
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: 7hSuTN3ZPaAllhk+yZA/cmHlG9Jm6aXGBi9rvovLy98=
Subject key identifier: 36:FB:0A:49:F1:C0:55:5B:EE:32:AD:7D:3C:F6:FE:0D:80:4A:45:BD
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 088C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 0882
Signing time: Sun 20 Sep 2026 20:42:01 +0000
Manifest this update: Sun 20 Sep 2026 20:42:00 +0000
Manifest next update: Sun 27 Sep 2026 20:42:00 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: uv1w0uomS6lpS9Sh8DVXU3aH5Upw+osZq8U5t9qw2bw=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Sep 20 20:42:00 2026 GMT
Not After : Sep 27 20:42:00 2026 GMT
Subject: CN=6ab04519-ffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:57:0a:80:31:ae:99:3e:b5:b8:b1:01:06:
11:13:26:d8:48:73:0f:3d:73:df:34:83:3d:06:b4:
10:fc:50:74:46:10:9e:9f:bb:ba:bc:0e:d1:3e:6d:
ef:dd:69:6b:71:f5:70:45:77:ad:09:f2:37:b8:57:
aa:d5:63:ed:e2:4b:b4:dd:d5:9a:41:cb:07:ec:85:
13:69:9e:15:cc:8d:df:8f:8e:79:38:8b:63:de:1e:
bc:af:0b:a5:59:c1:8e:f7:cc:c0:3f:01:31:29:f3:
1b:b2:db:e1:ad:4a:d1:14:0b:60:99:d9:f3:f5:d6:
35:58:b6:f2:c2:45:78:98:09:2c:c7:86:b7:02:39:
f6:90:4e:81:f8:bd:45:66:02:0a:20:62:b4:99:9f:
17:ea:dc:50:92:43:ae:0e:96:41:24:e8:40:72:69:
84:b5:0e:17:17:1c:d9:36:b5:33:24:d4:09:eb:92:
26:29:a1:a8:24:d8:60:4d:0b:41:5d:1b:3d:70:cb:
fb:e9:a1:40:7f:fe:af:80:45:6f:e6:38:8d:91:7c:
e5:d4:a0:66:fe:89:d9:d8:42:bf:81:ae:44:23:8b:
93:d0:55:7d:76:e0:89:7a:53:59:d5:b5:1f:21:e6:
b7:95:0b:9b:0b:40:0f:49:46:79:ab:7f:15:82:44:
c6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:0A:49:F1:C0:55:5B:EE:32:AD:7D:3C:F6:FE:0D:80:4A:45:BD
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:aa:28:73:8c:db:3f:cb:35:cf:a0:19:5f:63:eb:1f:9f:2d:
c8:8e:7c:bb:d6:18:19:d5:6d:67:5f:9e:e7:79:25:25:d3:61:
26:7a:7d:70:4f:34:b2:40:5d:dd:86:c6:8f:43:8b:71:59:6c:
1e:b7:e3:8f:44:a4:10:bb:aa:2f:c1:90:e4:56:9e:cf:5d:0a:
63:78:b0:18:e0:bd:0e:8b:fc:0c:f5:c4:d7:ed:f7:64:2c:2d:
c0:3b:42:ae:9c:e8:86:8c:7e:4c:ba:96:11:46:cd:4e:7f:09:
16:c7:7b:e1:12:88:c8:39:da:5a:72:bd:6b:25:b6:72:aa:7a:
a8:e2:aa:43:2c:3c:45:55:a4:21:6d:ca:e9:83:c6:61:f7:27:
ef:3a:07:f8:6e:2e:93:ef:41:55:86:08:9e:25:fa:4f:cd:b0:
ba:71:3a:fb:67:35:65:d1:4d:61:d6:18:26:f9:e1:64:6e:91:
4c:1c:7b:b0:f1:54:cb:09:8b:4e:e2:02:15:af:91:69:30:f7:
dc:46:66:66:44:c4:c0:15:d4:2d:49:61:67:f0:8a:c0:cb:e8:
17:0a:d8:5b:d2:e4:d6:68:13:d7:c5:7d:f6:37:39:a3:3f:3f:
63:fd:c9:8a:02:05:bd:32:74:6e:31:b7:3b:84:08:a7:15:17:
93:ff:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:49:56 2026 by rpki-client