
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: EOv0X5DGXMUDwcpHCIeWfpCqWHmChj8wXiSVWZ3Tqjs=
Subject key identifier: 13:78:5B:52:52:70:03:CB:E0:11:1E:66:68:16:70:48:C9:8D:8E:47
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 05E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 05D7
Signing time: Tue 28 Jul 2026 23:40:16 +0000
Manifest this update: Tue 28 Jul 2026 23:40:16 +0000
Manifest next update: Tue 04 Aug 2026 23:40:16 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: DJf1cyhX2vpuS+aSGdY1bRjQ8RQnuTlzBBp73OvlvJ8=)
2: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
4: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 23:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1512 (0x5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Jul 28 23:40:16 2026 GMT
Not After : Aug 4 23:40:16 2026 GMT
Subject: CN=6a693de0-2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:82:b0:8b:e4:53:c4:59:30:bb:66:43:ed:
2b:d0:84:ae:6b:59:dc:bd:29:aa:9c:d0:5e:96:31:
02:3d:16:3d:1a:83:dc:70:02:5f:07:16:5f:bd:a5:
f4:c2:69:56:75:7e:10:3d:fa:bc:5e:78:95:1c:c3:
93:30:2c:cf:1a:c4:63:4a:2d:80:13:4e:ad:4b:77:
07:9f:93:da:e4:71:7a:dc:63:56:53:bb:63:07:3e:
6b:b1:68:43:cb:dc:c9:3d:e7:a2:6c:79:ef:c2:7d:
9c:db:45:d3:a8:36:18:c8:3e:36:a2:05:76:6e:ef:
44:ff:18:aa:f0:e3:ab:12:52:92:c2:7c:77:f4:00:
18:f6:97:e9:f5:a2:47:cf:36:1e:22:d2:62:30:b7:
85:62:43:61:85:5a:e6:b0:25:8a:c6:83:19:89:ea:
d5:57:b8:d0:83:61:9c:64:b3:39:18:49:85:97:ab:
1a:36:c9:20:13:58:86:8a:30:89:2c:ce:1f:86:88:
1a:5c:4a:44:17:5f:f1:18:c1:1f:0e:ef:c0:2b:47:
d8:9a:36:b3:5f:dc:ba:f7:40:db:d1:b6:7d:93:e4:
ef:92:e4:5e:f2:47:23:ea:0c:82:7f:ec:c0:3d:e3:
c5:df:15:2b:9a:ee:eb:5c:4f:70:48:25:d8:44:33:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:5B:52:52:70:03:CB:E0:11:1E:66:68:16:70:48:C9:8D:8E:47
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:7c:16:e3:09:d4:68:80:7c:c3:34:6a:f1:1f:79:e8:f3:a5:
04:79:41:54:67:fb:c6:58:3a:a6:b9:a9:6f:29:bc:f0:04:2b:
43:16:73:6b:18:7c:d1:08:93:0a:20:c1:58:cb:54:7b:ca:a5:
15:3d:e0:f9:00:87:cb:ef:a0:c0:0d:36:6b:c4:1a:cb:59:b6:
f2:f0:f9:31:6e:29:45:d5:36:78:cc:95:d0:e8:b2:8c:a0:d6:
3f:31:37:d1:7b:c1:42:8f:94:e8:5a:fb:4f:fb:ca:62:71:e9:
f0:38:d5:01:ea:77:f7:64:ab:a2:10:f0:73:65:05:c2:4a:17:
14:11:b5:e4:c5:2c:65:c6:fd:d4:f3:f4:8f:b2:0b:30:78:89:
13:fd:28:75:03:13:a0:a2:e7:d3:a1:02:b0:3c:fe:77:bd:18:
0a:eb:d4:c6:da:94:7f:61:4e:f6:42:03:b2:0a:c0:8e:2f:09:
55:1d:05:43:89:83:33:b7:52:a2:bf:2f:10:ec:69:49:5d:16:
e7:22:50:12:8d:8b:4e:65:77:64:8c:88:df:da:17:dc:74:6b:
34:e9:05:3a:c4:4c:86:73:7d:2f:85:ed:98:43:37:1b:2a:96:
60:5d:5c:5d:72:01:4a:cf:ff:46:89:64:5d:0a:c3:0f:3b:7c:
f4:c9:b5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:46 2026 by rpki-client