
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: CXDkfeEagTfjEFwg+W3e1vB0GpNozRdG3JRBqVGokUY=
Subject key identifier: 5D:FD:45:C9:AC:85:E9:86:E0:36:27:67:4E:AF:91:9F:F9:65:E0:71
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0E12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0DC4
Signing time: Tue 28 Jul 2026 18:07:57 +0000
Manifest this update: Tue 28 Jul 2026 18:07:56 +0000
Manifest next update: Tue 04 Aug 2026 18:07:56 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: OKrsu4IZlVWnXVcuZ8b/iu1jvIHwnD2A34HmcjscUH4=)
2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WtRbho5g5BDH0VmjD381QM1AFpgUjX2PrH3Z2ld09Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3602 (0xe12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Jul 28 18:07:56 2026 GMT
Not After : Aug 4 18:07:56 2026 GMT
Subject: CN=6a68effd-0c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:37:0e:9b:eb:7b:86:95:31:4f:7f:5c:5f:
b7:25:cf:e6:be:8c:a2:8b:39:e0:dc:39:27:b0:fd:
dc:8b:42:9a:27:4c:b6:b3:2b:72:09:92:72:e0:e8:
8c:5a:5a:d9:f8:4d:9d:c7:08:ee:a8:e2:98:94:a1:
cc:cb:0c:22:92:a0:6b:ba:11:dc:65:b0:93:ac:f3:
e6:64:20:99:fc:5e:41:ae:85:5f:3f:3c:7b:6f:cf:
b3:2c:2e:41:9f:53:d1:d9:d0:50:8b:8e:3a:d4:14:
51:e2:cc:31:e5:6e:f3:9c:67:ac:98:85:6c:af:2a:
48:28:37:a6:4f:e4:f2:f3:13:36:d2:7b:88:a5:32:
1b:ca:e6:81:1f:51:bc:44:4e:f6:5c:67:8d:d8:bd:
05:2a:a2:be:c7:28:aa:6e:26:b5:1e:fc:71:bc:9e:
b1:cc:4c:b3:23:8b:6c:6d:21:56:09:9e:44:2a:0e:
4e:a7:2f:df:e3:8e:87:eb:8d:50:f5:f4:7c:ec:65:
e7:ab:8d:1b:fe:52:37:ba:d3:92:3d:b6:c8:e4:91:
6d:26:18:1b:dd:ab:36:69:34:9d:a9:ae:91:bc:a8:
d6:36:f1:9c:f3:98:b5:53:5b:da:12:ca:65:55:84:
0e:8f:b5:4b:d6:3f:49:16:ce:36:7b:5a:1a:19:c3:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:45:C9:AC:85:E9:86:E0:36:27:67:4E:AF:91:9F:F9:65:E0:71
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:26:0e:ab:66:50:df:eb:a4:79:a4:53:29:5a:73:f2:2c:1c:
89:bc:ea:a0:bf:54:80:ee:97:5f:0b:79:f6:45:f6:38:a3:ca:
f3:9b:f2:04:c7:07:17:dc:e1:23:5d:26:e0:fc:e5:eb:26:c7:
e7:87:33:39:37:64:7b:a2:d1:7c:2a:39:7b:d5:08:4c:48:cd:
1a:b8:7d:a2:d6:0b:df:7f:20:98:0a:d0:0f:af:64:f5:a8:de:
4a:8f:04:2c:d4:45:b3:0a:5c:49:b4:c3:dd:b0:e6:77:55:7c:
b3:f3:fd:86:8b:bf:b7:6b:41:c6:e3:a0:61:dc:62:ac:1b:14:
8d:82:e6:0a:ea:e9:83:7f:27:94:98:d7:12:3f:7e:cd:24:f2:
8e:c3:57:6a:1a:49:2b:36:c9:50:ea:6c:fb:d6:5d:2e:ef:26:
32:67:dd:5e:aa:a8:59:5b:18:c4:1e:68:7c:4c:e5:34:a4:b9:
15:9b:ce:76:17:9f:13:08:8a:81:f7:d4:e2:87:fa:4f:85:6f:
c0:11:fc:2f:b5:04:ac:51:b4:a1:72:40:f6:8d:b1:20:c6:eb:
cb:4b:2b:45:ea:86:84:b7:d9:d4:5e:d7:a7:21:63:64:63:fb:
82:b9:c8:9b:e6:04:fd:5f:da:4b:98:e9:40:16:bd:0b:3e:a8:
e0:38:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:33 2026 by rpki-client