
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier: /rcCwfQDLiUg+L4xYO/Ou9mtgv28tiYAXY1B0smR1DQ=
Subject key identifier: 15:A7:DD:67:6A:22:6C:D8:37:19:F5:5A:DB:9D:3D:9A:F4:63:42:BA
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number: 01DF
Signing time: Wed 19 Aug 2026 04:06:06 +0000
Manifest this update: Wed 19 Aug 2026 04:06:06 +0000
Manifest next update: Wed 26 Aug 2026 04:06:06 +0000
Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: q+rmDzEwK8NPJKdGl2Zw+JcGDcHcWIX/zGhGODMBXDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 04:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Validity
Not Before: Aug 19 04:06:06 2026 GMT
Not After : Aug 26 04:06:06 2026 GMT
Subject: CN=6a852bae-f59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:94:df:4c:f7:e3:ae:b7:9a:5e:c8:ed:a5:
74:4f:b2:70:d8:3f:36:5f:8b:e9:8f:87:fe:9c:af:
e7:a3:ed:23:2f:79:69:1c:c4:b2:84:e1:8d:2c:63:
fd:18:c5:39:64:34:6b:2c:a2:3d:9a:5c:b4:a8:cb:
53:1e:e3:b2:8f:68:b9:b9:07:6b:25:ea:17:02:ad:
95:74:75:61:f8:ab:fb:77:b5:34:bd:ac:a7:71:ba:
29:80:3f:e0:5e:ee:a9:f1:f6:15:19:87:de:b5:7f:
fa:36:70:0f:65:42:17:5c:20:c2:2a:ca:d9:a7:84:
7e:a5:f1:6f:b9:21:5d:fd:d3:68:06:43:57:0c:00:
b7:4f:5f:c6:14:f7:42:08:59:e9:a0:0d:90:c6:7f:
dc:1e:6d:76:12:66:75:00:41:51:1f:a3:0a:84:14:
af:48:66:f3:8a:25:e3:85:82:88:5a:16:45:29:46:
2f:0e:25:21:c4:b6:b0:31:53:e8:d9:d4:a7:5f:43:
d6:8a:24:ac:c2:03:de:a7:cb:7d:35:9a:7d:f4:dc:
50:93:41:5c:7c:19:2a:af:1a:25:0e:9f:b2:97:fa:
c4:b1:f6:42:80:ad:59:93:6f:b5:35:26:6d:c0:aa:
6a:58:61:a5:8b:c6:9f:00:62:c5:75:82:39:97:2f:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A7:DD:67:6A:22:6C:D8:37:19:F5:5A:DB:9D:3D:9A:F4:63:42:BA
X509v3 Authority Key Identifier:
keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:09:4d:9d:1a:3e:96:ee:29:b9:dc:52:2f:16:5f:a5:c5:7f:
ef:f3:53:cb:dc:a2:cf:2a:66:55:d6:03:4a:2e:4e:c7:6a:68:
6a:0b:f6:f2:fe:74:04:b7:c8:27:ee:a1:72:72:ce:f5:e6:20:
cd:30:bd:a0:c3:d9:f8:20:a1:a8:29:d3:dc:3f:0c:88:e2:66:
55:b6:18:6f:dc:22:a1:00:8b:0d:b7:b5:3f:fa:20:18:ed:26:
4f:2c:f9:8e:3a:0c:19:e6:23:e8:a7:3a:91:70:b6:15:d9:15:
b2:31:0b:90:b2:d7:8d:2b:3a:f8:82:53:41:39:8f:c4:65:54:
90:2d:b3:c5:7b:8e:ae:b4:54:48:62:7d:5c:96:a2:2f:45:e7:
ac:bf:3d:a9:e9:99:b2:e8:ad:2f:0f:70:f3:c1:92:97:27:a5:
74:51:20:e2:07:22:43:20:73:66:c3:eb:44:55:f4:b7:fd:b5:
24:80:6a:a9:51:7c:c7:b7:f9:c5:64:fc:e7:ae:d1:ae:bf:57:
c8:b9:63:83:b7:a7:e3:71:05:e8:02:fd:8c:08:d1:86:19:20:
0a:b0:db:56:58:2c:37:f5:3f:c0:63:c9:2c:e5:54:f6:cb:16:
48:c5:bf:7f:fc:28:88:bd:58:fc:04:dc:d8:1b:b0:48:90:9b:
3d:ae:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:40 2026 by rpki-client