
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json)
Hash identifier: a8iQknH168ghjjvHT6/PkpcTpBAITQuHFsS/QFbXSI0=
Subject key identifier: 92:28:D8:6B:8E:4A:8F:93:34:60:63:1B:F5:2E:E1:1F:E7:E3:EA:56
Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Certificate serial: 0570
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
Manifest number: 0566
Signing time: Wed 29 Jul 2026 00:01:30 +0000
Manifest this update: Wed 29 Jul 2026 00:01:29 +0000
Manifest next update: Wed 05 Aug 2026 00:01:29 +0000
Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: xYTeCi12JdBOw7zKe2gwYyqUrHpIobNbR7JmHVOIJtU=)
2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Validity
Not Before: Jul 29 00:01:29 2026 GMT
Not After : Aug 5 00:01:29 2026 GMT
Subject: CN=6a6942d9-bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:e9:f1:a0:12:1c:36:e1:80:f9:88:05:32:
79:3a:2d:ec:92:71:7b:71:5c:20:b0:9f:cc:5d:36:
89:9a:52:7c:fb:fe:d1:b0:89:4c:68:7c:85:49:c3:
f1:d8:4e:27:dc:09:83:a6:57:1d:a0:25:96:64:f3:
3e:24:72:98:0b:91:27:f6:6e:b4:60:2b:1f:78:b4:
98:b4:f1:62:80:ba:a6:ce:4c:85:8a:f9:32:44:3e:
be:40:b8:0e:d0:12:00:cf:71:b3:46:b3:45:e2:20:
0b:4a:2d:5a:c5:91:c4:72:4d:51:00:55:35:cd:c4:
51:48:32:4e:86:38:a1:fe:c4:a0:85:f8:e2:d2:bd:
be:9d:2d:af:a4:c9:aa:09:26:af:5b:57:df:3a:23:
b6:79:07:39:e5:5c:cc:18:d3:e7:53:8e:54:84:55:
57:fd:d7:c7:6c:f4:7f:72:9f:2a:f1:77:9a:3d:68:
ca:7e:66:e8:d7:db:bf:a3:c6:bc:bc:ae:f0:e6:e8:
cb:75:cb:0c:25:90:8d:6e:9d:e9:7d:1c:85:6c:eb:
89:a7:a7:e8:1c:6b:10:4a:98:56:c4:39:c9:c1:df:
41:c7:34:16:19:a4:c3:06:76:a0:af:6b:0b:1e:ce:
ca:33:22:e7:04:95:29:c0:43:26:4b:cc:bb:37:d8:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:28:D8:6B:8E:4A:8F:93:34:60:63:1B:F5:2E:E1:1F:E7:E3:EA:56
X509v3 Authority Key Identifier:
keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e7:0d:56:e6:77:56:26:b9:53:61:08:59:35:dd:05:73:6f:
de:8a:61:2c:33:9d:74:19:f3:b0:bf:f4:92:85:2c:84:5a:2a:
fd:cb:c2:ba:ce:6a:75:f0:1b:1b:1b:aa:50:af:e7:ad:32:80:
ba:93:da:bd:ee:49:1b:c1:d4:1f:fa:86:3a:2f:17:16:b5:ba:
dc:25:18:21:47:91:b8:85:6b:bd:11:c9:a1:45:5c:32:56:35:
01:5b:cc:c5:e1:11:aa:15:06:32:4e:49:ca:88:64:52:d5:6c:
73:3c:4a:18:f3:3f:6a:2f:aa:2c:41:a3:af:0d:6a:c0:7a:f5:
47:f7:86:41:d7:62:d6:27:4a:51:39:73:88:75:46:f1:6a:55:
34:49:f5:08:41:27:f3:16:52:ab:af:3a:d0:21:c2:b2:11:8e:
28:8c:d6:22:55:25:a1:60:8b:00:fd:30:35:73:22:27:cc:c0:
96:95:16:a3:46:90:83:73:1b:72:58:70:74:fc:09:7d:ab:3f:
fb:4e:9f:68:26:64:51:5d:28:5f:a2:76:d4:78:a2:a4:d8:0d:
f3:c5:97:38:9a:a3:e8:ba:86:f0:70:cf:74:c5:aa:8c:3b:c3:
16:8e:5b:da:52:81:05:1b:ba:33:4e:f8:28:7c:ae:e8:1f:e1:
39:9e:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:57 2026 by rpki-client