
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier: rNdic0+DqALt6MqmxItW8aKsTrF/wKfXCGoMVMNlyuE=
Subject key identifier: B4:C8:B5:94:42:C7:C7:6B:6B:E7:33:20:09:7C:F0:71:C8:F5:24:32
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial: 080F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number: 0803
Signing time: Tue 28 Jul 2026 19:29:05 +0000
Manifest this update: Tue 28 Jul 2026 19:29:04 +0000
Manifest next update: Tue 04 Aug 2026 19:29:04 +0000
Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: /zWUks6AXgfA6xf9l1ulDi77CpGyn4n9pfrkJmsq6y0=)
2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Validity
Not Before: Jul 28 19:29:04 2026 GMT
Not After : Aug 4 19:29:04 2026 GMT
Subject: CN=6a690301-78f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:95:ef:74:75:79:f2:f5:cc:97:4c:81:0e:
2f:14:5a:25:41:5b:41:ed:76:c0:75:33:19:9d:54:
48:97:28:68:7b:f6:31:7b:c9:ba:41:2b:30:99:47:
f8:27:b5:64:e9:49:cd:44:b4:40:26:99:70:11:da:
ca:e2:9a:15:02:14:99:a0:c2:0a:46:e7:d9:b2:69:
e4:e7:e1:5c:1e:62:b9:50:ce:3c:f2:8b:fc:fb:7d:
84:e2:26:d3:2f:a9:5d:f4:4f:e9:89:5e:17:f6:95:
70:45:30:2b:c4:7b:4b:79:39:8d:4e:0b:ce:85:38:
57:33:46:f2:14:d7:52:1b:d1:55:89:50:34:36:22:
01:8d:da:ac:1a:59:49:2b:f7:1a:bf:f8:69:2d:21:
11:48:54:f2:2b:e4:62:ad:de:09:87:47:7d:c8:c6:
79:eb:4a:5b:4e:3e:a4:1e:84:d0:ab:7c:b5:bc:71:
10:07:74:45:2d:98:10:ee:b5:00:e3:a0:b1:c3:96:
51:f2:6d:65:cc:55:92:7c:37:67:cc:e0:d3:29:9f:
ec:9f:78:1d:92:21:f9:44:0b:8f:d2:3d:df:a2:1c:
36:2f:c3:97:d3:14:2f:15:df:f8:07:68:83:ae:8b:
4e:35:e6:2b:19:95:fd:78:7c:35:ec:fa:2e:f1:fe:
1d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:B5:94:42:C7:C7:6B:6B:E7:33:20:09:7C:F0:71:C8:F5:24:32
X509v3 Authority Key Identifier:
keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:e7:7d:c1:6c:58:fe:0b:d1:8b:06:3d:bb:b1:1b:48:59:bf:
c8:4d:72:de:26:a0:2a:cf:0b:9f:a0:75:9b:0b:32:16:88:80:
73:71:1d:62:ab:6a:41:c2:a9:b1:01:08:a2:51:0b:c5:1e:0a:
d7:4f:46:9d:86:ea:84:d3:43:ff:d6:d9:9c:df:47:c6:3e:9f:
94:00:85:75:ce:a1:32:19:99:49:b7:3e:89:48:c9:6c:c9:ee:
4d:43:89:4b:9a:b9:40:fb:76:6f:09:61:be:f3:3f:d8:6c:01:
ac:ff:ac:cf:c6:b9:dc:bd:ba:0f:f7:7f:40:47:e9:76:e2:99:
36:70:d7:e0:18:da:30:72:12:36:86:7a:90:15:19:d1:a6:93:
5c:75:7d:0e:53:da:f6:8a:ee:1a:fd:be:25:ad:6e:e2:86:f3:
d4:d3:16:f1:65:2d:01:f4:35:15:a6:d8:5d:08:bf:98:d8:96:
c0:e8:f9:e0:86:c8:4b:81:c0:68:3c:99:ed:17:b8:12:4d:b4:
f0:32:1e:aa:b8:84:e5:57:36:48:13:89:2d:a3:e1:a5:cd:ff:
f6:91:3e:d5:38:6f:2c:9f:02:38:6d:59:ed:26:84:1f:57:25:
6a:54:d4:af:2d:ba:36:9a:0d:4f:7b:5f:63:b9:58:9a:c6:4e:
71:6a:86:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:49 2026 by rpki-client