
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
File: qXUlmYQNbuyqG_aMCQWtffRpouc.mft (raw, json)
Hash identifier: Bp3rpa6llWTLvAMtsqqDwi9joB+9BQ2ap48/LOM/sCA=
Subject key identifier: 12:9E:AF:73:90:E1:2C:91:87:FE:28:B4:E4:81:C2:40:09:AB:AB:B9
Authority key identifier: A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
Certificate issuer: /CN=A91C27E8/serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Certificate serial: 1786
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
Manifest number: 1770
Signing time: Thu 04 Jun 2026 16:35:21 +0000
Manifest this update: Thu 04 Jun 2026 16:35:20 +0000
Manifest next update: Thu 11 Jun 2026 16:35:20 +0000
Files and hashes: 1: qXUlmYQNbuyqG_aMCQWtffRpouc.crl (hash: MTtMOlBkcQ15bGIgWlLJdKFlEKwc+LeJ+mQm3274aL4=)
2: 777FA9ECF9BC11E79E1A9E3FC4F9AE02.roa (hash: lZtSqEluaQyvKzJzwijqNxqveUY7rB8QQXqYRdPds0g=)
3: BAD2356E153411E892E6D468C4F9AE02.roa (hash: Uh0ufQqszTK1hbj5HShNIOMuiOfZ3FBUNVqfFJVggoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 16:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6022 (0x1786)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C27E8, serialNumber=A9752599840D6EECAA1BF68C0905AD7DF469A2E7
Validity
Not Before: Jun 4 16:35:20 2026 GMT
Not After : Jun 11 16:35:20 2026 GMT
Subject: CN=6a21a949-9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:be:ae:22:13:0c:c6:b4:a9:67:d8:5e:3f:
d9:44:9b:f5:56:11:86:20:fe:49:99:ae:14:72:04:
b3:1d:5f:af:43:cd:4f:ae:3d:20:cb:3d:2a:b4:7a:
ab:b6:dd:a7:5d:32:89:d4:11:fe:59:89:fe:23:d4:
38:6d:b9:85:c6:ef:2b:5e:9c:82:e5:3a:bf:aa:c3:
da:b2:7d:79:cb:d1:5a:98:fe:70:7e:ae:23:36:f7:
ba:c9:c3:a0:28:00:b5:8c:68:da:7c:2d:fd:44:3a:
cb:41:a6:68:d4:f5:ae:7b:86:c5:18:8b:9d:8b:4b:
a5:5d:f9:82:56:89:a3:2d:5b:78:b4:0c:8a:74:58:
9a:56:fd:f1:f0:44:41:1e:14:34:a3:62:e3:52:59:
bf:bf:82:c0:63:13:6a:f2:0b:92:06:a1:10:33:00:
44:8a:70:73:a3:fc:44:d0:8b:2f:46:dd:60:c1:66:
16:c5:c0:af:2b:97:61:41:8a:c7:14:67:f3:37:b5:
6b:df:c5:55:81:38:6d:b0:cb:3b:48:03:16:7c:ea:
cf:dd:fd:9f:fe:d8:92:13:4f:0b:14:ce:9a:2c:c6:
34:a1:19:88:5e:34:ff:41:e8:9b:c0:36:c1:d2:d0:
ae:8d:d8:57:a3:04:b2:79:12:f7:5f:09:92:92:70:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:AF:73:90:E1:2C:91:87:FE:28:B4:E4:81:C2:40:09:AB:AB:B9
X509v3 Authority Key Identifier:
keyid:A9:75:25:99:84:0D:6E:EC:AA:1B:F6:8C:09:05:AD:7D:F4:69:A2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXUlmYQNbuyqG_aMCQWtffRpouc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C27E8/692F72F2F9BA11E7A4C2943BC4F9AE02/qXUlmYQNbuyqG_aMCQWtffRpouc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:4c:17:81:15:08:40:26:db:02:b2:ff:76:d0:b8:32:a1:
fa:1b:c8:4a:6a:fe:13:4f:70:b6:e7:26:f2:f2:79:48:87:00:
a7:c4:9f:36:2c:c1:05:05:12:31:2f:cf:04:8c:fd:ea:f9:5c:
c1:1c:a2:da:52:28:8e:61:7e:00:5a:ca:1c:d9:ff:aa:56:19:
aa:ef:47:1d:51:8b:c6:1f:3f:77:83:3a:41:f0:45:92:8b:84:
81:e2:58:c0:86:ff:85:b8:20:8c:66:5b:aa:71:f5:e7:d5:f2:
09:b2:08:b2:db:97:7a:3e:fd:cf:6e:51:6f:07:20:ea:da:0b:
61:38:0c:b9:71:b2:7c:25:15:ad:77:d2:13:0e:a5:1d:20:5d:
05:7e:59:54:4d:73:22:72:59:7f:60:c7:64:e6:26:52:a0:bc:
0f:d2:9d:3c:29:e6:90:bd:3f:89:45:58:38:b8:95:11:7e:25:
65:4f:9b:a8:72:0a:15:ae:e3:a5:73:50:ab:c5:1d:aa:0e:fe:
71:b9:8d:55:c6:93:34:a4:60:a6:cf:84:b7:29:69:a6:01:af:
e8:2c:d2:5e:40:a8:00:e1:99:cc:ba:da:5c:5c:24:dd:dc:6c:
11:8d:24:7c:74:41:ec:10:d1:51:45:11:f2:c7:b4:ef:3e:e8:
65:3d:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:44 2026 by rpki-client