
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier: FhzHuA0E8z0926Dhye4JxwSngH+DnQn0f4sw2UVBKEY=
Subject key identifier: E2:3D:52:08:2F:65:F9:CE:28:25:D2:37:72:0C:34:CA:C6:9C:7A:49
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial: 0A25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number: 0A01
Signing time: Tue 28 Jul 2026 20:10:25 +0000
Manifest this update: Tue 28 Jul 2026 20:10:25 +0000
Manifest next update: Tue 04 Aug 2026 20:10:25 +0000
Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: 3U8K02QrOlBaVKO5Ryc57T4vEDKkdOIYxNzcfk7BfMw=)
2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: G8tEalgIYlF459jNjIZOJNDqLr5DDsJR+CWVbE3khX8=)
3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2597 (0xa25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Validity
Not Before: Jul 28 20:10:25 2026 GMT
Not After : Aug 4 20:10:25 2026 GMT
Subject: CN=6a690cb1-38f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:ef:35:09:90:e5:40:78:9d:8c:95:de:7a:
e6:38:f2:87:70:48:01:f9:72:17:6b:97:3c:c8:9b:
5d:70:2d:7a:91:76:b2:4b:bc:c3:b6:ba:59:df:71:
72:0a:fd:19:12:36:27:f1:dc:bb:c6:01:f1:4f:fe:
18:57:c7:d1:cd:6b:3c:58:f1:67:73:f2:73:05:c2:
a3:43:91:45:0b:ff:aa:4a:3b:35:f5:43:01:25:d6:
1a:2e:69:87:7e:69:87:5d:a6:14:20:26:81:51:ce:
02:59:ed:fd:93:27:69:71:e7:96:1f:52:62:e3:87:
37:97:e0:d8:83:79:e8:1a:50:79:b7:e2:3b:0f:44:
85:80:c1:e7:e5:fd:70:e5:3a:4d:cd:e4:e8:fe:05:
27:fd:67:ea:7b:b4:0e:1a:bb:8b:b7:66:94:b2:83:
32:a5:36:f0:05:33:d2:68:9f:e7:86:a2:89:c8:98:
6d:41:a6:59:74:af:9e:7d:74:ea:40:44:d4:7f:b4:
e0:a3:80:e4:71:b9:35:51:6d:67:16:09:be:f7:48:
96:34:69:2c:bf:6b:8a:db:e5:e4:10:52:75:c2:1b:
ff:93:8c:a9:4b:c5:c0:e3:59:63:c7:5f:c8:85:af:
2b:2c:eb:7d:4b:5f:46:71:0f:c9:95:68:99:d1:d8:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3D:52:08:2F:65:F9:CE:28:25:D2:37:72:0C:34:CA:C6:9C:7A:49
X509v3 Authority Key Identifier:
keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:e0:7c:8e:49:ba:3f:fb:e2:2a:f0:e9:cd:5a:0f:c2:3b:11:
6b:f8:17:a6:a9:a3:16:0f:6e:a5:aa:94:08:32:1b:bc:e9:dc:
64:f7:1f:88:17:22:59:ac:73:cd:13:d8:0a:72:02:f5:b4:89:
82:9a:80:57:63:4b:cf:ee:d9:27:2b:00:55:73:8b:5a:32:94:
58:e0:fc:6a:01:a9:14:30:ee:18:ac:25:d0:e7:41:dc:eb:03:
e9:f8:d0:c8:0a:c1:08:5c:99:82:dc:3d:04:cc:8a:3b:dd:7f:
e7:90:6f:45:45:98:24:e4:94:6b:19:05:5b:95:de:2e:38:02:
62:d0:4b:c8:55:ad:85:ca:1f:1e:ef:a3:18:93:e7:94:f7:df:
f2:77:8a:d1:ae:73:34:f2:73:e3:5e:b9:a0:1e:d0:60:bb:96:
46:6e:eb:77:0e:26:d6:47:bf:38:4c:b7:2f:34:97:4a:68:2c:
b9:cd:b2:c7:6b:d4:ec:02:80:0b:ce:00:05:15:cc:d9:a7:33:
2f:d7:a2:63:28:0b:9a:a6:f3:80:30:7f:a3:9a:46:c4:00:68:
0a:6c:98:e7:8f:b2:37:d7:09:a8:41:3a:8f:0c:04:9d:11:4d:
49:81:98:41:13:c8:3c:cd:40:43:86:e0:90:45:80:7b:a5:5f:
99:43:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:14 2026 by rpki-client