
$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json)
Hash identifier: +vikKYwGOh3Jz7CKQ0pBga5mZWNddXsBOkEoO7802NA=
Subject key identifier: A4:66:16:1C:55:BB:01:6B:FD:36:F5:A8:FE:C2:F4:03:92:DC:15:15
Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
Manifest number: 029E
Signing time: Wed 29 Jul 2026 02:39:10 +0000
Manifest this update: Wed 29 Jul 2026 02:39:10 +0000
Manifest next update: Wed 05 Aug 2026 02:39:10 +0000
Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: SLkWW8qriF0hxFUjPR6bWYmkJb/fVFidQ7NoM1JhtQE=)
2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Validity
Not Before: Jul 29 02:39:10 2026 GMT
Not After : Aug 5 02:39:10 2026 GMT
Subject: CN=6a6967ce-04cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:69:d1:8f:5e:ce:64:bd:ef:94:6a:31:89:
cb:83:71:64:e0:3c:af:82:2e:d7:4c:e0:1b:b5:4a:
ea:c7:c6:2f:6b:b8:ea:c6:d1:f6:49:be:ad:02:94:
72:52:6b:28:d3:90:8e:c0:56:33:4d:87:d8:c6:62:
ca:88:b8:ff:c1:64:53:fb:b7:32:b8:e4:ae:7f:55:
53:d9:83:b0:97:45:65:e6:8c:32:b5:57:e9:fc:28:
67:21:eb:44:76:9b:cc:cb:93:ca:60:d7:48:9e:92:
a2:c8:f1:63:c7:ce:63:fb:3e:c7:a5:ac:68:e2:4d:
28:fc:6f:e6:a3:03:e4:0e:3f:eb:1b:c4:27:9e:79:
17:d1:2d:57:09:4f:d9:50:01:43:ce:b0:4f:30:f0:
23:77:1b:ca:d5:80:71:9b:fc:0f:84:b8:a4:2d:54:
dd:35:ed:c5:e6:9d:96:de:a8:ee:d1:b6:0e:97:1c:
b5:da:4b:60:3d:8b:ab:a7:15:0c:22:ef:24:7d:ca:
70:83:38:98:22:12:08:d0:bd:39:b0:49:ef:6d:4c:
78:96:4b:db:58:ba:2e:f9:ec:dd:85:a0:1e:da:69:
bf:ae:57:4e:0b:fb:07:07:7b:b7:c4:2d:c4:30:2f:
b8:ec:3c:84:59:7e:8c:a7:3a:e7:37:dc:e8:37:43:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:66:16:1C:55:BB:01:6B:FD:36:F5:A8:FE:C2:F4:03:92:DC:15:15
X509v3 Authority Key Identifier:
keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8b:8c:3b:f4:99:8b:cd:90:f3:65:5b:5e:25:bd:aa:e3:af:
41:e9:25:59:29:88:c2:ce:9b:4b:f4:cb:04:5f:11:4d:3d:2f:
e3:86:f9:03:77:fd:d3:47:37:5c:a6:e2:8e:e1:b4:e6:c3:d6:
46:d2:cc:d9:24:7a:04:7c:52:54:aa:52:7d:35:8a:cc:89:c4:
57:c6:ac:b0:52:3a:82:9e:fa:c1:25:b1:8b:f3:c0:82:f0:f0:
54:75:7e:d8:c5:fc:51:a5:ee:0a:39:d0:3d:96:ee:68:7e:e8:
92:c3:6e:36:00:f8:ee:49:dd:02:3a:dc:c9:6f:9d:bc:5b:7e:
60:60:74:a5:1b:bf:5c:dc:c8:a5:e9:91:e5:06:b1:34:17:81:
67:d7:75:f1:3c:77:45:8e:73:2f:93:a1:e8:60:40:82:5e:70:
30:68:ce:59:25:d4:5a:ce:2c:44:cc:14:16:48:f3:b2:83:7d:
a8:ee:df:2d:b4:b5:a8:29:39:4c:53:da:68:1d:f4:d8:26:2c:
cd:8b:dd:92:75:8f:ab:2f:33:13:d4:ae:e5:ae:9a:48:98:24:
37:97:1c:93:16:e7:59:57:92:0c:e3:7a:b3:3e:31:2c:90:7f:
92:89:a4:d7:cd:7d:f2:cb:9d:63:d5:4d:56:b4:34:e1:35:c5:
60:fc:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:57:31 2026 by rpki-client