
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: +eQLb5qihwChBinSh5ZWD3U6zkD5/eZs9D83OTxRhf0=
Subject key identifier: DA:24:28:C2:3B:9F:17:0F:54:33:DF:48:15:4D:1B:C3:94:41:5E:30
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 086F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 0865
Signing time: Sun 26 Jul 2026 21:29:54 +0000
Manifest this update: Sun 26 Jul 2026 21:29:54 +0000
Manifest next update: Sun 02 Aug 2026 21:29:54 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: Zb36yg4ysKfUbR4Asu9KJ/qZ+mfJqaQlXSRhaP1azWU=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159 (0x86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Jul 26 21:29:54 2026 GMT
Not After : Aug 2 21:29:54 2026 GMT
Subject: CN=6a667c52-9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:52:10:6c:25:af:2c:00:4f:b0:4a:b4:f2:
f2:c2:4d:81:71:2a:00:ed:9b:0b:d3:85:b7:f0:94:
a4:28:3b:b2:7f:2b:a6:73:b5:f6:94:da:9c:b4:34:
3f:ac:18:1e:f8:8c:e9:fe:51:3e:a0:df:f2:ef:87:
55:3f:2c:b3:0a:b5:d5:26:70:0e:ea:bb:7d:e4:28:
82:6c:1a:bc:25:75:6d:b4:46:67:22:d8:dc:e0:b2:
53:8f:b8:98:a8:dc:67:b6:78:65:0f:4c:da:9a:c6:
fe:2a:5c:b1:72:6a:59:63:f2:bf:ae:f5:0f:1d:d5:
79:a9:4e:86:3a:78:39:d4:3b:cc:e5:82:d1:8e:0f:
76:a2:9e:39:9f:e6:12:58:1b:c0:91:3d:dd:ed:60:
27:f0:3d:23:be:c5:04:c8:00:30:05:fd:ca:1f:66:
fa:01:41:df:25:70:47:75:2c:3e:3f:2a:00:7e:57:
b1:49:f5:6e:c6:96:d0:c6:9f:1c:56:1d:1f:18:32:
b0:38:95:8f:18:3f:9c:d1:21:ba:d2:ea:b2:c2:94:
f6:ae:b2:53:05:82:93:57:38:62:b8:03:52:09:86:
e4:d6:a4:a7:cc:de:53:7b:54:0c:98:42:4e:50:fa:
14:de:ea:b3:bf:d9:77:95:81:a0:0b:16:83:1b:95:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:28:C2:3B:9F:17:0F:54:33:DF:48:15:4D:1B:C3:94:41:5E:30
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:78:ef:51:4a:fa:a9:96:52:59:6d:54:ba:67:da:0b:cf:e2:
4a:38:ac:90:9b:35:51:1a:be:42:e1:2f:28:9c:77:82:f7:30:
62:86:42:f9:17:31:16:85:be:e4:b3:5b:2a:5d:39:30:06:52:
34:36:c0:7d:fa:f2:4b:9d:04:c3:50:10:f0:66:69:fa:3f:9a:
42:aa:30:06:99:42:75:73:ab:5e:de:8d:bf:97:67:b5:7d:de:
41:97:25:e9:be:e3:f9:5c:9d:85:ea:cb:20:31:ec:35:0e:0b:
48:af:e1:d4:7f:56:db:ab:d7:7c:34:8e:c4:ff:5c:b2:3f:62:
e9:66:6e:85:ff:65:65:6c:56:9d:5b:dd:1d:0f:05:1d:4f:6c:
65:fd:8a:e4:71:6e:0c:e4:9f:3d:3b:24:60:aa:0b:c2:d1:a1:
19:33:23:78:b3:e7:31:dc:9b:b5:0c:dc:2c:f5:ef:80:14:63:
e8:68:cf:19:6b:2d:9b:e4:3f:ef:2b:42:3a:32:a3:a8:ab:38:
f7:e9:78:53:d2:09:f4:a4:2a:4b:4f:26:5f:1d:5d:dc:02:60:
0c:18:fe:68:2e:08:02:8e:79:e1:93:ef:6e:b3:3f:a5:4a:23:
2a:95:b8:4d:31:79:8c:d5:b0:1d:48:fc:53:17:43:23:21:b3:
05:09:c6:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix
QUU1NDQyMzkwHhcNMjYwNzI2MjEyOTU0WhcNMjYwODAyMjEyOTU0WjAYMRYwFAYD
VQQDEw02YTY2N2M1Mi05YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRdSEGwlrywAT7BKtPLywk2BcSoA7ZsL04W38JSkKDuyfyumc7X2lNqctDQ/
rBge+Izp/lE+oN/y74dVPyyzCrXVJnAO6rt95CiCbBq8JXVttEZnItjc4LJTj7iY
qNxntnhlD0zamsb+KlyxcmpZY/K/rvUPHdV5qU6GOng51DvM5YLRjg92op45n+YS
WBvAkT3d7WAn8D0jvsUEyAAwBf3KH2b6AUHfJXBHdSw+PyoAflexSfVuxpbQxp8c
Vh0fGDKwOJWPGD+c0SG60uqywpT2rrJTBYKTVzhiuANSCYbk1qSnzN5Te1QMmEJO
UPoU3uqzv9l3lYGgCxaDG5WWVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNokKMI7
nxcPVDPfSBVNG8OUQV4wMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF
QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM
Y3pidV8zcDZXTXNhNVVRamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlnjvUUr6qZZSWW1UumfaC8/iSjiskJs1URq+QuEvKJx3gvcwYoZC+RcxFoW+
5LNbKl05MAZSNDbAffryS50Ew1AQ8GZp+j+aQqowBplCdXOrXt6Nv5dntX3eQZcl
6b7j+VydherLIDHsNQ4LSK/h1H9W26vXfDSOxP9csj9i6WZuhf9lZWxWnVvdHQ8F
HU9sZf2K5HFuDOSfPTskYKoLwtGhGTMjeLPnMdybtQzcLPXvgBRj6GjPGWstm+Q/
7ytCOjKjqKs49+l4U9IJ9KQqS08mXx1d3AJgDBj+aC4IAo554ZPvbrM/pUojKpW4
TTF5jNWwHUj8UxdDIyGzBQnGmw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:39 2026 by rpki-client