
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier: huGP9mj48znIWf1OfZFatFAtUudVGMO48BdD26MTiFk=
Subject key identifier: 05:D2:29:0F:5F:74:F3:6A:B1:20:25:08:F7:86:E3:25:C6:29:2A:98
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial: 07EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number: 07DE
Signing time: Thu 16 Apr 2026 21:14:14 +0000
Manifest this update: Thu 16 Apr 2026 21:14:14 +0000
Manifest next update: Thu 23 Apr 2026 21:14:14 +0000
Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: vuFL1VrpRXLucn5ReC7mtoIajtudTclPNWJD9BUnbiI=)
2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=)
3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:14:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028 (0x7ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Validity
Not Before: Apr 16 21:14:14 2026 GMT
Not After : Apr 23 21:14:14 2026 GMT
Subject: CN=69e15126-901b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:7e:5c:75:4a:6b:32:bd:01:01:b0:c5:75:
c3:40:ec:02:71:35:51:f5:cd:2f:74:3c:c9:7f:3d:
2f:d6:c6:e2:81:26:c9:95:f9:8e:b1:ca:e1:99:9a:
3a:35:b9:b4:14:e5:37:89:af:1c:15:ea:39:c2:91:
d6:84:9e:68:bf:1c:8f:04:6b:25:74:fd:85:d0:41:
af:c5:af:ee:56:67:79:c6:05:77:4c:cf:26:ba:26:
c7:c9:a6:f8:65:84:7c:f5:11:09:f0:02:04:c4:0d:
27:31:d1:3d:cb:c7:0f:57:74:67:43:1b:7d:b2:27:
42:a3:ea:7e:65:5f:75:1d:9e:7a:28:49:5c:86:59:
39:8e:2f:2b:e7:b0:37:81:e9:36:e8:25:8b:16:05:
c5:1e:a1:2a:be:20:d9:c1:c1:2a:3c:8f:29:18:17:
68:a6:e3:52:67:bb:f7:9b:3f:01:aa:87:56:07:5c:
7b:7e:8c:46:9f:48:83:05:66:a2:59:e1:b4:8e:aa:
0f:8c:55:94:09:a3:62:4c:2f:45:8a:d1:17:d8:a4:
1c:4f:06:2e:57:61:41:8d:de:d4:b1:7a:81:5b:ad:
a6:74:cf:07:71:95:70:24:d5:e1:de:9f:59:0a:fe:
85:ab:81:c3:b7:c5:73:6a:c5:3f:f6:94:54:af:4b:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:29:0F:5F:74:F3:6A:B1:20:25:08:F7:86:E3:25:C6:29:2A:98
X509v3 Authority Key Identifier:
keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e9:37:27:74:a3:99:e8:83:f3:73:b0:be:c3:8a:fc:e6:ce:
df:c3:3e:b8:da:2d:74:b5:7c:32:c4:47:58:07:fb:6e:ea:2f:
1a:17:ed:28:4b:fa:2e:14:e2:dd:37:db:ec:ab:0f:69:dc:6f:
bf:21:f1:28:2e:73:76:e4:ea:3a:6d:6c:21:ec:00:43:34:e2:
04:ef:52:b6:91:ee:dd:76:e4:ca:93:8d:43:40:e1:43:ee:fc:
97:97:ba:9a:eb:9a:32:ab:df:f9:f9:13:2e:6d:e8:16:ac:7e:
ff:b7:42:ed:7f:9f:4b:61:47:4c:8a:42:1e:de:a1:56:25:54:
6f:3a:18:13:eb:ec:ee:c3:1c:dd:5b:d4:13:83:ea:b2:b2:24:
80:05:c7:20:aa:7d:a2:12:4c:a0:95:2f:b2:c8:f7:4c:32:ed:
65:25:48:7f:49:45:78:05:8c:96:b4:ae:8c:74:e3:02:e2:84:
d3:c8:07:48:a5:6b:01:8e:0a:98:bf:6d:80:c4:5b:ab:54:80:
14:dd:1d:c8:0e:04:1c:27:02:28:18:5b:01:8e:46:d0:45:f2:
99:8b:6e:75:a1:b6:5b:3a:be:ce:82:eb:6d:4c:2a:51:f0:76:
0f:64:70:ef:20:04:39:a9:72:55:ba:fd:5c:77:94:57:65:81:
67:4f:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:12 2026 by rpki-client