
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier: JJSjEyl7IIhl7tsc2iK4RFLo6FugvD5tXZUZyNAhvNI=
Subject key identifier: CC:86:5E:C5:42:7E:BF:CE:B4:DD:17:C5:E5:E9:07:9E:E1:01:1E:48
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1CFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number: 1CD4
Signing time: Tue 22 Sep 2026 16:07:26 +0000
Manifest this update: Tue 22 Sep 2026 16:07:25 +0000
Manifest next update: Tue 29 Sep 2026 16:07:25 +0000
Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: 8ajS8bdgZp8yKp29vb2Q3xIG0YIQkKGh1yhU/4WEieE=)
2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: QLCbgoMVS3G9VHYM06+C4WObA6B/KseYMNiE38jKgGw=)
3: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=)
4: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: wBGm4fFHkS0MsUDVoFS2mN9ly3H+yMyEnIGfWIGaVpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7420 (0x1cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Sep 22 16:07:25 2026 GMT
Not After : Sep 29 16:07:25 2026 GMT
Subject: CN=6ab2a7bd-319e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:87:0d:11:66:d1:fe:91:ab:6e:68:25:18:
79:96:1f:8d:a5:82:49:7d:69:ad:0d:f7:f2:a3:5f:
ca:23:8e:83:18:b4:de:74:22:43:95:4b:1b:8a:5d:
a2:9d:24:67:d9:da:af:b5:2c:a6:3b:f2:78:0a:47:
41:d8:eb:e9:e2:ab:16:6e:94:d9:77:b8:17:12:54:
c9:57:42:56:34:7a:15:04:9d:23:2e:28:d8:7f:1b:
3f:ac:77:39:48:36:6b:81:96:e9:53:12:1d:92:d4:
46:37:ee:a4:3e:17:41:8a:e4:db:ad:e1:a7:bf:ca:
3f:14:4c:da:c0:a9:f2:7a:b3:18:55:06:1c:81:e0:
64:a9:da:a9:2b:d4:bd:c6:27:eb:d4:f9:36:31:33:
9f:41:37:7c:18:6b:3e:df:11:7a:bc:cc:73:4f:d3:
0c:21:18:82:e1:42:72:5b:bd:2c:92:45:e7:be:33:
34:f9:c2:96:3c:36:e5:1a:2d:a7:3c:db:a5:97:77:
cf:47:4d:e6:67:cc:16:eb:09:19:fd:95:0d:bc:7f:
5f:4a:bf:21:21:51:6a:54:e8:82:8a:5a:81:9b:9b:
be:c4:a2:57:e5:ae:e6:07:a4:76:02:30:43:e5:b5:
7d:fb:8b:fa:c3:1b:2e:50:fe:2f:5f:d6:7b:80:9b:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:86:5E:C5:42:7E:BF:CE:B4:DD:17:C5:E5:E9:07:9E:E1:01:1E:48
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:0d:85:50:4c:59:f5:44:68:a9:f2:9d:b1:d3:68:bb:65:e4:
3b:92:f4:17:3f:e2:f3:63:74:c4:30:e3:07:24:3e:4f:ab:54:
e6:e0:61:1a:ce:f2:f5:7f:f4:c9:06:e2:62:76:13:42:74:4a:
ee:be:e0:7e:ea:98:4e:14:27:5b:87:86:dd:86:3f:a6:44:54:
23:37:6d:a6:28:45:44:f1:eb:3e:6d:6a:b7:3d:9f:e1:f7:b6:
bf:89:91:23:53:a9:4a:4f:b9:c8:9d:07:f2:11:16:a4:fe:c2:
30:76:c7:89:5f:73:a3:c0:5f:e6:26:b1:3e:02:29:a3:f1:f2:
ca:11:e2:f4:93:1c:8a:59:57:b2:56:11:f9:56:40:b8:ab:de:
9a:ec:e3:5f:c7:6e:78:b2:5f:aa:56:a6:d2:4d:43:9f:9c:f5:
d7:03:2f:95:14:47:d0:e5:fd:28:a0:b2:6b:74:4d:f6:6e:65:
f8:0f:b0:d8:a2:d5:1f:60:ca:b4:d6:e2:dc:f1:15:ef:3c:45:
15:9b:fe:aa:b8:2b:5d:98:a5:f5:b7:35:ce:b8:15:d4:8a:b2:
97:83:80:f2:59:c8:14:91:30:03:b5:7c:d7:0f:62:51:5b:71:
76:ba:6e:b9:04:fc:bf:6f:b5:66:db:c9:1f:42:cf:ba:3d:3e:
52:df:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:41:51 2026 by rpki-client