
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier: vi0TKBgPPmsM2czq/xN0YDZZjAtvaB4CZkcxvuN+JXU=
Subject key identifier: 7F:D5:27:F0:E3:71:90:D1:82:BC:97:1F:6A:E0:66:03:3D:F1:63:2A
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial: 34D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number: 34B3
Signing time: Wed 10 Jun 2026 15:18:38 +0000
Manifest this update: Wed 10 Jun 2026 15:18:37 +0000
Manifest next update: Wed 17 Jun 2026 15:18:37 +0000
Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: 4sl4eyOwwkUapHI9RFkp7ex8HlDd7xNbOtBXTzUShlc=)
2: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (hash: NHHqtoWG+gwaIC084o2r9OLvOpqSCVAznqovXmjnsXg=)
3: A634576635D511F1A68BE981A0833773.roa (hash: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 15:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13527 (0x34d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Validity
Not Before: Jun 10 15:18:37 2026 GMT
Not After : Jun 17 15:18:37 2026 GMT
Subject: CN=6a29804e-4859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:ec:7b:5d:ec:ed:e0:cf:b3:08:04:88:5e:
2d:cd:f1:59:e2:d7:b2:12:be:e3:42:7b:9a:8e:6e:
8c:bf:0b:14:be:ac:f7:7a:64:7e:05:48:8f:77:2e:
39:21:71:3e:ec:dc:80:d5:72:db:41:2d:de:f7:d8:
35:d1:90:fc:5e:dd:d9:53:d6:bd:3a:9d:bf:71:ee:
c7:bc:b1:02:0b:71:b9:1f:f6:1d:05:d0:d3:e4:a4:
8f:59:8d:15:07:a1:8f:03:00:9c:c3:f9:e3:2f:4b:
f3:a9:81:23:5c:b3:10:f5:a2:17:8b:0d:f6:31:a6:
40:18:a5:57:a3:79:16:52:c6:40:ae:99:ce:ec:12:
af:0b:69:0f:e9:e6:91:7a:93:68:eb:40:5f:aa:e7:
75:7c:7a:a9:98:74:1a:eb:d1:19:81:58:b3:c9:4d:
a3:52:18:18:36:60:55:ab:d7:96:3a:5f:19:7d:05:
1b:75:3e:73:07:b5:08:68:54:82:74:c9:93:5b:1f:
78:7c:ad:dc:46:ea:ea:05:13:33:10:31:99:96:7c:
90:6b:23:be:46:fa:a7:13:3a:fc:d1:89:3d:25:1b:
f9:00:bf:2c:40:28:38:63:fa:aa:95:88:21:c0:b8:
d0:11:02:67:a8:2d:a3:84:01:d4:74:74:dd:08:3d:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D5:27:F0:E3:71:90:D1:82:BC:97:1F:6A:E0:66:03:3D:F1:63:2A
X509v3 Authority Key Identifier:
keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:bc:22:4a:f7:d8:db:86:6d:48:38:50:f8:58:34:b9:3d:85:
b8:9c:e8:22:44:90:4d:e0:c9:11:f8:97:c4:aa:03:ca:b3:5e:
ff:0c:fb:94:bb:fa:48:ae:a7:fe:fb:77:c2:04:43:e9:94:26:
d8:2c:f5:05:81:09:0c:08:c6:43:5b:9e:db:6b:35:f7:8f:e7:
36:05:a3:78:7e:e9:c1:48:f9:bd:3c:80:3c:34:5c:b3:f3:a3:
d2:10:71:89:6e:94:1b:d3:c2:06:15:ac:ed:d0:04:af:7a:ca:
f7:3b:07:d6:62:2f:61:df:8d:9f:00:22:7e:8b:14:92:a6:71:
ce:61:0b:1e:47:fb:bc:59:11:03:24:b2:05:7b:31:fe:e3:47:
05:39:94:24:bd:1f:19:89:77:a3:0a:f7:53:0b:43:96:5f:52:
8e:f4:01:0e:36:3b:3d:7d:ea:87:dc:eb:80:bf:8b:4d:8d:2c:
cf:79:d0:ef:63:53:e5:11:9b:3a:eb:03:69:d9:5f:21:f8:07:
77:32:78:c3:06:b9:1c:7c:ab:ee:0d:ba:89:6a:28:ec:d9:51:
2e:fe:d2:5f:06:e1:2e:50:92:c1:b9:77:55:50:3c:42:c8:3f:
ae:5b:2f:99:5c:1f:b8:c9:e4:d5:51:58:e2:97:2b:a9:5a:c1:
b3:f4:28:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz
QzQ5MzExREIwHhcNMjYwNjEwMTUxODM3WhcNMjYwNjE3MTUxODM3WjAYMRYwFAYD
VQQDEw02YTI5ODA0ZS00ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAigLse13s7eDPswgEiF4tzfFZ4teyEr7jQnuajm6MvwsUvqz3emR+BUiPdy45
IXE+7NyA1XLbQS3e99g10ZD8Xt3ZU9a9Op2/ce7HvLECC3G5H/YdBdDT5KSPWY0V
B6GPAwCcw/njL0vzqYEjXLMQ9aIXiw32MaZAGKVXo3kWUsZArpnO7BKvC2kP6eaR
epNo60Bfqud1fHqpmHQa69EZgVizyU2jUhgYNmBVq9eWOl8ZfQUbdT5zB7UIaFSC
dMmTWx94fK3cRurqBRMzEDGZlnyQayO+RvqnEzr80Yk9JRv5AL8sQCg4Y/qqlYgh
wLjQEQJnqC2jhAHUdHTdCD2UfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/VJ/Dj
cZDRgryXH2rgZgM98WMqMB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy
RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4
dE1HZWJmY3lPMUE4U1RFZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhLwiSvfY24ZtSDhQ+Fg0uT2FuJzoIkSQTeDJEfiXxKoDyrNe/wz7lLv6SK6n
/vt3wgRD6ZQm2Cz1BYEJDAjGQ1ue22s194/nNgWjeH7pwUj5vTyAPDRcs/Oj0hBx
iW6UG9PCBhWs7dAEr3rK9zsH1mIvYd+NnwAifosUkqZxzmELHkf7vFkRAySyBXsx
/uNHBTmUJL0fGYl3owr3UwtDll9SjvQBDjY7PX3qh9zrgL+LTY0sz3nQ72NT5RGb
OusDadlfIfgHdzJ4wwa5HHyr7g26iWoo7NlRLv7SXwbhLlCSwbl3VVA8Qsg/rlsv
mVwfuMnk1VFY4pcrqVrBs/Qotg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:46 2026 by rpki-client