
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File: QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier: DTXzwmFB+I9JF8zHmYkHyQooqydGsHbPwZhHNAHJL8c=
Subject key identifier: FB:2D:C8:19:DF:59:D5:4E:03:7A:17:C9:DE:42:DC:CD:96:89:97:3B
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial: 072E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number: 0724
Signing time: Sun 26 Jul 2026 22:43:55 +0000
Manifest this update: Sun 26 Jul 2026 22:43:55 +0000
Manifest next update: Sun 02 Aug 2026 22:43:55 +0000
Files and hashes: 1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: tPS4OMrEqXUS/omIqvJdTOzsk9k2hdMVjBjJlGdCL5A=)
2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: 20IQ5k6iGcflni7byHLtSc+KRh5svbsk0T1vVsQKJRo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Validity
Not Before: Jul 26 22:43:55 2026 GMT
Not After : Aug 2 22:43:55 2026 GMT
Subject: CN=6a668dab-918e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:b2:a6:c5:c5:78:35:e0:2f:47:9a:bb:70:
a0:0b:37:d1:05:34:5e:c4:fc:8a:e1:8a:5a:37:f0:
af:ba:7f:31:6a:fe:c7:f4:ca:a3:f2:3e:a7:7d:30:
66:4f:08:0d:08:12:e8:26:dd:f1:a2:f0:27:5c:bc:
35:22:71:2e:28:e1:91:b1:64:87:76:b0:0f:0c:15:
40:fd:2d:05:05:7c:13:b3:8e:7a:78:d0:13:8a:c5:
51:de:9f:af:48:08:18:b7:ea:bf:23:ed:2b:39:16:
63:b3:8c:5d:67:17:84:10:a1:4c:a1:7b:f3:85:30:
fa:2a:77:a2:97:f4:d4:64:39:29:02:f9:c7:21:61:
e5:5b:6b:82:be:73:b0:fc:68:91:ae:df:61:61:de:
0d:c5:3f:2c:77:62:ca:3f:4c:2f:ec:60:01:22:e9:
31:a7:28:2f:c5:39:b7:c7:06:51:b5:c2:6e:60:59:
bc:89:e6:70:0f:fe:4a:2d:10:5f:54:8d:40:4e:10:
30:9f:d0:60:38:e9:28:ff:af:fc:9a:ba:e8:6f:f6:
08:61:fa:05:b7:5d:c1:06:2f:c0:46:04:7a:42:74:
db:11:25:90:20:01:e5:32:6d:36:46:cf:0e:a3:56:
08:4c:27:79:bb:6c:8f:f8:f0:1d:9d:39:8a:c6:d5:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2D:C8:19:DF:59:D5:4E:03:7A:17:C9:DE:42:DC:CD:96:89:97:3B
X509v3 Authority Key Identifier:
keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:0d:80:52:dd:05:23:c9:6b:00:84:bb:0b:b7:55:cb:f4:
f5:5b:f3:56:c7:95:c7:d4:30:0b:bf:8d:1e:a1:cc:aa:b8:18:
f1:26:a8:04:16:e9:32:4b:b6:5c:d6:40:43:1f:cf:ad:26:35:
5d:48:21:4d:d7:a3:ef:c8:79:2b:3c:e4:a1:82:dd:23:a7:e5:
ce:16:34:55:ea:6a:3e:6a:21:c4:ef:44:64:62:26:b9:4b:9e:
55:6e:b8:81:18:78:ea:b4:b9:da:07:e3:f4:39:89:7f:64:2b:
28:b0:65:84:e4:3b:d8:f4:90:59:3d:a0:fe:5c:60:43:17:dd:
cd:65:08:08:a8:81:b5:6e:46:20:06:19:c2:47:db:24:9d:8a:
c6:39:9b:6b:40:9d:71:af:24:db:69:b8:cc:20:24:07:40:65:
18:06:ea:d0:eb:48:13:a4:80:e8:69:9c:da:0d:32:dc:53:bf:
80:17:a0:ec:4c:98:01:29:cb:66:85:cf:41:e5:57:7c:e0:8e:
37:5a:37:44:e0:c1:1e:26:ed:38:6d:88:2a:c0:5b:ed:7e:1b:
68:ef:7a:c3:e6:f9:41:af:33:cd:80:bf:29:d8:49:45:f4:42:
44:3a:cb:02:ce:38:1b:17:19:2f:0f:13:35:e0:1a:85:83:ce:
bf:77:d5:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNGNDQxMTAvBgNVBAUTKDQwREQ2NjJCNkY2RTk3QjM0RDNCNzVBODAwN0RFNTM4
OEQ5MjcyNTMwHhcNMjYwNzI2MjI0MzU1WhcNMjYwODAyMjI0MzU1WjAYMRYwFAYD
VQQDEw02YTY2OGRhYi05MThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGyypsXFeDXgL0eau3CgCzfRBTRexPyK4YpaN/Cvun8xav7H9Mqj8j6nfTBm
TwgNCBLoJt3xovAnXLw1InEuKOGRsWSHdrAPDBVA/S0FBXwTs456eNATisVR3p+v
SAgYt+q/I+0rORZjs4xdZxeEEKFMoXvzhTD6Kneil/TUZDkpAvnHIWHlW2uCvnOw
/GiRrt9hYd4NxT8sd2LKP0wv7GABIukxpygvxTm3xwZRtcJuYFm8ieZwD/5KLRBf
VI1AThAwn9BgOOko/6/8mrrob/YIYfoFt13BBi/ARgR6QnTbESWQIAHlMm02Rs8O
o1YITCd5u2yP+PAdnTmKxtX93wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPstyBnf
WdVOA3oXyd5C3M2WiZc7MB8GA1UdIwQYMBaAFEDdZitvbpezTTt1qAB95TiNknJT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0Y0NC82Njc3QkVCNjhD
ODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3Tk5PM1dvQUgzbE9JMlNj
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FOMW1LMjl1bDdOTk8zV29BSDNsT0kyU2NsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0Y0NC82Njc3QkVCNjhDODMxMUVCODQ5RTYxMjlDNEY5QUUwMi9RTjFtSzI5dWw3
Tk5PM1dvQUgzbE9JMlNjbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEeQNgFLdBSPJawCEuwu3Vcv09VvzVseVx9QwC7+NHqHMqrgY8SaoBBbpMku2
XNZAQx/PrSY1XUghTdej78h5KzzkoYLdI6flzhY0VepqPmohxO9EZGImuUueVW64
gRh46rS52gfj9DmJf2QrKLBlhOQ72PSQWT2g/lxgQxfdzWUICKiBtW5GIAYZwkfb
JJ2Kxjmba0Cdca8k22m4zCAkB0BlGAbq0OtIE6SA6Gmc2g0y3FO/gBeg7EyYASnL
ZoXPQeVXfOCON1o3RODBHibtOG2IKsBb7X4baO96w+b5Qa8zzYC/KdhJRfRCRDrL
As44GxcZLw8TNeAahYPOv3fVvQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:04 2026 by rpki-client