
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier: b7i/ygJqko6wNlhGwuoUoLVpkCM58Io4RtXC+4BSzjA=
Subject key identifier: A5:0E:E0:95:C1:9A:C3:0A:D6:A9:44:67:01:76:C9:24:75:62:B7:44
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial: 0D50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number: 0D25
Signing time: Tue 28 Jul 2026 18:32:12 +0000
Manifest this update: Tue 28 Jul 2026 18:32:11 +0000
Manifest next update: Tue 04 Aug 2026 18:32:11 +0000
Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: U4tnYyTaKkIOpXmzRyBpzVdB8QYKu/r1lvkvTPQGBCI=)
2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: fs8vNdHPTeEjIkaHFCo8i9QI5xttWL2wCiA1UOJja1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3408 (0xd50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Validity
Not Before: Jul 28 18:32:11 2026 GMT
Not After : Aug 4 18:32:11 2026 GMT
Subject: CN=6a68f5ac-2bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:c4:d0:db:29:9d:70:5e:90:a7:f2:af:eb:
4e:e3:61:33:88:c2:c3:9f:29:40:fa:42:2d:04:5c:
76:7a:74:45:d8:43:0e:e2:76:26:e9:48:7e:9c:5b:
8c:47:7b:9d:55:de:f8:c5:0e:86:69:49:8d:0e:f3:
5f:c9:3e:47:1b:63:27:d3:18:ca:e8:f4:d4:bd:e0:
76:e3:7c:52:a8:54:99:b5:79:a1:3a:7d:39:02:e5:
d2:c6:28:b7:70:13:52:94:8e:3f:46:79:8f:5a:03:
20:9c:ce:81:9f:79:47:24:cb:cb:12:00:81:0d:fe:
2e:18:3c:a6:b2:ca:e1:7d:71:8f:88:ea:90:fa:44:
6e:60:80:a3:db:f0:c7:41:0b:b2:ee:b3:f9:d2:72:
0e:20:7c:3e:4a:f9:92:96:df:0c:28:17:40:dd:e8:
41:d5:03:91:0f:da:01:41:e2:56:38:4b:01:f9:74:
0a:4b:a9:8f:29:c8:17:60:e1:cf:75:cc:58:f1:76:
c1:b2:5d:cb:ae:7a:d8:4c:83:6a:71:c9:11:94:c7:
3c:c6:65:4a:f8:be:35:f6:d5:11:e0:02:3f:a7:db:
a0:b6:f2:8f:e0:f1:ea:39:9a:4b:3f:8f:cf:1e:87:
cc:76:fd:6c:ce:5a:08:45:d2:05:1b:87:d5:4a:9c:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0E:E0:95:C1:9A:C3:0A:D6:A9:44:67:01:76:C9:24:75:62:B7:44
X509v3 Authority Key Identifier:
keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:e5:40:fe:b9:d9:d7:85:79:68:55:41:63:6c:f2:55:02:15:
5f:3d:e0:05:88:3f:a2:c0:6e:76:95:e6:9a:a3:9f:f4:36:c3:
8a:47:21:0b:19:10:b2:84:b2:17:ce:1b:1a:64:58:98:be:68:
84:70:e1:05:23:89:38:69:80:a9:67:00:8b:80:4a:e4:48:d8:
13:29:80:ae:6c:2d:dd:c5:c9:9c:5a:26:32:55:2a:05:27:40:
26:37:e3:f1:6e:14:f5:be:2b:24:62:e2:aa:d9:83:bd:c5:48:
d8:8b:15:71:9b:97:65:0e:19:c2:bb:51:f3:c7:04:2b:8d:c1:
1b:89:75:2c:fe:6c:5b:85:20:9e:8e:77:c4:a6:47:05:37:6f:
0d:80:bd:06:ca:e4:ae:05:21:79:04:4d:27:d3:e5:66:0b:ca:
5a:68:7a:85:34:a0:c4:99:26:4a:66:1c:45:dc:24:90:7a:44:
10:32:a6:e4:80:63:2b:5d:3c:c4:c7:64:26:76:e6:89:45:2b:
24:af:9e:1e:91:b1:2f:08:a1:54:d4:a4:63:f1:b7:41:d4:04:
1c:78:c7:0d:c6:6e:2c:07:e7:3e:29:ff:0b:e1:d5:30:54:4f:
01:e7:73:86:a4:a2:87:ed:63:e4:1d:1f:a6:92:39:d9:d1:51:
d9:f9:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:19:49 2026 by rpki-client