
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier: tPz6fLgPXFyPJLQqhO/54KYb0QG6ilVxpalSF1oD3yU=
Subject key identifier: F0:74:59:56:24:BA:67:A3:31:9D:50:DE:D2:38:F6:FD:C2:9D:31:96
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number: 01D3
Signing time: Mon 27 Jul 2026 05:16:41 +0000
Manifest this update: Mon 27 Jul 2026 05:16:41 +0000
Manifest next update: Mon 03 Aug 2026 05:16:41 +0000
Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: K2gOTSfSYbRGtJU8ALiaKyq5ySBMEjO+heIOqZ9djp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Validity
Not Before: Jul 27 05:16:41 2026 GMT
Not After : Aug 3 05:16:41 2026 GMT
Subject: CN=6a66e9b9-e4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:f5:72:4b:35:cb:19:14:12:7b:5a:9b:2f:
9b:47:b6:ef:a2:85:9f:2a:18:af:3b:9e:51:88:55:
68:48:d7:31:3b:88:67:8b:8a:ac:71:f7:c3:91:81:
94:d3:a4:69:c1:98:42:1d:e3:21:da:67:f1:8a:ad:
d7:c3:3a:6f:fa:d4:79:ff:f9:81:56:d2:d7:9d:48:
e3:71:33:80:a0:f7:0d:dd:f4:38:5b:53:5b:49:b5:
d1:00:9f:00:3d:b3:85:8f:88:0d:82:a1:d6:62:d1:
e0:d3:75:68:24:e4:22:cc:85:e0:09:6c:9c:7d:94:
c0:39:c1:68:85:94:be:28:0d:34:1f:40:77:d6:2e:
77:0b:75:5b:3b:7c:41:1f:99:96:aa:9a:70:73:fc:
bf:9b:fb:fe:de:b4:6f:ea:99:d6:0e:e9:ea:e5:71:
e2:9b:cc:51:d1:b9:60:1c:19:a3:68:60:8e:e4:c9:
3e:b4:00:5c:bf:e1:ca:5f:b4:84:ae:ac:7b:ac:d5:
ac:78:80:00:1a:91:e9:16:69:1c:d5:75:bd:cf:3d:
85:35:24:e7:7c:30:59:77:ad:02:c3:44:db:f3:91:
79:4e:fb:ab:cd:a2:4a:2a:c6:06:88:b0:1c:5f:c3:
2f:5d:40:a3:5d:80:e1:2c:2e:ec:b5:f2:5c:0d:64:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:59:56:24:BA:67:A3:31:9D:50:DE:D2:38:F6:FD:C2:9D:31:96
X509v3 Authority Key Identifier:
keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:13:70:e3:c6:bc:91:e2:22:2b:9a:19:be:80:1d:f0:7e:
0f:67:34:0d:c6:af:03:5b:e7:9d:58:d3:01:6f:ed:84:b2:a6:
86:31:57:2f:c3:eb:ac:c1:b2:c2:68:51:f8:3d:aa:bd:6b:a7:
3c:7c:01:b5:02:11:88:a2:6a:82:a7:fe:be:b1:f8:f5:6a:bc:
76:00:b7:46:0e:1b:36:fa:82:28:ba:e0:d0:b7:bc:97:de:da:
cf:19:a5:d6:4d:ac:b7:1d:61:61:ef:e6:60:f0:8d:73:85:57:
f1:8e:89:e0:38:4a:0d:d1:45:41:8f:3c:bf:42:1b:09:8c:f2:
6f:fd:74:85:a8:4f:c7:37:a8:4c:89:3c:2d:33:90:bb:58:a1:
b1:1a:4a:a5:bb:c9:f7:c8:53:95:80:f9:e1:ff:7a:27:e5:6d:
2b:52:ec:66:e5:71:dd:46:73:93:c5:f1:2c:9f:67:84:5f:73:
20:f7:93:81:8f:79:bf:b2:75:f3:3f:49:be:a9:3d:49:42:7a:
7d:7d:60:a5:4c:a0:38:71:33:ab:27:af:26:fd:5a:8d:01:e3:
c1:86:16:cc:c4:8b:7a:fc:aa:b2:e9:36:a5:4c:f0:5f:1f:08:
a9:eb:60:dd:99:41:81:60:05:ba:c1:b9:73:b1:1c:6f:9b:fc:
af:f6:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:15 2026 by rpki-client