
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json)
Hash identifier: McBZlR1mrPSPfVu7FS+VeBJYxIMTF83EaDnPSPb6ung=
Subject key identifier: 54:4D:29:2D:25:BE:55:3B:9B:55:A5:F1:63:67:C2:DE:C0:E1:0D:13
Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Certificate serial: 0D5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
Manifest number: 0D4D
Signing time: Tue 28 Jul 2026 18:12:22 +0000
Manifest this update: Tue 28 Jul 2026 18:12:21 +0000
Manifest next update: Tue 04 Aug 2026 18:12:21 +0000
Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: L4DK6z1jMzJfp1krFilv2aEzQQ4V9ZFcARaBYfxP/Bs=)
2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: 3bEt+BEL0/++S5Hn6XyvCpw2hPaq5SjA7QhpJ7kxSWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3423 (0xd5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Validity
Not Before: Jul 28 18:12:21 2026 GMT
Not After : Aug 4 18:12:21 2026 GMT
Subject: CN=6a68f106-088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:31:5c:b0:b7:49:79:ea:5e:07:45:0f:59:
3e:f1:5d:43:c3:e2:fc:43:95:b3:51:8c:f2:df:ae:
5f:78:10:b9:97:d7:04:92:68:ef:da:5b:76:c6:03:
49:c9:08:56:c6:e7:8b:8a:8f:07:90:45:8d:d0:d0:
a4:d4:8e:a3:ff:7f:84:b3:13:b3:b7:bb:22:69:fa:
7a:27:b7:47:c0:ec:4b:19:0f:a9:4f:40:aa:56:ea:
54:1e:03:18:cb:ef:96:8e:96:16:53:d6:bb:73:92:
e9:b2:56:85:f5:08:ea:d3:cf:ad:fc:01:62:80:26:
00:a8:26:f4:bf:ec:45:f8:29:9f:1c:b8:c0:f3:9e:
80:4b:44:37:0c:51:8f:e2:d5:86:4e:0d:61:42:d7:
56:76:da:e7:8b:b1:aa:2f:15:db:a7:e2:c7:10:4c:
74:13:da:df:0d:59:4d:21:7e:88:cc:ab:27:22:bb:
9e:1a:f4:73:5c:e2:0d:b0:66:cf:46:70:cb:bd:12:
1b:b5:e7:90:49:0d:b6:f9:55:4c:7b:01:63:39:f0:
64:7d:3d:00:28:10:69:4d:59:74:c2:97:21:39:3b:
e5:78:60:d0:fd:29:c0:1f:37:7d:12:e5:42:be:83:
70:c5:92:99:d3:86:02:4a:73:4e:fb:1e:af:3c:97:
30:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:29:2D:25:BE:55:3B:9B:55:A5:F1:63:67:C2:DE:C0:E1:0D:13
X509v3 Authority Key Identifier:
keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:1d:fb:7c:2c:9d:ca:e5:ed:71:38:63:49:fb:0d:c4:af:ea:
27:82:2d:32:ee:b8:55:31:0f:8d:99:e8:44:6d:21:79:cc:d4:
99:a1:0a:aa:a6:3e:08:f8:f8:df:35:27:9b:c5:ef:85:f6:12:
48:8b:c3:3c:50:00:f8:db:70:35:9c:37:cf:3e:92:22:af:a1:
ba:05:3b:6a:a9:22:df:f3:22:a8:d9:44:4c:58:27:dc:b8:5c:
e9:61:fa:75:99:86:40:28:a7:2a:ae:5b:81:7d:69:d3:66:40:
b9:cf:38:ef:07:30:36:ee:8c:68:3a:56:40:df:05:9f:ad:28:
c2:64:f1:86:35:08:4c:8e:7c:ef:0b:93:27:2d:ce:8e:b5:17:
cf:bd:a2:1d:77:ce:5f:05:31:02:2e:90:93:6b:f5:18:1b:6f:
b6:e6:db:92:8b:9f:ee:d3:c7:df:d3:4b:74:98:6c:76:74:ad:
00:cb:a2:49:76:97:d6:52:1b:f8:67:97:36:b4:f3:ac:12:ff:
64:d4:56:52:90:3e:d8:f0:8b:5f:24:f9:38:2b:04:7d:08:56:
12:a4:08:9b:d1:11:31:40:47:e8:30:5b:29:40:c5:b6:74:9a:
cd:7a:f1:4d:5a:4c:8e:b1:af:dd:86:5b:e9:6d:b4:4c:9f:b7:
e8:5a:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:14:42 2026 by rpki-client