
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier: wMaptdqUMlK5h+0Avv9I2Nv7o1aA8pbXDVQ4MFCUYO4=
Subject key identifier: 56:A8:82:50:A9:0F:30:90:50:C6:D4:D9:2F:DB:EB:DF:F4:74:BB:44
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number: 7F
Signing time: Thu 21 May 2026 07:44:27 +0000
Manifest this update: Thu 21 May 2026 07:44:27 +0000
Manifest next update: Thu 28 May 2026 07:44:27 +0000
Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: ft4uqhGgS41hmyTDoopM1IXLaPiv5eOVZLo0VB3Nbus=)
2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: Irh7MDZvJlnxMvTv5EexT1j1kWXR64vAPEi7R34OcPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Validity
Not Before: May 21 07:44:27 2026 GMT
Not After : May 28 07:44:27 2026 GMT
Subject: CN=6a0eb7db-8892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f6:fe:74:3c:b1:b4:11:51:16:68:b3:f8:73:
c2:1b:b1:0e:d2:7f:d2:cf:b8:fd:55:47:17:87:45:
99:50:92:c5:7d:15:35:28:b0:65:31:bf:48:62:4c:
d9:0e:ed:f3:f4:d9:5b:ea:25:44:4f:fe:cb:f1:00:
5a:84:6c:fd:20:a7:b8:4a:c7:97:f0:60:99:ae:bb:
5a:54:2e:68:c7:9b:a0:69:12:f9:99:02:42:0f:10:
a6:bc:83:63:81:fe:91:5a:06:97:ea:a9:7b:ae:ce:
85:17:b7:e0:22:e4:c8:84:e6:c6:5f:5d:64:09:f0:
0c:f1:cb:01:ba:2e:74:ea:cf:9e:1d:bb:7c:40:85:
95:09:a3:9a:c8:6c:9e:52:d2:f8:ed:7a:63:1e:96:
13:9c:8a:67:3a:51:8d:44:71:2d:32:93:0d:ac:ce:
30:71:a7:ba:84:49:fb:ec:df:27:13:dd:a5:e1:9b:
3a:75:65:03:d3:de:00:37:6e:b0:b2:04:77:c3:a7:
4b:3b:20:e8:00:f2:d3:86:80:b8:8c:69:fd:1e:7c:
e7:97:aa:e2:e0:1e:67:a9:7f:2a:95:ea:d7:2d:1c:
09:1b:bf:18:09:ab:46:da:d9:57:ad:44:26:01:10:
ed:50:a0:5e:b9:5d:da:cd:d5:42:35:2b:f3:cf:ee:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:82:50:A9:0F:30:90:50:C6:D4:D9:2F:DB:EB:DF:F4:74:BB:44
X509v3 Authority Key Identifier:
keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:69:57:95:47:b8:27:c9:1b:39:f0:75:d6:ff:04:80:a9:
2f:f5:35:f6:bc:09:20:5a:9e:c7:4c:07:b8:49:19:f5:03:0a:
c6:40:ec:88:81:9e:33:a5:30:6e:1f:7d:1e:e8:b3:b8:c2:fd:
ee:bd:e8:bb:9e:a7:31:1c:96:29:11:92:52:2e:83:69:5d:3e:
49:32:1d:70:b5:37:e8:ee:66:d5:3d:29:a1:0b:eb:3f:1d:cc:
83:8a:7c:5c:5c:97:67:83:a3:2b:1a:d5:b6:7e:fc:4a:61:b0:
03:af:0e:59:6d:f9:04:52:0e:62:4b:ad:34:e0:8b:8f:ed:87:
cd:32:66:6f:61:78:f4:e6:0b:ff:f7:97:19:31:9f:73:5c:7f:
57:a9:9c:8f:4b:4f:69:99:04:c1:89:70:16:78:ee:81:84:c4:
b5:c6:63:6d:de:ff:3c:8c:1f:98:b2:14:16:ed:03:42:d6:19:
ae:26:d2:94:9a:f9:c6:78:11:96:37:4a:07:3a:28:93:64:38:
d9:9c:ce:5a:3d:cf:10:bf:1d:41:17:bd:ad:f0:9e:7c:90:25:
31:ce:a3:4e:ce:b7:26:cc:27:29:68:5c:df:b1:2c:0d:b2:e7:
d2:8c:2c:4e:6b:95:11:c9:ea:68:7d:a8:4f:bf:d0:aa:dc:6c:
50:46:6d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:58:38 2026 by rpki-client