
$ rpki-client -vvf rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
File: QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft (raw, json)
Hash identifier: 8yIHLXBn9glYLp576JhXkJLqDKJm1GYLdpCvzZo4biI=
Subject key identifier: 3E:2C:B3:2D:2B:02:DE:88:BB:AB:3F:14:BE:EF:6F:96:9F:42:21:67
Authority key identifier: 40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
Certificate issuer: /CN=A913631F/serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
Manifest number: 0124
Signing time: Wed 29 Jul 2026 07:05:51 +0000
Manifest this update: Wed 29 Jul 2026 07:05:50 +0000
Manifest next update: Wed 05 Aug 2026 07:05:50 +0000
Files and hashes: 1: QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl (hash: ogwVv7lOLGlhEJdT+bQBsJiqqVsugydnnmFjqw+WZLI=)
2: CA9B891ACF1C11EF981F2F86C4F9AE02.roa (hash: tykKMCNyhL8YIODSIbVTOG4k2NzgIkvRLrrP9k8uYXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:05:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913631F, serialNumber=403BB7B918F9154AD82C2AD35AEFC0ABE8D06ADE
Validity
Not Before: Jul 29 07:05:50 2026 GMT
Not After : Aug 5 07:05:50 2026 GMT
Subject: CN=6a69a64f-69e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:b4:ab:16:a3:a8:93:c6:dc:32:bd:18:d4:
77:c0:79:5e:a6:94:e6:54:76:98:e0:d5:9c:15:33:
e5:8d:f2:de:e3:08:f6:94:ac:2b:d7:37:50:fe:35:
4d:4d:2f:0b:9e:66:06:be:ec:b6:e3:31:5b:5f:32:
69:ae:49:5a:b5:ae:ba:60:83:19:b4:c5:34:78:c8:
3b:54:9d:6c:c4:e3:46:09:b8:d3:e4:c3:36:f5:a2:
5a:3b:5c:d4:ab:30:fd:5a:ed:d3:4d:1d:19:04:b2:
92:1e:a3:ea:ab:66:d7:3b:a5:76:38:4c:48:3f:d7:
d7:08:36:b6:e3:a5:e8:04:b6:12:c7:9a:79:c8:13:
73:ee:10:0a:5a:7e:a9:04:c6:64:e5:b8:4c:3d:25:
e6:0b:9c:8d:33:e4:cb:f4:7d:ab:44:74:3e:67:aa:
b3:c6:80:70:a0:37:ec:09:19:7e:4f:7f:02:85:69:
78:ad:a1:6a:96:b2:79:f9:f8:a5:cb:bd:b0:8e:82:
0d:d2:d8:7f:36:7a:cf:34:68:46:46:f2:fc:4c:ae:
d7:04:ee:01:bb:0f:20:2a:32:82:55:7e:25:f5:7a:
7b:b9:50:74:50:16:95:d2:9e:46:19:50:95:06:6d:
13:e8:d9:1f:80:13:8c:a7:45:21:48:0e:40:b5:40:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:B3:2D:2B:02:DE:88:BB:AB:3F:14:BE:EF:6F:96:9F:42:21:67
X509v3 Authority Key Identifier:
keyid:40:3B:B7:B9:18:F9:15:4A:D8:2C:2A:D3:5A:EF:C0:AB:E8:D0:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QDu3uRj5FUrYLCrTWu_Aq-jQat4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913631F/7B3F0B1CCF1C11EF81947F85C4F9AE02/QDu3uRj5FUrYLCrTWu_Aq-jQat4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:78:99:1a:8b:f0:93:b6:24:e0:a3:74:df:c9:69:be:ff:93:
47:e4:6e:9b:b6:71:13:3b:ba:55:b2:68:ad:92:6f:33:fe:7e:
e8:85:07:93:20:dc:6a:ab:27:d3:b8:cf:02:b4:f8:02:08:5d:
97:bd:df:36:f8:f5:f1:6c:d7:18:6b:d3:d2:25:54:f1:ea:38:
cf:72:fd:47:2e:e0:5b:26:e4:92:95:23:80:07:b2:e2:bc:b1:
8c:29:0f:ea:56:be:13:23:3b:24:c4:5a:77:4c:87:01:3c:d3:
d4:ab:27:8e:3f:09:6b:ab:05:30:d2:af:a2:a6:5a:98:b7:9d:
90:36:74:0f:61:87:5e:2f:a7:40:6a:d5:ea:b6:e9:2e:a8:69:
64:e4:0a:78:55:6a:61:4c:97:f6:14:4a:ce:b6:69:b2:20:56:
23:d6:9c:5b:cc:73:5f:53:8b:2b:5b:4a:cb:57:d9:bb:b4:48:
2e:12:4c:cd:ba:c5:c1:c8:c8:42:da:a3:0c:f1:ce:3b:d7:33:
41:e6:22:8b:b6:7f:75:6c:d5:4d:8f:b2:e4:be:82:5b:8e:17:
40:41:b9:57:d8:9f:a0:96:36:94:2b:30:dc:6c:55:15:ce:3c:
cc:0e:27:13:e6:8b:12:40:5f:13:54:94:f1:2b:50:f3:c4:bd:
bf:5f:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:04 2026 by rpki-client