
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json)
Hash identifier: j5DmdE2SXTZ4KEKwYRCVyDJ/iI6Mcj1NeKKT7RfVqMM=
Subject key identifier: C3:DA:65:58:E2:A8:0B:87:F5:AC:36:B4:37:C1:D9:3E:2D:7A:FA:22
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 3761
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
Manifest number: 366C
Signing time: Tue 28 Jul 2026 14:28:41 +0000
Manifest this update: Tue 28 Jul 2026 14:28:41 +0000
Manifest next update: Tue 04 Aug 2026 14:28:41 +0000
Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: PPnPYACYS2QzsjL9/PLhpaga3N+lNxVHDRWOwcKN/ko=)
2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: mwUwSyXq9hYn9NcVA4KtfCObl3mLHB8zjMVLVpWBk/E=)
3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: ceidhlKu5HDjsUw7jcr2YLL4PSxhocZYikLNU4m7FQc=)
4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: WQPSpMOv8/dEP+Ftx23/DGMKPs2Lbujf5CefihOR5E0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14177 (0x3761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Jul 28 14:28:41 2026 GMT
Not After : Aug 4 14:28:41 2026 GMT
Subject: CN=6a68bc99-6995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:6d:8c:8c:7b:22:5a:3a:5b:21:1f:33:8a:
1c:28:bd:9e:40:c5:0c:fd:9a:0b:f8:9c:b7:f3:13:
48:4c:51:3e:ac:02:bc:5c:d7:df:f9:82:10:4b:07:
50:3d:73:f8:29:50:13:ef:99:2f:82:22:35:0d:44:
2a:5d:4e:f2:ee:f6:6f:f4:16:36:8a:53:41:d2:2d:
39:f5:21:da:c6:05:6e:42:d5:75:ca:a2:07:85:c0:
cf:5b:45:c6:42:a2:89:63:07:06:f0:ac:ed:87:99:
cb:59:cc:8b:a4:ed:5b:54:4f:94:60:e5:8d:fd:54:
1a:5b:2f:9e:6f:aa:47:82:99:8f:d0:bf:23:91:9b:
12:63:82:e9:37:31:46:98:33:1a:48:df:73:c4:af:
0d:7d:2e:c0:41:e5:20:84:5f:18:17:7f:b1:c5:ea:
29:93:32:e0:1a:48:ea:12:55:15:70:36:c6:50:b6:
f6:2d:ff:3f:a2:11:29:aa:1d:70:18:01:f2:17:11:
3a:cc:a5:5d:82:b7:a6:1f:09:7a:46:e6:db:d9:e7:
62:f5:eb:68:7d:61:41:00:21:72:dc:35:38:7e:4f:
06:89:d1:de:a9:0e:0e:5e:76:25:f6:c5:42:51:a1:
25:bb:42:02:d9:46:48:c1:5d:b5:d7:f9:64:96:aa:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:65:58:E2:A8:0B:87:F5:AC:36:B4:37:C1:D9:3E:2D:7A:FA:22
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:60:2c:26:8a:6b:ff:43:48:c6:90:5b:a8:71:b0:92:f5:
97:20:bc:58:76:65:f8:11:8a:97:83:da:b2:48:5f:98:58:12:
27:fd:f7:24:30:64:83:13:99:13:ee:42:45:d6:3d:b3:b6:10:
ae:e4:9f:0a:1c:eb:91:f6:be:1e:26:c8:e9:5c:b0:65:9b:81:
2e:d6:fb:5d:ab:12:f2:c4:5c:66:58:93:bf:06:7b:25:1a:98:
8c:d8:d7:a2:54:f5:f0:f1:c0:a0:8c:e8:34:10:d8:46:b6:61:
89:5e:2e:dc:b2:8a:d2:b7:99:0c:8e:88:e4:5e:c6:8a:58:6e:
5e:59:43:65:ca:f9:f4:8b:01:7e:8b:07:a6:5b:0f:f0:16:36:
19:6c:52:d4:cc:37:4e:8e:14:7a:60:3c:be:be:66:cc:58:06:
4d:23:53:13:30:ac:8a:5d:d9:75:93:6d:e3:93:c3:4c:f3:34:
77:98:2e:56:11:2c:14:aa:ab:87:aa:09:29:5f:13:c6:bc:3f:
5c:a2:3a:3c:32:03:58:d1:7a:c2:cc:b1:f9:b0:4a:3a:b3:b0:
36:86:82:7d:cf:96:ec:75:e0:b7:bf:8a:82:c9:bf:27:6b:b4:
55:d5:fd:2a:0a:4a:c9:a6:cc:ae:e3:7d:88:c7:4a:8b:2f:d4:
ee:30:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:12 2026 by rpki-client