
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier: XREIIXK5PBrMS8a4w3Pp51SQyCujp+cAHfkurhMcjCo=
Subject key identifier: 93:5B:C5:9E:B2:1B:C3:06:F7:D2:BB:53:6E:79:E0:7D:82:E0:72:E2
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial: 0EB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number: 0E8D
Signing time: Tue 28 Jul 2026 17:52:20 +0000
Manifest this update: Tue 28 Jul 2026 17:52:19 +0000
Manifest next update: Tue 04 Aug 2026 17:52:19 +0000
Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: C39uUDera7HAsAOVkJIWISfmfWDlzLfSmfvzEaNXquU=)
2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: MrF9jFzo1gQmp52DvTXmMON/OH1U7O3zoCb/eA1OYLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3761 (0xeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Validity
Not Before: Jul 28 17:52:19 2026 GMT
Not After : Aug 4 17:52:19 2026 GMT
Subject: CN=6a68ec53-664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:19:47:7d:10:b5:bc:06:20:0f:f5:52:cf:
7a:73:73:03:19:2b:c8:e4:25:3a:4f:7d:09:72:64:
49:b0:a1:1c:40:a0:ec:10:20:52:af:cd:ee:1e:85:
82:e3:f6:f4:13:b3:96:20:74:b3:d3:2e:fa:3f:ed:
95:84:bf:d9:a5:ef:ed:6d:3c:8f:7f:05:ff:25:f3:
59:53:db:75:a9:18:98:79:61:97:fc:b8:c3:df:17:
1e:67:4b:c8:cb:0f:7f:bb:ee:c6:a8:08:a5:02:06:
f5:5f:08:24:b9:d9:6b:4c:40:37:9a:bb:00:d0:aa:
c6:47:0a:8c:32:17:84:6f:11:87:9a:c6:e9:7f:9b:
af:18:7e:08:66:92:97:73:43:1b:dc:bf:ea:22:26:
9c:21:be:f1:b7:d9:17:ee:89:e1:d1:51:50:d8:5f:
da:d0:21:41:7b:d8:8f:cd:57:ad:0d:b9:38:75:d0:
fa:70:07:7e:c4:bd:7d:ff:55:de:2f:88:1e:cd:65:
64:2c:d2:e6:2d:46:be:88:7c:3c:68:18:df:b3:1d:
25:39:47:d6:60:83:76:65:08:dc:30:cf:1f:dd:dc:
f3:88:74:9f:44:bb:fb:dc:30:ad:1a:96:00:c0:68:
69:30:60:25:81:c1:5c:51:44:50:81:0e:03:31:71:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5B:C5:9E:B2:1B:C3:06:F7:D2:BB:53:6E:79:E0:7D:82:E0:72:E2
X509v3 Authority Key Identifier:
keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:f5:d2:db:e3:43:7d:40:e5:b7:62:08:fb:38:eb:83:c8:a7:
ea:46:6e:01:b6:72:2e:79:a3:05:71:09:10:79:eb:e0:dd:2f:
63:93:85:53:6b:5d:b3:b3:52:f0:77:df:b7:c9:93:08:39:d8:
ee:71:93:4e:93:f4:cd:03:ce:98:42:ff:64:d3:96:fa:e6:a8:
40:c4:a1:ea:ed:c4:0c:e7:59:fa:17:13:14:7f:27:08:88:aa:
81:20:37:80:3b:4c:ba:df:f4:11:07:82:b3:93:ac:10:ba:53:
b8:69:f4:78:f0:6e:0d:f9:db:f0:9d:51:2f:75:ff:9e:0b:76:
fe:6b:93:0a:77:b6:82:44:13:2e:a8:3d:8a:81:c7:e7:2a:c4:
0c:d3:5d:ee:20:fc:50:ed:70:98:23:19:b9:8f:5c:b9:bd:5a:
dd:cf:50:ee:18:dd:6e:ab:bb:f6:b2:46:e1:d0:bb:0a:96:a9:
00:51:61:36:ae:c6:81:e5:a9:55:0d:3d:cf:1b:bc:1c:5b:5e:
7a:57:aa:6c:ba:c1:68:1b:49:b6:e9:71:74:fb:bc:64:01:40:
70:0c:bd:42:ab:e8:47:af:cc:88:3b:b7:48:cc:c1:ff:10:57:
64:a3:ca:51:ba:bc:23:62:49:97:0c:f7:cb:43:90:12:a7:e2:
6e:ba:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:12 2026 by rpki-client