
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
File: QVEOswnqHt6pCF-PaC289YblBfg.mft (raw, json)
Hash identifier: OVo6qZkRxZPdAn3PqCdtAk+NnpOJ9m+IyAmDDq8gHec=
Subject key identifier: EC:A0:40:1B:63:A2:B8:62:1F:7B:19:00:52:0F:60:BF:0F:37:54:EC
Authority key identifier: 41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
Certificate issuer: /CN=A914EBB2/serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
Manifest number: 35
Signing time: Wed 29 Jul 2026 05:41:04 +0000
Manifest this update: Wed 29 Jul 2026 05:41:03 +0000
Manifest next update: Wed 05 Aug 2026 05:41:03 +0000
Files and hashes: 1: QVEOswnqHt6pCF-PaC289YblBfg.crl (hash: jtxtI7Es8GFUfZ1wft6fgG4NuEGTNKW6XEntkokaSeg=)
2: 04A267BC3A1C11F18A86C54FCE833773.roa (hash: 23knBDl73gfXNd3iGv8o2CcfU2NSZeIUWhdKE2kDL2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Validity
Not Before: Jul 29 05:41:03 2026 GMT
Not After : Aug 5 05:41:03 2026 GMT
Subject: CN=6a69926f-4af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:0c:5f:06:a0:d0:7e:ed:48:8c:ce:41:65:
69:da:56:dc:6c:c1:f9:ee:3f:40:8c:f7:e1:3a:eb:
de:1d:e1:63:98:d7:66:a7:6e:06:77:05:9e:da:16:
f2:b2:4a:e2:0e:25:92:0e:7c:d6:c6:74:ee:0e:d3:
20:42:79:da:68:1e:7f:0e:97:b3:49:09:6f:8b:c6:
db:3f:f3:78:58:68:e1:c4:9a:d3:be:43:a7:6d:05:
d1:66:40:79:60:11:24:d1:38:ea:a1:b5:de:cf:54:
ab:63:49:f7:26:e0:ee:c8:e8:a7:05:13:50:c9:ad:
83:de:69:2b:68:6b:2b:e9:1d:40:36:89:7f:29:54:
9c:24:e5:36:52:1e:57:d1:a1:ea:01:23:fc:4f:af:
76:e3:97:31:68:2e:fe:47:2a:ac:4f:81:2d:25:26:
66:83:ef:0b:6a:9d:be:e9:7c:05:72:b4:77:ec:9f:
bc:a9:f2:94:61:09:7c:cf:84:d6:d3:92:74:89:f8:
1b:0a:e6:3d:e6:16:71:9b:c5:35:09:8a:b4:f7:b6:
49:56:45:7d:e6:19:79:52:e9:7f:00:7b:a3:6e:c2:
2a:a9:09:9b:03:40:97:a7:dd:76:5d:57:8c:c2:97:
2d:c7:39:ea:52:37:bd:10:31:8f:39:6e:07:f8:1a:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A0:40:1B:63:A2:B8:62:1F:7B:19:00:52:0F:60:BF:0F:37:54:EC
X509v3 Authority Key Identifier:
keyid:41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9d:0f:cf:fb:27:48:22:b1:1f:09:61:2b:60:a5:58:16:00:
66:0e:18:46:a9:2e:db:0d:e9:e3:b8:54:19:1a:f3:b7:7b:e7:
4f:fd:3e:c8:82:e8:35:2a:f6:53:14:48:d1:e4:fe:7e:67:8a:
55:d5:5a:32:a2:2f:c4:5e:50:a5:79:d4:c2:d6:23:06:23:62:
ad:14:97:4f:74:a8:86:61:13:27:85:a7:06:97:99:5f:f3:ed:
f0:17:e0:8d:e2:93:ad:aa:4a:9e:24:d1:3c:6f:91:c5:75:c3:
2c:a9:6f:09:fe:ce:00:99:f1:e8:14:b2:cd:45:41:9b:47:bf:
c8:5b:a2:0c:54:96:73:f3:a5:36:c5:fd:01:90:f6:09:4c:b6:
87:d4:10:ef:af:f6:8c:68:2a:84:89:b7:ce:a7:60:70:40:1c:
9f:a2:48:bc:55:85:fe:c2:0f:65:88:bc:c7:19:33:3c:c1:99:
88:27:dc:0d:1c:14:5a:61:88:51:51:13:d2:f2:3f:61:7e:3f:
bd:a0:a9:e4:93:1a:da:b8:54:2f:ad:05:84:b0:e9:b7:ee:60:
c9:e4:c3:8b:df:1a:56:ed:6a:83:42:3a:d4:fb:22:25:2f:94:
31:11:f6:e5:61:f6:6e:f1:6f:03:82:84:82:ed:65:9a:bc:79:
47:b0:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:37:20 2026 by rpki-client