
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
File: qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft (raw, json)
Hash identifier: th4TmtWiHKthBURrVTeKPVl9Zaam8hEukpenCoWYCgQ=
Subject key identifier: 8C:5E:B9:93:D4:30:05:F2:AC:5C:CF:80:8D:9B:7E:51:89:DF:57:E2
Authority key identifier: AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
Certificate issuer: /CN=A91C0BE1/serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Certificate serial: 06B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
Manifest number: 06A9
Signing time: Wed 20 May 2026 22:25:59 +0000
Manifest this update: Wed 20 May 2026 22:25:58 +0000
Manifest next update: Wed 27 May 2026 22:25:58 +0000
Files and hashes: 1: qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl (hash: WkgHEnakZt/FB+zMd54bwtKuJC+GkGBz9y6No4kUXPQ=)
2: 0C3EAFF6F84111EC926CBF53C4F9AE02.roa (hash: /ULmSnSTdH0/f1q4tjs1akmKQxqjyakkSOX6RXEjmGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1712 (0x6b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BE1, serialNumber=AA21B690C1D63CBF441AA3BD117ED8B786882229
Validity
Not Before: May 20 22:25:58 2026 GMT
Not After : May 27 22:25:58 2026 GMT
Subject: CN=6a0e34f7-e9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:f3:61:bc:be:ef:af:4c:af:4a:b6:af:1f:
44:fe:2b:37:a5:a6:ae:19:39:cb:a5:15:47:08:a6:
44:fb:65:ca:50:5c:0a:f7:01:ed:47:fe:5f:76:67:
43:95:c2:d2:30:54:34:25:3c:ce:0c:54:6a:bb:41:
6c:7d:ac:13:10:c8:60:2f:c3:9c:ef:ac:5c:b8:44:
ca:71:ac:0b:3f:ad:8e:2f:68:9c:60:42:62:a4:f1:
6f:54:0b:38:84:38:29:6e:f1:5c:71:7c:aa:22:0e:
8f:20:5a:00:62:f6:c7:3a:59:41:67:7f:39:9e:25:
6b:2d:e3:ca:35:63:3d:84:04:1e:09:5a:19:cd:4a:
ba:4e:9b:97:d0:4f:81:cf:f4:a5:f4:c8:7b:a2:86:
63:c5:12:57:79:b1:20:eb:8d:35:5e:c4:06:79:c6:
58:e3:3a:00:ac:81:61:93:c7:b2:94:c1:8a:aa:35:
fc:c2:95:c4:c6:ae:45:27:20:d7:a9:42:ef:29:72:
84:b7:1f:7c:ec:1f:b0:00:63:40:25:ce:b5:de:be:
78:d8:e3:4f:7f:a4:77:c9:d8:95:0c:e1:d8:6e:31:
3c:6a:1f:c9:c1:84:1e:68:c8:15:5f:2d:ed:ea:e3:
ed:6f:bc:c6:9f:db:e7:42:1d:6f:51:c3:16:c9:f4:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:B9:93:D4:30:05:F2:AC:5C:CF:80:8D:9B:7E:51:89:DF:57:E2
X509v3 Authority Key Identifier:
keyid:AA:21:B6:90:C1:D6:3C:BF:44:1A:A3:BD:11:7E:D8:B7:86:88:22:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiG2kMHWPL9EGqO9EX7Yt4aIIik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BE1/E46FF490AE2B11EB95627F82C4F9AE02/qiG2kMHWPL9EGqO9EX7Yt4aIIik.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:03:01:7b:68:2b:29:8f:32:74:60:7c:84:62:bc:7b:bf:bb:
dd:18:72:d5:e7:cc:5e:9e:45:e0:8d:0b:bd:66:c7:19:48:ff:
40:d3:59:c9:88:a1:0c:b5:81:1a:61:61:b0:93:19:69:7f:1e:
06:51:ed:9f:b3:85:f3:2a:d3:f9:a4:41:b6:58:cd:0c:94:4e:
e4:37:de:60:bf:05:f8:27:ac:c8:3b:5b:94:e2:c8:ef:d8:e7:
2c:57:ee:39:05:d8:20:75:28:9d:9e:36:89:83:ef:36:36:5c:
d0:ff:87:8e:15:31:2b:25:e4:0d:62:16:d4:42:c7:bf:16:6f:
70:7f:52:39:e3:af:20:14:d3:13:e5:37:00:fe:3a:f4:b7:78:
02:8c:e1:59:79:33:11:26:d6:f9:b4:98:6d:9f:26:36:10:8d:
32:7d:e4:4b:ea:c0:ac:7b:e8:8b:49:3e:c7:ff:f0:6f:98:ea:
0f:dc:f3:a5:4b:15:56:6c:ea:12:3c:fa:0a:3b:74:bf:b3:a3:
37:6d:9e:0f:f1:19:66:44:52:c1:e5:58:c5:7b:ab:9c:a5:3b:
0e:74:e6:f1:eb:3a:d3:36:42:32:b4:f7:c8:8f:9c:19:0d:a1:
16:dc:60:ca:d0:6f:37:db:3a:01:76:6f:ba:6e:3a:6e:ee:ee:
9d:d4:49:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:22 2026 by rpki-client