
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft
File: q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft (raw, json)
Hash identifier: YlsFsJLZ6i6GPSK35NKO87PP8rGWqNsdDGu95M2K0+k=
Subject key identifier: CF:BA:0B:C7:3C:E6:73:05:BB:A6:58:AD:85:F3:1A:E2:81:3B:7A:D5
Authority key identifier: AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83
Certificate issuer: /CN=A91EAF29/serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883
Certificate serial: 06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft
Manifest number: 05
Signing time: Thu 11 Jun 2026 11:33:18 +0000
Manifest this update: Thu 11 Jun 2026 11:33:17 +0000
Manifest next update: Thu 18 Jun 2026 11:33:17 +0000
Files and hashes: 1: q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl (hash: u0of/wnuYUtR7F1vMtxeHMvRCnQS7XRpWb8ufuAEZlc=)
2: 7E55CC0E610C11F1BA3A45B39947A888.roa (hash: E0w9BgdOurSZs3raW0wpmHL4bAQMnen7LkEC4VGqfmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl
rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF29, serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883
Validity
Not Before: Jun 11 11:33:17 2026 GMT
Not After : Jun 18 11:33:17 2026 GMT
Subject: CN=6a2a9cfe-ee73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:c0:f2:c3:62:69:08:eb:0a:e5:0e:93:71:
75:b9:f9:60:54:6c:d2:09:58:05:45:2b:0c:a9:a5:
b8:e2:2b:0c:96:3f:c5:96:62:eb:1b:75:9a:5a:2f:
f5:eb:25:a7:63:7b:7d:d0:a0:ca:93:b1:8c:a3:11:
f9:6f:18:af:ba:a5:49:fe:50:ab:ce:95:0a:5c:07:
71:85:5d:70:78:da:ae:bf:37:48:19:c7:aa:86:69:
fe:ee:a5:0e:f3:fb:22:8f:b2:bf:11:56:56:90:51:
4c:a3:ab:0d:54:83:e7:eb:1d:48:63:b4:29:22:84:
f2:3c:25:ed:44:c4:7f:ea:1d:1e:b6:5a:46:32:8f:
42:66:f1:45:a9:a6:29:6c:a0:d4:c6:25:a7:70:08:
cb:2d:04:5d:96:ca:8b:8a:0a:e9:28:f7:23:47:c3:
3c:46:71:24:3e:06:60:c3:93:e8:39:aa:d1:73:bd:
b0:f4:76:dc:bb:2c:fb:65:01:c9:2c:e9:43:4f:bc:
a8:bd:a8:40:b8:69:66:25:44:1d:c5:04:ed:1c:04:
6c:4e:4e:4c:53:2e:0e:d2:09:8f:03:b7:0e:f0:66:
5b:fb:5c:e6:1d:c2:01:f0:9a:50:e1:75:df:8e:0e:
43:e2:d4:6b:bf:48:66:0d:4b:0a:c7:c3:51:07:62:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BA:0B:C7:3C:E6:73:05:BB:A6:58:AD:85:F3:1A:E2:81:3B:7A:D5
X509v3 Authority Key Identifier:
keyid:AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:27:cb:bc:b9:11:0e:be:ab:e2:d8:00:ee:bb:1c:53:e4:ec:
cd:1d:18:4a:38:33:a1:8f:4b:7a:33:24:05:2e:89:b5:e5:61:
38:35:35:22:cf:11:4f:fd:47:ec:c8:0f:e7:73:72:cd:34:ca:
3d:4a:65:c0:85:8d:d2:67:87:09:89:8d:60:04:be:d5:d5:62:
bc:7a:c3:52:4a:8c:a3:64:19:f8:7b:28:ed:b0:a3:45:dd:68:
a6:d4:7c:92:54:68:9a:1a:1f:82:18:46:d9:46:8e:56:66:f1:
ab:c2:13:10:9e:cc:d7:db:2c:1f:5a:5e:d5:23:16:b2:e3:1f:
a1:8b:53:c5:8a:2f:43:a3:e2:ac:25:24:0b:98:e7:af:ae:87:
6a:23:85:a6:85:c7:0c:fb:52:1a:f4:ae:6c:9c:da:d0:44:60:
83:e0:6d:84:fe:23:f0:00:93:7e:57:c4:df:e6:90:85:2e:15:
7b:52:7a:45:e8:40:08:28:a6:96:66:08:a1:f7:8f:14:d8:3d:
af:9d:bf:a3:c1:9e:f4:7e:db:f3:a5:c3:0e:03:10:41:b5:a5:
c5:20:db:7d:04:ff:a8:76:eb:b0:4a:43:58:84:83:eb:d1:cb:
40:ad:cf:7c:a3:5c:84:c8:d4:d4:06:10:a4:86:5f:1a:ac:c8:
a2:ba:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:11:03 2026 by rpki-client