
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File: QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier: dZO0HO8wYPzc4MZPpRuooksJzxo7arNgM07Gl99rSXg=
Subject key identifier: 31:1B:3F:B1:9E:28:B3:95:8D:F4:23:19:D4:E4:05:FF:E8:18:D5:01
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial: 0679
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number: 066F
Signing time: Tue 18 Aug 2026 22:55:30 +0000
Manifest this update: Tue 18 Aug 2026 22:55:30 +0000
Manifest next update: Tue 25 Aug 2026 22:55:30 +0000
Files and hashes: 1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: J0GqHwjl8JTvjSC4jJq/bTCbf1MSO3jimMoU55Irpsw=)
2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: APtBc0Fg5uoB90s7FYUbm7HkOE2poEQup95WnZBKZc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 22:55:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657 (0x679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Validity
Not Before: Aug 18 22:55:30 2026 GMT
Not After : Aug 25 22:55:30 2026 GMT
Subject: CN=6a84e2e2-0f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:58:06:b2:e5:e2:9a:82:3e:7f:c3:3c:64:
b8:c9:ce:02:2d:36:c1:3c:32:29:99:b1:b3:8c:a8:
9c:28:aa:e0:81:06:b8:72:bb:8e:7c:68:be:38:7e:
19:be:98:da:97:ec:f3:a5:a0:d5:da:01:07:6a:e1:
b2:d8:f7:9e:bf:c7:a7:9d:db:4d:ea:8d:34:b9:16:
0b:40:c0:3e:a1:15:80:9a:c6:7a:6b:2e:87:b9:31:
fd:d3:b8:57:09:1b:2e:f0:81:f5:3d:4f:8f:43:10:
1a:45:98:8f:b8:ac:e0:59:95:c7:49:7e:7c:0e:c9:
54:4b:b4:57:33:59:50:fb:e0:83:5f:2d:57:da:b6:
6c:a4:1a:c2:31:a6:da:af:45:f5:02:97:3f:59:ac:
e6:99:99:78:9e:26:76:13:34:c4:b0:4e:67:35:06:
63:97:9c:42:5e:29:7f:27:a1:96:8d:6b:4d:65:2e:
75:14:a1:2a:57:99:1e:08:68:80:4a:cc:1a:d5:ff:
32:9a:e4:5a:3a:45:9e:88:dd:1b:85:58:2c:72:e3:
c0:3e:dc:fc:d1:3d:92:7f:b5:34:9f:6d:c8:2b:c2:
0e:34:86:05:08:84:19:96:ce:23:bc:0b:5e:13:78:
84:69:ec:d4:39:7f:20:77:f9:2d:c9:bc:6e:31:a4:
eb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:3F:B1:9E:28:B3:95:8D:F4:23:19:D4:E4:05:FF:E8:18:D5:01
X509v3 Authority Key Identifier:
keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:2b:4a:9b:70:da:1c:ef:23:6d:fe:73:0d:39:42:ec:93:13:
6c:0d:c6:4d:b9:73:b0:5f:70:e0:14:6d:26:40:ac:5d:f9:2a:
02:e8:aa:be:a8:1e:7b:69:73:d3:08:d4:e1:3d:6a:79:71:8d:
1b:b4:9b:2d:dd:5a:bc:ae:57:4b:d5:28:91:08:6e:61:5f:a4:
7c:ef:2d:24:e2:4b:db:7d:ec:54:02:ca:ad:85:56:3d:99:58:
b6:32:3b:e9:5f:1e:f7:b0:3d:eb:d9:44:93:ff:99:34:ac:e6:
49:79:9c:46:36:ad:42:e3:86:34:ec:fc:41:23:74:60:26:ff:
ad:9a:dd:7e:d3:f3:cd:73:53:a6:6e:11:34:1f:2b:2a:f3:da:
5b:d8:7a:a6:5d:3c:aa:36:11:40:e2:eb:22:6b:2d:4e:4a:56:
93:81:4e:94:ed:0a:b0:d0:06:14:ee:8f:6d:db:2e:6a:9f:eb:
dc:b9:48:d9:6b:ff:90:65:49:01:20:ed:5e:aa:a3:ca:1e:71:
5f:74:c5:ad:dd:39:25:f1:25:73:29:4f:32:39:74:30:de:56:
74:5e:fb:c2:3f:3c:83:db:86:64:89:c5:14:60:2b:4f:f9:11:
78:9d:c6:9b:29:79:8b:dd:3f:d6:c5:b8:33:87:d9:8f:3c:8d:
df:98:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:24 2026 by rpki-client