
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: EKuew6mcinSIrzx5IRWbErs0PKnT5MXByFQRsifmH90=
Subject key identifier: C3:FD:6A:C4:AA:8F:8A:C4:E8:EB:9E:8F:67:33:66:52:7D:8A:4F:99
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1BF1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1BEA
Signing time: Tue 28 Jul 2026 16:20:09 +0000
Manifest this update: Tue 28 Jul 2026 16:20:09 +0000
Manifest next update: Tue 04 Aug 2026 16:20:09 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: R+Gv0oCNs4898MGDE3Vy0+gsc2FBoVMpw8Z0PTXiFMs=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7153 (0x1bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Jul 28 16:20:09 2026 GMT
Not After : Aug 4 16:20:09 2026 GMT
Subject: CN=6a68d6b9-fd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:25:cf:18:98:8b:bd:91:9a:e4:bf:25:da:
56:4e:c7:1f:ac:c6:cd:56:e9:24:ca:24:31:f3:e2:
b4:f5:fd:b6:1e:e5:d0:ed:b6:df:2a:9e:2c:ee:8a:
2d:f9:8a:de:2e:c0:b8:15:4b:e4:13:cf:ac:ee:12:
62:bd:8a:35:13:f9:6d:a1:57:56:7a:44:21:32:bb:
48:a1:1d:bc:12:d4:62:aa:e8:2d:c2:0f:79:87:a2:
f9:ed:6b:31:99:ba:42:f3:eb:35:3a:7c:dc:d8:58:
ef:c3:f2:8a:c9:53:45:5c:10:32:94:09:bf:87:3e:
e8:ad:b9:31:72:6d:a8:e9:ed:64:fc:34:f4:99:1f:
4b:48:bd:fb:f1:b4:43:5f:5f:b8:ab:db:a3:25:a7:
38:8b:db:0e:68:95:42:6f:69:48:95:34:25:d1:b1:
dc:1d:02:a3:61:e7:99:06:a7:1e:9d:88:e0:80:a6:
5b:fe:28:93:49:d6:ae:bf:cc:24:36:78:c5:66:a8:
62:46:72:e2:7e:14:24:ee:2f:43:40:28:18:ea:7f:
1e:d3:e4:40:01:36:4c:49:47:f2:9d:86:c4:e5:fc:
ce:13:8e:7d:92:84:fa:ca:8b:c4:5a:78:2b:06:2b:
b1:f2:d1:a9:42:1f:ab:df:fc:8a:54:40:a0:67:d7:
0f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FD:6A:C4:AA:8F:8A:C4:E8:EB:9E:8F:67:33:66:52:7D:8A:4F:99
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d6:8e:5e:cd:f4:f8:8c:09:91:15:54:b6:e4:1c:10:85:6d:
33:65:bb:33:a9:90:50:97:01:37:bb:7d:27:f9:db:29:33:1c:
bf:98:dc:52:d7:f7:e4:8d:69:83:9d:87:c0:89:58:e5:09:2d:
83:1d:91:81:f0:fc:88:5e:a1:25:50:f2:00:2a:dd:d1:d7:3c:
e1:1f:1b:22:89:5a:95:76:13:f7:18:98:eb:04:a4:ea:bf:a8:
ce:80:ec:57:ff:03:57:ad:31:9c:96:4d:9a:5e:85:21:5b:9f:
af:0e:87:54:e8:67:cf:fc:6f:68:d3:d1:ca:ab:59:11:5d:bb:
98:96:39:93:61:44:36:db:5c:4e:e0:2a:f8:53:b5:d8:b4:bf:
49:60:10:50:b6:cb:cd:11:d3:47:7a:f2:03:b0:26:7f:1c:d2:
dd:1d:e2:32:60:f2:13:d9:d6:bd:57:f4:5e:09:0c:b5:b1:21:
bf:28:e6:7e:c1:8e:00:40:d9:35:7f:05:57:3e:62:49:73:99:
a2:76:81:8f:6f:1b:38:9f:6e:61:59:f1:07:da:77:d8:af:d6:
96:fd:85:1e:a2:af:da:8f:2f:76:6f:4c:25:ed:6c:f9:7f:85:
e5:34:47:6b:aa:33:ea:92:6e:2b:c2:68:e1:b9:f1:a1:35:66:
20:4a:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:45 2026 by rpki-client