
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
File: QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json)
Hash identifier: 8UF2V1w9htbGEAzlzvDPEgcOyGNgdLpgJhyAHY2r5nk=
Subject key identifier: 65:44:06:DE:3A:59:06:B1:D9:59:10:DC:41:F6:0A:75:4D:46:52:16
Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
Certificate issuer: /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Certificate serial: 0299
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
Manifest number: 0292
Signing time: Mon 27 Jul 2026 03:07:07 +0000
Manifest this update: Mon 27 Jul 2026 03:07:06 +0000
Manifest next update: Mon 03 Aug 2026 03:07:06 +0000
Files and hashes: 1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: AqaiQXIgYsvBIhVhP7I0/A+cPOdKoN2wdCyhdnxB0WQ=)
2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: a1ihaW44y7pPngH9tloHWvGy8yxGeQDZAFa7vmcwPNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Validity
Not Before: Jul 27 03:07:06 2026 GMT
Not After : Aug 3 03:07:06 2026 GMT
Subject: CN=6a66cb5b-79a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a3:8c:60:00:86:41:a8:f0:f9:3f:0e:22:11:
d4:0e:ac:e4:bf:63:e2:d2:ac:66:f0:ee:6c:d5:fc:
35:8c:eb:6a:13:cc:30:d3:dd:6d:5e:60:f6:b4:1b:
5d:5f:97:ab:ca:86:e0:8d:56:e2:cf:d5:71:b9:24:
e6:dd:e1:82:cf:24:6b:fe:03:ab:72:49:99:82:fe:
93:b3:ec:9d:60:f9:0c:4d:d5:3e:be:0f:53:29:16:
8d:35:da:19:57:77:4e:fe:13:79:e6:3a:79:06:c0:
04:8c:80:df:a6:86:44:7d:10:1c:8c:27:87:23:44:
f7:68:42:7d:95:7f:b4:e0:96:85:81:88:88:09:72:
45:b9:2f:95:47:a1:4b:3b:c8:fc:49:11:17:8c:a5:
5d:c2:cc:51:95:2a:65:14:5f:68:80:08:9d:b2:3f:
95:eb:f0:39:69:d2:99:26:22:19:d4:8f:a0:af:d5:
18:46:d3:0a:53:34:22:43:6c:dc:2a:03:f7:93:a6:
2c:9b:51:87:ad:d3:bd:3e:03:40:05:43:23:0f:65:
0f:29:4b:20:3d:9b:af:c5:f1:8e:0f:2d:6a:54:af:
de:f5:d8:9d:d3:dc:f5:5a:f6:2e:83:41:75:e9:16:
4f:51:8a:02:16:36:1b:1b:38:9e:33:fd:72:74:c5:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:06:DE:3A:59:06:B1:D9:59:10:DC:41:F6:0A:75:4D:46:52:16
X509v3 Authority Key Identifier:
keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:b2:f4:11:e1:ea:de:c1:49:6e:ed:3a:79:6b:fa:77:5c:
24:2a:1c:15:b9:47:b9:41:30:f9:42:61:df:f6:5b:20:7c:60:
93:ad:03:b3:fe:72:b8:08:3a:86:07:57:af:31:a2:38:ca:e4:
27:d3:b7:cd:4c:92:69:67:ee:52:d3:96:4c:fa:fa:c3:a6:43:
8f:77:e5:29:77:e7:2f:e8:3f:f1:20:60:f2:f3:ea:43:37:3d:
ab:25:58:4e:de:55:73:d0:01:27:cb:e2:9e:6b:e6:19:77:18:
d2:54:b8:28:27:d2:5c:b5:28:93:31:49:82:44:cc:12:96:9f:
05:37:97:78:8c:46:d1:b4:4b:9f:0f:f8:fb:6b:00:bc:d5:bc:
95:47:be:ae:8b:0e:4d:a8:33:ab:07:11:bd:ba:bb:d3:fc:11:
b4:50:94:76:5a:bb:8a:3d:74:64:fc:3f:a0:49:37:b5:1c:c4:
04:3f:97:c3:25:25:a7:c4:ce:39:c6:ba:5c:f0:43:b6:42:ca:
65:f2:57:a5:a0:8f:83:13:4c:18:1d:32:1d:8f:a6:f1:8e:2d:
0d:f1:47:2c:64:db:2c:1b:6a:d8:9b:50:3a:78:ba:c9:5d:03:
80:23:a9:2d:4a:f8:bf:31:8f:ad:14:2b:a9:d3:62:45:64:2e:
12:52:de:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:51 2026 by rpki-client