
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
File: qG2L-RW00uHRHYfsP2pwVPETKeg.mft (raw, json)
Hash identifier: SIuwi49qBUd3Sk+9SRYIW3AFhI3OFULElGUk0lv+lvo=
Subject key identifier: 03:B9:48:BE:AD:71:4A:73:D8:CF:23:C9:ED:10:43:54:2F:8C:5D:B1
Authority key identifier: A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8
Certificate issuer: /CN=A918C553/serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
Manifest number: 27
Signing time: Mon 27 Jul 2026 11:10:15 +0000
Manifest this update: Mon 27 Jul 2026 11:10:15 +0000
Manifest next update: Mon 03 Aug 2026 11:10:15 +0000
Files and hashes: 1: qG2L-RW00uHRHYfsP2pwVPETKeg.crl (hash: N06AodXW8t7grgJ1P59Wrzjr/vKYLpIjQh0wYsmFHFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl
rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C553, serialNumber=A86D8BF915B4D2E1D11D87EC3F6A7054F11329E8
Validity
Not Before: Jul 27 11:10:15 2026 GMT
Not After : Aug 3 11:10:15 2026 GMT
Subject: CN=6a673c97-7d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:79:a5:eb:1d:c1:c5:6e:9f:c7:2a:98:a9:
3f:08:e3:ed:11:08:30:cb:47:3d:1e:d4:36:cb:75:
a8:2f:ad:b3:a9:9b:c2:63:25:64:e9:00:55:99:df:
db:b2:9a:ae:e5:b6:5a:79:bf:a3:23:af:78:bd:ac:
8b:dd:03:61:50:39:3e:ee:f1:00:de:2c:38:84:44:
32:1b:c7:9c:c1:bf:f0:2b:87:cb:6d:38:34:b1:00:
be:68:07:4f:51:1a:6b:fe:ec:68:6d:35:c3:57:b7:
47:57:7b:2f:04:68:03:44:f6:ae:12:08:8d:38:d7:
43:a9:ef:1c:ba:21:ee:fd:71:3a:99:d2:60:1b:15:
d5:04:bc:7a:ef:88:29:66:f5:69:00:36:ba:44:e0:
be:96:69:c3:d5:ab:60:54:d1:7c:a6:74:27:f5:17:
94:aa:16:79:ad:b2:84:de:5c:78:5a:7a:b0:a4:ee:
94:24:fc:9f:bc:14:09:44:df:04:62:1f:1f:72:95:
fe:93:79:32:f2:52:0c:88:40:7e:27:f2:21:be:1e:
30:fe:3d:3d:d8:de:c2:42:2b:32:28:57:8b:97:bc:
2e:9b:dd:5c:f8:b5:fa:09:cb:2a:79:40:33:c2:21:
18:63:e1:6c:6b:ae:d1:c2:f4:05:a3:5e:16:e4:48:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B9:48:BE:AD:71:4A:73:D8:CF:23:C9:ED:10:43:54:2F:8C:5D:B1
X509v3 Authority Key Identifier:
keyid:A8:6D:8B:F9:15:B4:D2:E1:D1:1D:87:EC:3F:6A:70:54:F1:13:29:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG2L-RW00uHRHYfsP2pwVPETKeg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C553/096C854A4D5C11F1A1CE7A888F833773/qG2L-RW00uHRHYfsP2pwVPETKeg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:39:a9:38:21:45:a0:16:d0:db:28:c4:7b:56:a0:48:f4:8e:
9b:aa:c7:f5:dc:f2:87:ea:3c:7b:88:2d:bd:83:53:e1:c3:7d:
44:6d:c1:6c:b9:16:43:e2:61:ce:31:d3:d1:cd:d8:9c:e7:da:
0d:1a:03:48:31:f8:2b:7a:3f:96:6b:1b:bc:84:05:a7:d4:db:
c7:0e:15:5f:bc:cc:08:f3:27:93:fd:75:f5:0c:7f:a5:15:36:
bb:d8:cc:48:14:5a:dd:1d:5f:2c:2a:8c:52:d5:9f:e8:e5:28:
72:9b:01:53:0f:3b:e8:27:fb:60:d9:00:2c:bf:13:41:13:c1:
65:db:3d:3d:85:d4:7e:94:02:68:41:da:46:3b:41:a4:3d:1b:
53:4d:11:64:62:3f:0d:6b:63:d3:25:ad:06:f9:3a:b5:29:d3:
e4:57:18:01:45:6a:c7:a5:87:7c:da:70:c2:93:7e:54:04:ac:
4e:9b:17:20:cd:50:28:a2:64:d6:52:8d:be:33:1b:f1:47:6e:
c0:78:66:56:a4:3f:80:34:a5:76:82:d0:22:8e:2b:e2:06:44:
ea:ab:b6:c4:39:f8:4b:54:be:d7:e8:71:e8:bd:7a:9b:9c:4b:
48:76:a6:03:8d:ad:f9:c1:3e:ca:1c:b4:f2:65:f9:0a:bd:87:
2a:6b:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:00:26 2026 by rpki-client