
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json)
Hash identifier: KyOEKXVwdf4y2iNgtW3XpZDz92GtjDg3Qz84QqdaQUY=
Subject key identifier: F3:86:BA:97:2C:25:B8:88:62:9B:57:95:25:23:A2:2B:98:44:AB:84
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial: 2887
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
Manifest number: 2874
Signing time: Mon 22 Jun 2026 15:35:32 +0000
Manifest this update: Mon 22 Jun 2026 15:35:31 +0000
Manifest next update: Mon 29 Jun 2026 15:35:31 +0000
Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: lb2xHx6/+bIc8kyi/eoWSIp2SvS3xvZwH+LeTtfny10=)
2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: LPyaDve5O9/4WQe5jKoSjlWttPY7ojSlNyw4xX1idoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10375 (0x2887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Validity
Not Before: Jun 22 15:35:31 2026 GMT
Not After : Jun 29 15:35:31 2026 GMT
Subject: CN=6a395644-184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:22:ee:76:56:81:e2:1c:20:42:2d:6d:6a:
9e:26:ec:5f:6c:12:d0:2c:b8:ba:ac:50:e4:a4:34:
f7:f8:88:d8:d0:ce:2b:f5:4b:92:2e:95:c5:dd:ef:
24:cf:48:fb:64:af:5d:0a:16:b1:db:04:18:ab:fc:
87:01:9c:da:f0:60:9e:4c:63:29:de:17:b4:57:8f:
83:ec:a1:05:7e:18:bd:67:bb:9c:cb:b2:19:26:a9:
94:95:9e:28:b5:fd:93:69:28:79:17:44:b8:a7:16:
9d:e7:7a:7d:22:81:1a:e0:94:e6:3e:4c:6d:4e:77:
44:75:8c:ef:bf:33:b1:f1:e0:ed:aa:69:93:54:39:
f6:6c:87:d5:5b:bd:35:76:70:2d:99:8d:09:16:0b:
36:b3:87:7d:9f:96:68:a0:6b:0e:f5:ad:5d:58:88:
07:55:f0:fe:41:7d:38:cb:53:47:c0:9a:7d:cc:f1:
a1:ca:e8:12:30:e1:95:91:18:0f:9e:5c:01:2d:51:
29:76:72:76:c5:7c:d6:f4:57:88:f4:4b:59:16:ce:
8c:c5:09:0d:22:86:06:54:45:56:4a:99:99:a1:76:
0f:2d:4f:94:ac:3d:67:0b:47:b4:ad:4e:0d:fc:db:
0d:df:63:17:1e:1d:bb:09:53:1d:bd:9c:f8:1f:f9:
44:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:BA:97:2C:25:B8:88:62:9B:57:95:25:23:A2:2B:98:44:AB:84
X509v3 Authority Key Identifier:
keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:9f:c5:27:71:e8:a5:2a:25:68:83:87:85:a0:bb:3a:6a:
1d:6c:75:8f:d4:da:6e:49:40:6f:42:01:37:86:fa:0d:f7:23:
30:e7:3f:91:1f:89:53:5b:57:19:45:d0:ad:35:d0:0b:3e:f6:
70:64:0b:a4:c6:31:ba:ec:df:71:79:a3:cf:39:1f:e5:fb:49:
df:09:7c:c7:f8:f0:d7:7c:7b:a6:9b:6d:79:c6:26:29:ca:b2:
ad:a9:d2:f0:85:e1:05:43:ea:c4:a1:af:25:b5:d3:8c:b1:01:
57:6a:bd:a2:9c:b0:48:2c:25:de:d0:21:20:bd:3c:4c:d6:0b:
c2:a3:59:e5:b9:62:b5:f0:78:48:81:2b:4f:f2:49:3d:1d:59:
b9:18:36:6d:5a:bb:81:9c:3b:61:5a:58:e2:a1:08:de:51:54:
50:06:dc:b5:50:cd:03:45:da:16:9e:7e:7c:4e:35:1b:91:b7:
9b:12:1a:8a:50:3d:f8:11:d3:6a:da:e6:0a:d4:43:e0:52:b6:
f0:36:7c:91:2c:d6:74:02:5a:1a:11:38:80:57:86:0b:56:c4:
d5:3f:b1:17:5b:26:6f:ee:7d:7d:88:1d:c8:55:c8:7d:fb:0b:
79:ac:15:ba:24:73:2b:36:57:a6:63:07:05:8f:a0:1a:fe:81:
2a:33:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:12 2026 by rpki-client