
$ rpki-client -vvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
File: QG4t-6oOoAfdxmmT8sezCNoKGlc.mft (raw, json)
Hash identifier: wM8EuZS+3Ch8leOuyXTpHKZIRdaeDGng6AWPnZq/TLE=
Subject key identifier: 78:9E:93:F6:1C:25:64:28:81:EC:B2:01:D8:C8:DA:CF:96:53:9D:B9
Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
Certificate issuer: /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Certificate serial: 0CAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
Manifest number: 0CA4
Signing time: Sun 26 Jul 2026 18:53:45 +0000
Manifest this update: Sun 26 Jul 2026 18:53:44 +0000
Manifest next update: Sun 02 Aug 2026 18:53:44 +0000
Files and hashes: 1: QG4t-6oOoAfdxmmT8sezCNoKGlc.crl (hash: 13+af8510OEir8HfsjztiduA7HgiOnbvD8YrkuNT5KE=)
2: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (hash: QXJTF3gmhRVuHKyE6dyB12JyGZ8t4LbfInOa4El4Hps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 18:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91315C1, serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Validity
Not Before: Jul 26 18:53:44 2026 GMT
Not After : Aug 2 18:53:44 2026 GMT
Subject: CN=6a6657b9-6c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:e5:ca:14:66:bc:68:cd:f9:c8:89:f0:5b:
a3:4c:a1:ac:57:c5:3d:46:b6:f5:b0:89:14:da:6a:
c0:d1:33:56:db:c8:c7:e3:f6:ad:35:cc:da:07:af:
7d:61:30:96:51:52:68:cc:cf:e0:99:d0:e1:d0:b0:
3e:b4:1a:d5:a8:2c:33:cb:bb:9b:a6:fc:c9:36:c6:
42:61:7b:ec:2d:cd:25:04:e9:78:2a:c3:2b:8b:45:
49:64:9d:6c:c4:0e:2c:39:17:f5:67:31:98:70:52:
ca:08:80:a3:19:85:1e:f8:8a:16:fd:be:6e:11:d0:
f7:97:39:a2:f3:51:00:4e:aa:03:4d:15:de:79:d8:
03:13:3e:70:bf:8e:75:5b:d9:dd:4e:c7:55:5c:5a:
57:07:1b:b5:a7:e1:5c:e5:f4:61:c5:99:be:bd:2d:
43:f6:69:d2:60:09:2b:fe:1e:41:d3:a6:d8:4f:e3:
6c:e3:e8:5e:52:3e:22:c7:eb:1a:a3:71:b0:0e:e8:
c3:38:d5:d8:c8:29:22:9e:17:8d:ae:33:51:78:02:
88:f1:12:01:df:9d:cc:61:ca:27:b8:83:e9:f8:65:
74:28:c2:42:8b:64:4f:9f:fa:f4:19:86:fd:5d:69:
f9:20:e2:63:13:7f:4f:31:03:04:f9:7a:64:97:cd:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9E:93:F6:1C:25:64:28:81:EC:B2:01:D8:C8:DA:CF:96:53:9D:B9
X509v3 Authority Key Identifier:
keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:89:88:23:0a:73:03:71:ab:05:9f:82:67:14:27:4d:1e:bb:
f4:fc:37:a8:31:d6:76:00:e9:4b:45:8e:37:17:c4:17:83:69:
89:98:4e:22:e7:40:a2:1c:2c:21:bb:fe:c2:81:52:0f:61:b0:
1c:eb:39:fa:7c:08:1f:2a:10:d9:17:da:95:a8:f3:da:f1:d1:
c5:61:4b:8a:ee:af:e0:35:13:43:98:1c:0a:f7:23:01:d2:4b:
4a:9c:f4:40:9d:5a:6e:3f:f2:0e:dc:29:8f:62:9a:95:b9:e0:
37:79:0d:27:d7:6c:ba:ed:ac:30:06:49:c0:6d:45:b9:d8:7d:
65:c4:42:bb:e3:6a:e7:4e:da:50:7f:60:ef:7c:f6:14:d5:87:
a0:63:5e:f2:c8:b1:c6:5c:ec:ff:07:ce:4a:1d:70:5f:f7:1f:
08:e1:45:2e:da:d5:d0:78:74:db:a3:52:26:ab:bb:b1:8e:96:
0b:77:c8:58:e5:f8:f7:8f:8e:dc:54:6b:2b:4b:7e:0f:3a:d0:
ad:93:4b:18:1e:b2:51:3f:05:54:bb:01:c4:5c:48:74:3b:e0:
85:6d:d2:61:b0:87:f9:3e:4a:78:3d:58:08:5d:b2:a3:fd:5a:
c6:5e:3e:a0:4e:80:84:b4:ec:ad:ef:b3:8a:0d:62:52:d6:26:
fb:c2:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:41 2026 by rpki-client