
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json)
Hash identifier: qGqMe7q5Wg6n/YMDNpIxos8GoYC4gwyGcSfy2hMxlp4=
Subject key identifier: 21:64:F5:5A:AA:8C:AD:AE:41:7C:8B:5A:14:2D:FD:4F:3A:42:78:5E
Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
Manifest number: 0669
Signing time: Sun 26 Jul 2026 23:27:31 +0000
Manifest this update: Sun 26 Jul 2026 23:27:30 +0000
Manifest next update: Sun 02 Aug 2026 23:27:30 +0000
Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: VAVLLXLz2bxd+Qu13xYMnbjyHW/wmPdcVmfuHLfe/N0=)
2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: WcftFva1gcea7hmA7H8a9I1dKGWiCBj9X3AHkNvPmMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA
Validity
Not Before: Jul 26 23:27:30 2026 GMT
Not After : Aug 2 23:27:30 2026 GMT
Subject: CN=6a6697e3-2c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ac:2d:e8:56:f8:81:37:d7:d5:ba:53:54:e3:
d6:43:f2:04:e5:5d:9c:a3:e8:c1:df:49:27:5e:96:
43:ed:5e:08:fe:e3:f1:7a:58:f3:36:4e:f0:1d:e7:
9b:c4:e8:58:d2:e8:b8:b3:72:40:92:c9:7e:4d:84:
1d:e3:a0:d4:ac:64:50:6d:06:40:3d:b7:c7:3e:0c:
8f:8a:18:f0:71:30:18:73:43:fe:31:ee:21:66:bd:
9b:11:df:6d:18:a3:08:bf:3e:06:3c:55:54:35:b2:
cd:76:09:ef:9a:5a:c0:ef:04:b1:47:6d:02:91:30:
b8:ab:4b:c4:a3:d6:fc:3d:61:3f:7f:01:b1:2c:98:
ff:c5:2b:8f:2b:a4:df:83:c3:31:d4:7e:ff:10:32:
f2:41:51:f8:cc:07:d1:76:7d:47:fb:0f:2d:b8:f8:
cb:d0:f0:89:5e:96:55:47:32:be:3f:35:06:3e:4f:
ed:f2:f4:29:ee:78:c8:19:57:66:6d:25:cb:e8:25:
bb:20:65:4b:a4:c7:89:59:27:a7:0d:6d:16:cd:d4:
35:24:db:a0:0b:b7:77:d6:df:2f:12:d5:64:ac:a9:
69:ab:6e:68:68:8e:da:3f:ef:95:e2:8e:09:ab:07:
ab:3e:2b:61:db:60:29:04:fa:6c:4f:f0:4b:50:6d:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:F5:5A:AA:8C:AD:AE:41:7C:8B:5A:14:2D:FD:4F:3A:42:78:5E
X509v3 Authority Key Identifier:
keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:8a:34:dc:24:ca:1d:40:23:5d:9f:8c:03:cb:42:d8:a8:a5:
8f:81:a5:9c:57:26:32:06:ee:7e:61:73:e5:18:46:c3:12:2a:
2e:01:a0:25:3e:3a:bd:0b:bb:97:53:93:9c:d4:9f:8e:2d:2f:
df:c4:3d:a3:dd:c4:83:2e:77:08:a1:a3:9d:62:2d:c4:54:40:
27:cb:8f:ec:f9:4f:32:77:69:db:58:75:23:4c:37:ad:5f:37:
20:95:cf:b5:88:99:7d:58:55:0f:e5:d7:20:16:b1:a1:b1:33:
42:f9:02:eb:34:0e:80:37:5b:3b:12:20:c3:eb:24:3f:2f:76:
11:5c:c3:10:bc:fb:d3:f3:05:ea:00:7f:17:e9:d4:ce:f8:43:
0e:9a:23:a8:c2:48:6c:b7:e4:f8:cc:9e:0b:ad:f3:5c:7f:9d:
f4:ad:c9:b6:60:68:cb:39:ef:fa:34:1a:08:4a:ac:1c:9b:33:
71:7c:8d:e4:35:6e:f7:b3:c4:d6:86:5e:49:4a:2c:7b:25:ed:
62:b6:3f:1c:0d:82:2f:c0:7e:7c:73:53:2c:af:10:01:00:62:
aa:3d:51:76:5c:d8:c5:59:2a:5b:6f:13:1e:01:f4:9e:67:6e:
cc:b3:33:ad:ba:18:1c:8f:c8:4b:2b:67:00:39:0c:9a:b1:0b:
4a:83:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:40 2026 by rpki-client