
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
File: qZhc3TeTLh02TExtddulA79yZ3w.mft (raw, json)
Hash identifier: rZdnbA17zrIYqWsQavOPeaRI3KLgJ0WW89K1JIiG7KM=
Subject key identifier: 41:4A:2D:A6:48:44:2F:FF:26:93:EA:78:74:5B:D1:E4:24:2C:06:80
Authority key identifier: A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
Certificate issuer: /CN=A911B12B/serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
Manifest number: 027F
Signing time: Wed 29 Jul 2026 03:08:34 +0000
Manifest this update: Wed 29 Jul 2026 03:08:34 +0000
Manifest next update: Wed 05 Aug 2026 03:08:34 +0000
Files and hashes: 1: qZhc3TeTLh02TExtddulA79yZ3w.crl (hash: AWNB70SB8gIwS9P0rx7k1iTqcdkwVomMPi/NtABCd98=)
2: 5BC485B09D1F11F09313A14DC4F9AE02.roa (hash: a7mFbdEd5Rjo2JTpy6uMvBLZm7bSHGiAu3zDsnwY9wE=)
3: 1B38341C6B7C11F095B90A2BC4F9AE02.roa (hash: vnClLHCLhMH1PDS6B+hUbxjRXbWWCDwm+ivihh2znyE=)
4: 3370378A9D1F11F08AA63833C4F9AE02.roa (hash: MxG5JeI0s1DDujkYeGnSi1n1rR5cTlPjYLG12mySBEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:08:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B12B, serialNumber=A9985CDD37932E1D364C4C6D75DBA503BF72677C
Validity
Not Before: Jul 29 03:08:34 2026 GMT
Not After : Aug 5 03:08:34 2026 GMT
Subject: CN=6a696eb2-79e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:b5:99:11:f1:ea:7c:05:28:f7:85:e4:2c:
51:98:f0:25:4c:61:23:e5:f0:5f:c1:d2:70:c4:cc:
d9:9b:8f:8e:cb:2b:b2:82:ee:cf:68:63:7a:f5:ca:
b0:a9:e2:a7:48:cc:c7:40:5f:93:6e:28:45:42:c3:
68:43:c2:5a:37:b5:0c:de:38:87:69:b6:49:5c:9d:
dd:0f:95:50:55:f0:11:c6:44:a9:b1:b2:fb:70:07:
dd:22:c1:46:19:0a:d6:68:6c:9c:fb:9e:5b:ba:98:
07:96:3e:85:0b:dc:c7:19:55:2f:1e:a3:91:56:15:
29:0f:25:40:ae:d1:0d:33:4a:1b:49:dd:87:db:7b:
21:9e:6d:78:0b:cc:1e:e9:38:4d:02:8b:8e:33:ec:
af:76:e8:27:18:08:c3:3a:a1:0c:59:41:15:ba:f3:
69:0a:74:98:62:45:1d:3a:f1:93:12:cb:c3:e5:0c:
5d:22:2d:34:07:d6:c5:8e:31:a0:fd:92:62:8a:23:
a1:b5:cc:1e:2d:89:37:0d:69:9b:81:63:be:10:2d:
1d:98:22:b3:31:c4:6a:bd:1a:d3:05:fc:78:39:68:
e1:f3:28:70:70:c3:66:34:23:dc:05:6a:7e:cb:f9:
ce:7d:03:0b:f2:ca:db:74:9a:c9:58:dd:02:db:78:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4A:2D:A6:48:44:2F:FF:26:93:EA:78:74:5B:D1:E4:24:2C:06:80
X509v3 Authority Key Identifier:
keyid:A9:98:5C:DD:37:93:2E:1D:36:4C:4C:6D:75:DB:A5:03:BF:72:67:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZhc3TeTLh02TExtddulA79yZ3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B12B/08C27532DB6811ED96C49C3DC4F9AE02/qZhc3TeTLh02TExtddulA79yZ3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:0e:bd:0d:fe:16:55:58:f9:46:d9:b8:44:d6:f1:39:c3:f4:
70:c8:a9:e6:e1:af:89:28:20:41:50:1a:73:60:54:e4:7e:d1:
8a:eb:c0:0b:d5:15:64:a3:73:77:08:ff:0c:9a:0b:e0:47:8f:
e6:e1:3e:a1:03:73:19:e2:e1:5a:6c:a9:b2:24:5b:f6:44:36:
e0:af:fc:d3:60:76:54:df:1f:ec:64:2c:a3:6a:56:1a:be:60:
4c:6d:6d:9a:67:b8:1e:66:22:50:07:c9:78:57:76:58:c5:59:
51:e0:87:65:28:a7:67:bd:15:48:e1:92:b2:25:8a:bc:d0:8b:
fb:7c:b6:38:95:cf:aa:ab:d3:fd:cf:6d:72:fc:14:f8:d9:59:
2e:1b:0e:79:b5:d4:44:af:69:7d:22:7a:73:82:e8:d1:2a:db:
07:a9:a6:48:cd:ba:77:9d:30:49:72:6c:b2:1f:26:81:84:79:
b3:a7:56:cd:c3:61:81:43:36:de:4e:d7:2a:8e:54:4e:98:80:
37:f8:98:6c:6f:aa:d7:81:c5:67:b1:f6:44:07:ce:18:84:51:
09:54:b9:f2:87:ac:2c:fc:46:92:f0:ae:31:2d:2e:30:bb:4c:
e6:cc:2c:42:3b:f7:62:f5:d8:fe:6e:b6:0b:7e:c9:77:e9:55:
4b:86:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:57 2026 by rpki-client