
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json)
Hash identifier: 87IoQcF/4XboJgCWEwAwj9DgdSPOlpDMjyZ6WByfHIo=
Subject key identifier: EE:59:96:58:C6:40:E5:9B:B1:BF:7D:3D:C5:F5:DF:78:23:C0:DF:B8
Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Certificate serial: 0174
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
Manifest number: 015F
Signing time: Mon 27 Jul 2026 06:56:31 +0000
Manifest this update: Mon 27 Jul 2026 06:56:31 +0000
Manifest next update: Mon 03 Aug 2026 06:56:31 +0000
Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: 8iLg1lNiSOsBMctQn8hs7lHKz8/lLuFWofbAjuP175c=)
2: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=)
3: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=)
4: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Validity
Not Before: Jul 27 06:56:31 2026 GMT
Not After : Aug 3 06:56:31 2026 GMT
Subject: CN=6a67011f-f96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:74:3a:a0:0a:a1:a0:d5:c4:be:f0:a8:2c:
49:bd:db:7f:99:81:49:c8:16:7c:09:88:f3:d0:2a:
95:92:bb:8a:bc:56:3a:db:4c:0c:2f:3e:c8:2d:ef:
4b:62:e1:91:9c:7f:ad:37:d7:ce:d6:23:30:1c:6c:
76:0e:27:3d:8c:c0:f7:0e:1e:04:3b:67:8b:8c:93:
f5:29:a8:3f:71:7c:b0:2b:5f:6a:49:f1:62:62:11:
0d:4e:58:b4:f0:d8:e5:12:15:55:57:e8:c0:00:f6:
62:a5:d0:03:90:03:b6:28:33:e5:c4:be:5a:cd:46:
24:78:ff:c9:31:5d:65:be:85:27:b5:e1:a0:9a:e5:
3c:ac:c2:71:6f:38:f4:2f:1b:65:63:c9:46:ff:5c:
84:e6:66:f9:06:e4:ab:06:d6:92:1e:87:04:f7:94:
cd:36:93:08:95:fa:bf:74:64:8b:11:01:f0:37:8a:
b0:4d:32:0c:ea:03:64:b5:38:cc:0e:dc:e3:a8:5f:
93:b7:69:8d:b6:d6:37:d2:c6:df:4f:6c:d6:f9:b7:
31:f7:43:38:94:20:fd:b8:da:39:f7:53:85:64:72:
d4:03:b3:2e:6e:be:79:ff:5c:0f:89:27:25:2a:1d:
8a:df:db:26:78:f2:d5:32:16:3f:06:ad:64:7e:16:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:59:96:58:C6:40:E5:9B:B1:BF:7D:3D:C5:F5:DF:78:23:C0:DF:B8
X509v3 Authority Key Identifier:
keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:59:b7:2c:f6:86:26:96:4f:59:f6:f8:a1:66:3c:09:57:e5:
78:1b:d2:80:f4:d1:1a:ac:55:6d:ac:2f:76:b6:f1:e2:51:d9:
ef:1e:b5:17:f7:ce:9d:f6:74:7e:86:aa:2f:5e:4d:f1:69:05:
81:7d:03:5a:44:f8:e8:1a:4d:96:c2:0b:51:d4:2c:f0:48:ed:
db:9d:cd:63:8a:9b:2a:65:8c:12:22:3e:c0:25:a1:40:15:22:
89:e4:37:8f:2d:b9:35:3d:97:1a:0c:ca:35:01:22:3d:d9:5c:
f4:d9:bc:18:d0:e1:03:51:a4:70:7e:05:d6:9b:fd:3d:ac:4f:
cc:48:aa:a7:52:cc:aa:33:b1:37:14:b2:2b:38:6e:a9:0b:4a:
65:99:5f:f8:ab:79:b2:6a:23:60:cb:3e:f8:05:91:dc:7b:6b:
9c:41:54:ae:45:fb:35:40:49:a8:ce:c9:1c:40:a6:b0:cc:d5:
04:9a:e6:c4:97:fb:80:66:08:94:64:3e:45:10:26:c0:77:eb:
e5:63:d0:80:1b:64:c0:4d:9b:a1:c8:dd:18:bd:03:6c:c4:06:
b2:75:6d:9c:ec:86:5e:4a:6a:44:ae:5f:4b:c3:b9:4d:3b:c5:
d2:89:b1:9d:ce:5d:8c:2d:be:b7:94:12:af:6f:3b:62:ff:d1:
ed:13:10:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:10:39 2026 by rpki-client