
$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json)
Hash identifier: WWUHY9LQoRSn/DVVz6FCqKSVVUTSYb7Q2+ZtRmkvpWo=
Subject key identifier: 3A:81:9E:1A:41:25:2F:65:80:04:03:FF:21:8C:3F:2A:99:08:F5:24
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
Manifest number: D0
Signing time: Wed 29 Jul 2026 08:12:05 +0000
Manifest this update: Wed 29 Jul 2026 08:12:04 +0000
Manifest next update: Wed 05 Aug 2026 08:12:04 +0000
Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: gVvt77oJvo0/Tr+cEnyh0vj4XrCQK2QMaoGxuXTDz2U=)
2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: keWoR6Hyq0x5/4XbMYXw5aujAnOEsemIs8ZNPQolFKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Validity
Not Before: Jul 29 08:12:04 2026 GMT
Not After : Aug 5 08:12:04 2026 GMT
Subject: CN=6a69b5d5-55bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:95:02:3c:aa:ec:50:77:aa:15:aa:3b:ec:
5f:7d:85:f7:7e:76:1a:05:8b:8b:51:29:b4:e7:4e:
e4:85:94:8d:65:7a:ad:fe:25:f6:06:2a:53:47:f7:
32:af:59:fa:d5:86:69:c9:0b:9a:f6:7b:ac:db:98:
55:7e:1d:18:0b:b4:12:46:c6:6c:01:4d:51:32:49:
b5:cc:b9:e9:be:b5:b8:54:eb:de:87:f9:c0:2a:f9:
cc:d3:44:02:e6:9a:73:5e:b8:5d:7e:33:4c:9c:b1:
b4:52:62:a9:e8:27:39:fe:0c:61:d4:ce:48:b4:cd:
6b:18:43:c8:1c:b3:59:62:53:4f:f9:97:b1:d0:d5:
8a:f5:05:62:4e:b9:df:0c:50:10:0b:08:59:bf:07:
b8:61:71:19:b4:1b:80:8d:a0:44:06:87:45:57:1c:
72:46:15:c7:5a:3f:f9:72:b6:1c:2b:83:2d:33:35:
57:67:8e:8b:df:58:0e:66:a5:05:dd:9a:e2:92:84:
a1:6f:2c:82:a5:92:f7:aa:8e:a2:81:2e:26:bc:c2:
f4:f2:fd:06:fc:43:2f:94:66:51:0e:84:4f:1b:52:
51:af:2f:ca:76:52:a9:a7:bb:47:e8:6a:61:21:36:
89:80:2c:b1:9d:ff:85:4f:63:86:68:91:58:c3:ea:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:9E:1A:41:25:2F:65:80:04:03:FF:21:8C:3F:2A:99:08:F5:24
X509v3 Authority Key Identifier:
keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:80:27:6a:2b:35:a9:d0:6c:d8:5c:29:67:98:a2:07:9e:9a:
64:54:53:73:59:b2:cb:e8:3a:45:f4:d5:89:f3:65:8c:e8:0e:
3e:ec:e2:f5:da:d0:8e:a4:be:9e:bf:92:4e:33:7d:17:cf:2b:
ea:69:bd:69:5b:de:40:bc:24:a7:ed:0a:18:1b:2f:88:32:51:
e1:c9:52:40:14:8f:3d:2f:c2:75:36:74:d8:d7:66:67:3e:86:
8b:8a:15:f7:ad:c2:0c:41:79:29:4a:84:13:db:29:3c:36:db:
ee:28:9d:21:e2:d8:3c:45:27:92:c5:1f:e3:f2:56:7d:e6:69:
e3:ff:b0:13:25:2d:06:36:f4:f4:ad:f9:d9:7a:b7:e7:7a:dc:
e0:14:9e:1e:5f:27:99:fe:60:50:c9:b1:91:39:4d:56:80:11:
7f:34:08:e5:28:1d:6c:20:15:9d:43:66:9d:d1:2e:55:79:29:
68:4b:d1:88:c0:f3:ca:8a:eb:c9:d6:0f:eb:03:74:eb:cd:34:
d6:da:bc:ee:ce:05:3e:d8:f5:88:80:41:7a:03:6a:00:52:7c:
5c:3e:25:6a:a0:5a:b4:97:22:a6:69:81:b7:f6:ff:6c:f2:fb:
17:ef:80:2a:a8:e8:90:e6:da:7d:f6:d5:a0:01:f3:df:40:21:
89:fe:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:50 2026 by rpki-client