
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
File: qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json)
Hash identifier: qUJcTrzR+RTbhqvsd0RwpxVCscXCDh43gyKByUdkP+M=
Subject key identifier: 92:1D:3C:FC:2E:7A:EE:04:25:1A:71:C3:13:7C:50:C7:03:C0:27:3F
Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
Certificate issuer: /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Certificate serial: 7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
Manifest number: 7D
Signing time: Mon 27 Jul 2026 09:56:57 +0000
Manifest this update: Mon 27 Jul 2026 09:56:57 +0000
Manifest next update: Mon 03 Aug 2026 09:56:57 +0000
Files and hashes: 1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: S0mdDqir17yn5uyywi6CDas8Wb9juCzQlscsfIwuPMY=)
2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: rthVEOzl3I+Nrh1/x+VYyq3xjzoN6lgAA50smRMa7oE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Validity
Not Before: Jul 27 09:56:57 2026 GMT
Not After : Aug 3 09:56:57 2026 GMT
Subject: CN=6a672b69-e5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:e3:9c:1e:58:d4:3a:a5:e9:59:fb:eb:20:
4c:34:70:4b:17:e6:ca:fb:88:1a:7a:9f:ea:99:e9:
a8:46:22:0a:83:fa:cb:4f:d0:25:88:9c:8f:f0:c6:
75:02:83:a6:73:99:a9:fc:66:55:dd:a6:95:7a:f9:
ef:f3:39:be:a7:f3:a1:ef:86:be:ef:de:26:42:e4:
89:94:bb:71:b1:f7:4c:6c:f9:50:0a:38:85:75:a6:
7c:51:8c:3f:a5:b9:82:12:52:20:74:b7:f6:3a:44:
09:f4:a0:a9:77:53:97:b0:78:18:84:08:df:a6:56:
5b:5d:be:53:37:df:4c:3a:95:fa:42:cb:95:08:96:
dc:ef:ee:01:a6:42:28:8e:8b:bb:a6:22:4a:cb:bf:
f5:f5:0d:62:75:c1:ff:e4:cc:e1:25:3f:39:c8:28:
e9:ed:65:2c:99:8d:e0:d6:75:2b:8e:0c:84:ee:7c:
8b:0c:4d:ca:e4:72:a1:6e:6d:b0:73:bf:a8:d3:4f:
94:41:ef:d5:ea:6c:19:2c:2d:06:25:4b:d5:22:0f:
7a:6e:f5:fa:cc:6b:96:81:a6:40:3a:aa:c4:ed:07:
1c:a3:92:7f:37:90:31:c5:a4:4a:47:81:86:13:e1:
65:b5:00:85:de:2e:bf:45:0a:1c:43:58:95:80:af:
a8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1D:3C:FC:2E:7A:EE:04:25:1A:71:C3:13:7C:50:C7:03:C0:27:3F
X509v3 Authority Key Identifier:
keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:9d:e0:80:a9:df:ef:46:e4:ff:cd:80:0e:b3:97:59:7a:86:
0e:75:79:50:9b:74:12:c8:a7:ab:6a:20:11:1d:33:3c:c4:63:
06:86:6d:31:79:e0:cd:b4:bc:58:5c:f6:dd:d6:2b:b9:4b:7d:
5e:37:f0:fc:8a:3c:61:fd:f9:45:f3:90:16:98:81:5e:f5:97:
d3:74:dd:98:03:81:5c:29:0a:03:6d:0d:8a:7c:7d:c0:10:d7:
f0:44:1f:74:4b:00:20:55:79:45:b0:c4:5a:02:e0:ed:87:83:
f3:f7:64:bf:da:b6:af:99:56:f0:ab:97:a9:65:47:bf:4c:4a:
25:67:fe:c2:bb:1e:3d:94:da:c7:58:1c:29:ff:08:67:17:9f:
d6:00:4a:2a:bf:c2:bd:d2:6d:d2:6c:9d:3e:65:99:71:fb:49:
eb:8a:ca:4d:26:69:37:af:3e:f0:4e:e0:d5:8a:16:ee:58:4f:
6f:5e:b1:de:31:da:ec:12:81:64:2f:98:ad:64:82:b4:d5:8e:
72:dc:84:d7:14:e4:04:f8:97:1b:72:74:d9:75:9f:60:ed:6e:
5e:e0:bd:75:20:85:99:20:1a:f8:63:a0:16:39:eb:fe:75:b3:
4e:35:09:35:64:50:84:3b:b1:07:09:48:e1:03:af:e6:05:6b:
1f:bc:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:27 2026 by rpki-client