
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json)
Hash identifier: T+UPMCvtkx9w7KQZSYaRjY7I+uF6tqPrJLISwrDrq88=
Subject key identifier: 9B:A3:8C:F1:6D:69:E3:2A:41:25:38:01:84:34:05:D5:F3:70:9E:A4
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
Manifest number: 0132
Signing time: Mon 27 Jul 2026 07:37:57 +0000
Manifest this update: Mon 27 Jul 2026 07:37:57 +0000
Manifest next update: Mon 03 Aug 2026 07:37:57 +0000
Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: mEW+UcjlhE99m4peqBBDAOMRbbMxIFDXDesYt1utUxA=)
2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: aCExDuGa6YujX3JL0arcNyOR8mwam9J29+GY2ZdNl4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Validity
Not Before: Jul 27 07:37:57 2026 GMT
Not After : Aug 3 07:37:57 2026 GMT
Subject: CN=6a670ad5-e6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:62:0e:1b:0f:a7:af:18:1f:3f:da:d7:a5:
b7:70:da:4e:f3:61:ab:5f:39:3f:f7:75:c3:22:ce:
92:ad:47:7f:e6:28:ef:41:9c:8a:be:00:e6:39:54:
61:53:91:fc:7e:02:d3:12:5c:26:f9:74:92:0f:58:
72:86:93:ae:d1:7a:81:c0:1d:2e:0a:55:df:cc:a3:
e4:66:ea:82:84:04:22:04:b8:29:41:2e:cd:19:ca:
3a:2e:29:cf:b9:9c:e1:0b:17:0e:ba:cf:1a:de:4b:
18:30:96:b5:af:1a:a4:06:c7:d6:95:86:8c:46:16:
5c:3e:60:94:06:18:b2:1b:73:b0:68:6e:0e:ca:56:
2f:f1:88:65:47:dc:f0:0a:0a:4f:73:8d:03:08:86:
6f:ec:68:3e:62:4f:e9:a2:4b:94:5c:d0:5e:93:43:
cb:e6:48:9e:1a:5d:61:f5:a2:81:2d:e4:be:ef:14:
34:71:a3:eb:85:ae:12:3c:5d:b9:0e:75:3a:8b:19:
18:4e:4b:b8:b7:2f:f2:9f:2f:2d:81:f9:32:24:e7:
ad:49:4b:f9:35:6d:31:3c:dd:09:75:fd:34:ae:d9:
c7:84:07:86:0a:bf:94:71:53:d6:1c:89:91:b9:b5:
a5:89:30:7a:3d:21:88:2e:32:cc:c3:fb:35:73:68:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:8C:F1:6D:69:E3:2A:41:25:38:01:84:34:05:D5:F3:70:9E:A4
X509v3 Authority Key Identifier:
keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ef:4a:30:45:22:7b:d3:a7:34:fd:d9:70:f0:5a:2f:09:b8:
e0:73:36:8e:e2:31:1b:de:b9:71:27:16:8c:a9:d8:6d:8f:be:
62:8f:cb:b0:18:84:5e:19:38:e8:6a:59:40:65:b3:ea:42:6d:
3a:57:73:35:e1:3b:2c:e9:9b:95:e0:89:76:b5:47:12:df:bd:
3b:12:d9:e3:9e:57:cb:0b:1c:95:fa:4e:c2:48:b8:e7:2a:30:
33:76:03:49:ec:2a:f0:1e:b4:08:8c:38:a4:88:81:ec:0f:f6:
33:c7:4b:bc:80:bb:ea:d9:01:86:bc:83:10:44:87:5d:f4:e3:
67:0e:a0:2e:38:c2:8d:79:89:b0:03:6a:3b:b7:c6:bb:4b:8a:
70:57:4e:9a:b0:26:d5:99:a6:42:6e:57:a0:f6:37:13:03:c7:
38:78:87:a2:26:53:aa:0e:4f:8a:8a:86:2e:0b:7a:23:37:8f:
84:80:75:a1:14:2a:14:5f:be:d2:1c:23:4e:b1:7f:7c:25:46:
01:9a:09:23:7d:de:95:a3:db:1e:5a:17:7b:8f:00:b4:a0:91:
39:96:cd:e5:bc:27:b8:01:86:57:09:3f:fb:52:cd:47:05:fc:
ea:06:4e:e0:bd:76:b3:8e:a8:19:bb:9c:0c:68:25:89:46:0c:
6d:57:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:02:03 2026 by rpki-client