
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier: z8LHBQ4lH6a6KExyGhGLCwPTtd48DsW+WfUkw6TXYOI=
Subject key identifier: 87:8F:E4:8A:B3:30:93:AE:69:EF:4D:40:A3:74:A7:9B:34:3F:4D:8D
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1CDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number: 1CB7
Signing time: Tue 28 Jul 2026 16:16:46 +0000
Manifest this update: Tue 28 Jul 2026 16:16:45 +0000
Manifest next update: Tue 04 Aug 2026 16:16:45 +0000
Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: FRfwg/b9GtQzPyD4NgZDHzS5nOAGgbFP0hRAMTcWHGI=)
2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=)
3: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: QLCbgoMVS3G9VHYM06+C4WObA6B/KseYMNiE38jKgGw=)
4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: wBGm4fFHkS0MsUDVoFS2mN9ly3H+yMyEnIGfWIGaVpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7391 (0x1cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Jul 28 16:16:45 2026 GMT
Not After : Aug 4 16:16:45 2026 GMT
Subject: CN=6a68d5ed-419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:93:e9:78:7e:b9:bd:a4:ec:f1:55:23:5c:
90:73:bb:8c:c1:4f:bd:f9:6c:a0:49:55:0c:38:f3:
d0:35:77:d4:0f:d1:f5:46:d1:d5:36:c0:b6:97:64:
2f:bc:fb:13:72:e6:fc:dc:10:35:d5:75:67:23:4d:
44:f2:ff:f0:01:f4:8e:87:b0:19:96:16:57:16:6c:
da:59:88:22:bc:33:15:1e:2d:f5:8a:44:89:03:91:
e5:f1:88:54:e1:46:5c:3a:2a:18:a9:2d:d8:b6:1c:
8d:84:f8:27:c4:9b:95:52:23:99:23:e4:16:85:02:
c5:6f:99:c0:0e:5d:c8:28:02:5c:1a:d8:c8:78:66:
8c:6c:78:28:49:9f:bf:56:57:51:f3:c9:a3:83:46:
5f:d3:30:44:bd:86:e0:db:1a:ef:29:7b:d5:8a:5f:
38:80:1a:72:58:ac:d5:8f:70:03:51:71:2c:9f:7f:
4b:1b:fc:17:40:b7:f9:cb:68:eb:c8:60:1b:6a:6e:
ea:62:22:42:3a:eb:b4:6c:4e:38:82:38:ce:04:84:
42:d9:ba:81:d8:1d:c7:40:05:54:d1:d1:9c:e9:8a:
d6:70:37:d1:9a:7a:41:74:e9:ef:16:24:c0:51:ed:
9f:96:c1:8a:73:7c:47:1c:d3:bb:b1:b9:dc:08:51:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:E4:8A:B3:30:93:AE:69:EF:4D:40:A3:74:A7:9B:34:3F:4D:8D
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:7e:34:ff:86:97:bd:58:ff:ca:d1:d9:17:b1:a5:85:32:88:
88:5f:8d:4e:27:a3:4b:21:4b:9d:5f:fb:a0:86:0a:0d:7f:fc:
78:ea:fd:cf:52:99:87:f4:0d:8a:ed:94:8a:3c:83:a9:8e:cc:
80:0b:92:2a:55:75:89:9b:7c:3b:fd:ff:56:e1:d1:ce:e0:12:
a6:db:6a:33:59:2b:1f:64:7f:8d:30:5a:ff:42:37:56:6c:f5:
1b:d5:08:0c:82:22:51:83:11:2c:27:59:27:da:20:f0:e8:e4:
33:92:f3:86:9e:3b:e3:43:5d:8c:07:13:bb:55:b2:f4:75:7c:
1f:a8:28:62:bc:b1:01:f8:c5:48:f5:fd:a0:5e:8e:54:67:3a:
bb:13:7b:9b:30:b4:dc:e1:ba:4f:bc:c5:05:db:9e:28:91:bb:
e0:94:21:0f:17:5a:ea:eb:1a:d3:86:0b:ba:27:b1:8c:ea:03:
ad:a4:bc:6d:1e:b0:96:51:6c:15:f0:b0:88:cc:d5:74:d3:e0:
f7:39:09:1c:92:df:01:46:a8:33:49:6f:02:75:46:dd:ce:60:
1d:ab:60:c7:42:bd:20:cf:53:e5:cb:93:fe:59:8f:5c:32:f5:
c5:21:f9:2f:2e:10:2d:e3:d6:07:67:7d:78:6c:05:99:3f:59:
6a:3d:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:11:32 2026 by rpki-client