o1rYs=)
4: 98AF39F22E4211F1901494E893833773.roa (hash: iFoAuTtUU0PmJ95WE4oNN0+3octF6zZzDVlPo3nsN08=)
5: 70B74E2A16D811F1AFC6DD17323D8C67.roa (hash: t/FinXSX20SwBMUiySFrkn7ywqOOheY2Dij+qlDAY/8=)
6: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: qZUPt2igy/OZCeagcwY7sBJ8TPbC9Y0onFfuw4bOoUY=)
7: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: XccP1/47583iPiSx+eEAvXi2g46yNyTAMgjTPnRV7Z4=)
8: 6A44AF9A1AC711F191E10968393D8C67.roa (hash: uPMubkV8FhRQlQGVWB1Ss5RVIBMdWnZesOclj5/0msM=)
9: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: G25/DoIQB4l/NxwZR2ZZ4S0VBthWUlwHYrnZ9UpUQ54=)
10: E243CD9C227811F1B65A16B9A4833773.roa (hash: S/AzEaze3DTMcHGlipjXyDifcNRIK7tT17DD9pwo8PU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Jul 2026 15:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13756 (0x35bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Jul 4 15:10:45 2026 GMT
Not After : Jul 11 15:10:45 2026 GMT
Subject: CN=6a492276-14ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:af:d3:49:77:19:fc:b1:58:11:6a:3b:a1:
8c:65:42:6f:70:9f:ba:cc:0c:03:e3:32:cc:14:e2:
b3:5c:ea:cb:16:88:77:91:f2:d7:11:a9:cb:98:a1:
32:8a:e0:a9:39:08:48:8d:e2:1a:3e:07:79:b4:73:
6c:24:c7:12:3b:b4:10:5a:0b:e7:0d:ce:cd:85:ee:
89:2b:4a:66:4e:88:14:fd:a4:d6:dc:70:1a:33:cb:
a4:a2:c2:b9:a3:97:93:4b:e8:83:25:00:14:4e:97:
6a:ad:94:39:ee:d3:0f:f1:b6:53:54:1c:99:20:23:
cb:c8:08:f3:33:3c:5b:b7:9f:64:5f:26:f5:b4:67:
12:39:26:57:b7:dc:1c:bd:17:4a:f4:43:a6:c2:e5:
a8:b9:02:0a:fe:3d:c2:b3:f6:3b:50:68:be:8f:4d:
a4:33:3d:a6:f5:f5:64:8f:b9:0b:52:5d:03:7a:33:
1c:fa:e1:72:25:bf:d5:3b:f7:a8:e2:d3:87:79:e6:
62:aa:15:67:6e:f9:fc:56:43:97:84:93:c6:82:24:
8a:e4:de:f7:2c:29:24:90:7e:f1:57:22:e8:b6:39:
40:af:ec:78:fd:82:ac:dd:8d:36:0c:81:76:0c:3b:
ad:1b:df:95:b4:e5:01:42:33:71:08:73:53:26:3d:
dd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:81:5C:3B:6D:3C:33:E1:27:3D:20:F1:F1:87:08:28:FA:00:87:D4
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e5:24:f8:13:c2:eb:6c:79:62:37:47:62:d4:e2:c0:69:a7:
38:db:d1:50:64:14:e1:03:51:85:48:2d:3b:b9:f3:1b:09:7e:
32:81:34:fb:8c:21:90:a3:ed:8d:7e:39:26:f4:00:28:0f:b8:
86:af:32:8d:d0:ff:fa:84:fb:61:d0:67:24:3c:40:15:ec:0e:
a8:cc:d9:1e:dd:aa:52:7a:c7:15:f0:84:a0:ef:e6:a1:af:36:
bb:dc:90:ad:40:6d:6c:4f:25:a0:ef:13:fa:e2:3e:55:e9:d4:
ed:2c:72:c8:92:fb:84:d6:a2:9d:0d:ca:60:23:f7:17:34:4f:
fe:97:ec:25:64:0f:5f:9c:29:0d:78:df:7d:1a:b7:ad:72:b6:
2b:79:90:45:3f:90:02:16:8b:0b:ed:4d:dc:4f:ec:6a:b1:49:
fb:54:4b:38:df:29:9b:3b:18:19:b9:d6:58:a1:2e:00:e7:6e:
b6:24:dc:f2:89:f3:97:82:11:f1:6d:9e:51:43:70:2a:0e:46:
91:9c:b9:0a:14:50:72:66:c4:5e:da:14:04:e3:75:43:21:28:
aa:8f:f9:fe:3a:a4:43:9b:aa:b3:42:e5:43:fb:2e:a9:a3:0e:
87:ee:48:11:be:29:35:f2:a8:f4:9c:bb:f6:87:19:0f:e5:9d:
b6:6e:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:19:41 2026 by rpki-client