
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier: /EHckCBJTwQAAIOEF20t8YpX4y1To0EZRXJHypNGgnI=
Subject key identifier: 9B:5F:04:44:57:C6:3D:09:4F:16:E2:CF:D0:80:EB:4E:A9:6F:4C:F0
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial: 081F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number: 0811
Signing time: Sun 26 Jul 2026 21:52:48 +0000
Manifest this update: Sun 26 Jul 2026 21:52:48 +0000
Manifest next update: Sun 02 Aug 2026 21:52:48 +0000
Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: Cdof38mxfELAD2WIa0VIshqJ/26++KWSkpzz0lEb+3U=)
2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=)
3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:52:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079 (0x81f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Validity
Not Before: Jul 26 21:52:48 2026 GMT
Not After : Aug 2 21:52:48 2026 GMT
Subject: CN=6a6681b0-3748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:cd:6e:9a:59:64:06:e1:1f:16:30:21:4e:
8b:ab:bd:cb:67:1c:1f:d1:65:11:b3:df:ad:7a:54:
e6:45:31:2b:e0:b3:ee:a9:27:15:b7:e8:52:2e:33:
28:8f:65:72:31:ed:1e:0e:bd:0d:be:60:65:ef:c7:
39:64:66:52:74:91:fd:66:6d:c2:a3:12:48:5a:d3:
55:af:ed:57:2b:2d:bd:d7:6c:8f:77:e7:fd:19:07:
c2:e5:d2:93:24:c7:72:11:dd:f0:6e:dd:8c:d4:d0:
12:87:9d:f9:57:16:69:16:21:e2:d3:a7:73:31:f6:
69:9d:19:91:e5:40:68:78:14:cf:b8:88:2a:b7:10:
88:6e:ef:bf:9b:e6:9a:b4:16:4f:6b:cc:cd:da:78:
b1:c5:e7:13:bd:56:e9:e0:69:bc:60:54:93:9f:38:
e0:bf:48:ea:dc:a0:c1:1d:d9:76:90:e5:ae:ac:0e:
d4:e3:a0:72:40:f5:f0:7d:3d:90:50:af:8f:a4:52:
46:95:1b:5f:d3:2b:18:be:95:d3:0d:17:24:1a:f1:
95:50:51:a8:0c:cd:65:b7:69:31:ab:33:bc:a4:f4:
b8:f4:4d:c5:67:a3:a6:01:01:2f:ce:11:a9:69:23:
a2:2b:b7:28:ae:cb:9c:e9:29:4c:7c:9c:c2:04:5b:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5F:04:44:57:C6:3D:09:4F:16:E2:CF:D0:80:EB:4E:A9:6F:4C:F0
X509v3 Authority Key Identifier:
keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:61:3a:9e:41:a5:d1:65:49:7e:96:dc:a6:2a:fb:85:92:26:
2d:0f:ac:6d:8d:f7:32:79:2d:9f:60:74:84:ae:7c:52:98:06:
d0:04:44:02:ac:bb:49:ef:0a:be:ef:cc:ab:ce:23:2e:31:b1:
7b:f4:0b:28:46:21:77:84:7e:eb:98:b4:a4:0e:03:60:af:aa:
35:77:b0:64:93:c7:17:da:50:61:c4:ad:a4:62:b2:76:73:fe:
9d:f3:eb:84:92:85:a3:3f:ed:58:03:75:26:f0:bc:6a:7b:8c:
05:d9:0e:62:2e:05:48:d6:5a:9d:b5:92:e1:c1:21:ff:b0:f4:
ef:6b:21:e3:82:0c:81:4e:b2:d2:19:96:8f:57:60:18:2e:10:
e6:73:f0:7f:70:89:f3:7c:88:a0:1d:fa:04:eb:61:f8:d8:69:
7c:2d:4f:b0:69:e9:5b:de:c9:dc:eb:75:30:c3:05:83:42:df:
3e:07:7e:49:7d:8f:82:a8:66:c9:36:b1:50:c0:6b:64:5f:c1:
03:c2:5a:81:d3:1d:aa:fa:d0:ee:20:45:67:52:65:b9:8a:b8:
4a:b9:9c:68:f8:ce:98:8e:6e:bd:b4:eb:6f:a2:be:4e:9f:12:
94:ba:8c:52:63:52:9f:f8:0e:85:eb:6e:8d:3e:46:e4:2e:dd:
85:98:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:34 2026 by rpki-client