
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
File: qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json)
Hash identifier: G6uJLGCER5PKU1L85IxETaqAIZIRYcAkpzMpsM5cAVQ=
Subject key identifier: 31:50:9D:9C:FC:F2:37:49:70:A9:31:46:E1:A3:9E:F7:30:FC:8F:D4
Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Certificate issuer: /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Certificate serial: 0629
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
Manifest number: 0621
Signing time: Sun 26 Jul 2026 23:37:52 +0000
Manifest this update: Sun 26 Jul 2026 23:37:51 +0000
Manifest next update: Sun 02 Aug 2026 23:37:51 +0000
Files and hashes: 1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: vbmrb56ZWthp+s5YogHij6ZDreRgP3a+vsj+zXxSFig=)
2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 23:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1577 (0x629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Validity
Not Before: Jul 26 23:37:51 2026 GMT
Not After : Aug 2 23:37:51 2026 GMT
Subject: CN=6a669a50-e650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:41:10:92:bb:39:c3:a6:00:b3:96:b3:02:
28:b5:51:c0:c2:43:2f:06:0d:1e:f2:e9:34:2c:f3:
f0:df:08:50:37:45:88:d0:48:27:6e:01:27:57:36:
5d:dc:08:53:f2:56:e5:1a:6f:14:60:e1:6f:6c:9b:
a7:76:f5:91:a6:fd:ab:6c:e6:14:f9:7a:f5:5b:67:
c8:38:b9:d6:82:43:12:a7:99:4b:e4:2f:c9:87:f5:
21:f7:c8:af:89:ba:e7:c2:7d:d2:6a:5c:93:d7:52:
fd:ee:10:43:03:23:1c:65:73:ee:56:48:c0:7f:e2:
ab:bc:69:3c:97:b8:77:42:e7:de:ba:84:7c:e4:e3:
95:33:55:65:6b:ea:e4:81:85:32:c2:b4:15:44:6b:
13:fc:c6:1e:0a:b3:82:ea:ce:ef:99:dd:95:e0:75:
04:cc:cf:15:85:eb:df:88:03:9a:65:51:d9:7f:12:
eb:4b:8e:45:a6:11:c5:04:5a:32:f8:3a:2f:32:bf:
94:77:b2:7e:3e:55:2d:6c:12:14:c6:12:7d:a2:5b:
13:2f:fb:bb:09:ff:db:0b:8d:94:72:6f:6b:50:1b:
64:62:d8:68:a7:f9:82:22:c8:d7:45:77:a8:22:cf:
70:a5:fb:ba:93:86:7b:d9:d7:ac:f3:01:cf:e7:1a:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:9D:9C:FC:F2:37:49:70:A9:31:46:E1:A3:9E:F7:30:FC:8F:D4
X509v3 Authority Key Identifier:
keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:a2:01:8a:c6:59:e1:c8:04:33:45:91:a5:15:29:c0:51:
7f:56:e5:4a:28:a6:62:21:3e:86:19:a8:df:fc:41:5e:ac:82:
91:9b:a5:9e:af:77:f4:1d:ed:e3:eb:bc:1a:3b:2e:34:93:dc:
ee:71:f7:3b:0b:5b:7c:96:69:8f:0d:ea:79:76:54:77:da:c0:
34:c8:88:bd:69:c0:e6:de:1e:8c:9f:19:7b:5b:cb:a5:b1:36:
97:87:23:ed:0d:db:cc:f5:f6:e4:95:7b:d2:dd:dc:07:9e:d0:
91:31:0a:6d:e4:bb:df:73:83:80:72:20:3d:be:22:af:1b:02:
bb:1b:ca:3d:5c:95:68:00:87:08:3c:82:51:30:c1:93:02:44:
37:80:eb:84:ae:1a:e4:ef:60:5a:02:4d:89:40:fb:b5:c0:60:
c0:aa:1f:b1:b7:85:7b:33:c7:cd:e0:5f:df:4c:4a:92:f7:ef:
ed:d3:1f:74:2e:6c:02:98:38:2b:ad:6c:77:14:ea:23:9b:3b:
e3:71:af:26:9b:53:b5:d1:9c:1e:9e:87:7b:50:04:81:a4:1c:
1f:dd:a5:f5:cc:7f:85:38:a3:dc:45:cb:3f:bb:16:9a:f3:08:
eb:f6:5a:74:12:a7:a7:1c:e3:37:9c:33:0a:f1:a9:0b:65:85:
40:4d:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:00 2026 by rpki-client