
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: tWhYqazF2xFv5wzx1puzvd3ABITFI9Q7iY0/44gckXA=
Subject key identifier: 55:C8:5B:19:06:2B:4E:80:58:32:A6:05:89:AE:21:99:17:CB:3E:CD
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: 0137
Signing time: Mon 01 Jun 2026 06:21:16 +0000
Manifest this update: Mon 01 Jun 2026 06:21:15 +0000
Manifest next update: Mon 08 Jun 2026 06:21:15 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: fdG9VP9ARAJHGGChAPaDSFJA+sP13YpIewvKJRGenSA=)
2: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=)
3: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: rw3/QGJu/IaorU3//on6D6D9/GSUDVsuSIXnNdrqn3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Jun 1 06:21:15 2026 GMT
Not After : Jun 8 06:21:15 2026 GMT
Subject: CN=6a1d24db-1a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:7f:f3:37:eb:fa:52:07:92:c7:14:62:64:
37:b1:aa:f2:24:87:ee:b8:d3:96:a3:36:ee:2f:db:
9f:ca:d3:4e:04:04:b4:d9:1c:5b:21:60:fe:64:b2:
c6:c4:ce:ff:b7:71:d7:77:07:8b:8e:64:d9:2f:1d:
2b:5c:f6:2e:1f:5f:5b:c7:35:e2:3d:31:a6:dc:9c:
34:45:f3:93:4e:70:f2:c6:a6:5b:b2:52:b5:ab:e2:
da:15:67:40:c2:b3:a0:5a:d6:fe:64:99:f6:fc:18:
3d:70:b3:ae:b5:5e:bb:bf:e0:c4:aa:07:63:e6:8a:
fc:27:19:ab:a5:5d:41:d0:dd:38:18:ca:9c:d9:4b:
6b:e6:e1:ef:42:36:d3:49:84:21:60:7f:14:52:71:
39:7c:f1:32:2e:3d:c2:ac:c2:64:af:83:1c:06:67:
10:f8:88:b0:f0:85:ba:39:50:37:4d:f9:36:5e:8f:
bd:e5:aa:2d:3e:e0:01:0a:af:13:6d:0a:96:d9:b3:
dd:e3:5f:71:77:36:0d:5a:d2:32:d7:f3:9e:dd:a0:
94:eb:1c:86:50:96:de:1d:ac:d9:fc:68:15:d2:bf:
57:1f:b1:0b:52:3c:98:9f:3d:cd:6e:ab:90:14:40:
01:81:f1:15:ea:21:8f:31:84:d0:90:d8:b1:93:7f:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C8:5B:19:06:2B:4E:80:58:32:A6:05:89:AE:21:99:17:CB:3E:CD
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c9:b8:17:97:2f:40:7b:25:00:0a:27:83:2d:2b:a0:56:c5:
4c:57:04:ea:ed:00:a5:40:b4:13:5c:4f:23:38:1f:e2:65:e7:
a9:4f:c6:84:73:78:77:ad:6d:db:ea:28:ed:ef:8b:ff:69:72:
0b:a3:ce:3d:4f:32:6b:8d:8b:0c:a2:de:59:0d:b0:af:71:67:
b3:be:3f:27:3e:cd:52:7e:36:a1:e3:6f:89:54:bf:1b:45:1c:
a9:3e:a0:dd:fd:0e:ac:b4:c1:94:69:ba:ad:5c:68:64:38:dc:
58:cd:46:e3:25:7d:36:b8:29:85:b9:57:e1:29:ae:f7:b1:2a:
4b:b1:cc:04:f5:a2:9e:80:ec:e4:3d:e4:7a:bd:3e:28:b3:a4:
3b:41:c9:23:2c:28:4f:1e:be:a3:cc:83:69:35:f5:c4:3a:37:
9c:6f:b8:35:24:23:bc:8a:aa:70:86:34:97:e5:82:27:9d:60:
29:cb:41:3f:55:4c:a5:18:42:10:6c:3b:0b:80:c2:d4:64:49:
5f:79:71:c3:52:db:bc:e0:4f:0f:ba:bd:b7:ee:6a:f5:e3:2e:
3b:e5:76:67:63:29:a5:07:eb:ab:bc:28:c0:de:9a:e7:82:61:
ea:03:96:58:3b:e7:33:52:b5:df:69:b4:b6:10:39:f7:0b:e5:
09:c3:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:08 2026 by rpki-client