
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: 9qhKADp3PqXG/4C8FwnyhWkIIWY2RVckCt8zmT5wF50=
Subject key identifier: 59:CB:BB:CE:26:AD:29:E0:3D:2A:3C:C0:7E:FC:FB:D1:47:19:AB:29
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1BEB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1BE4
Signing time: Thu 16 Jul 2026 16:17:39 +0000
Manifest this update: Thu 16 Jul 2026 16:17:38 +0000
Manifest next update: Thu 23 Jul 2026 16:17:38 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: w/KgwqUwm/OmoZa+Ef4VZ7gax0FNY4/8V8KZdoup6hA=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7147 (0x1beb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Jul 16 16:17:38 2026 GMT
Not After : Jul 23 16:17:38 2026 GMT
Subject: CN=6a590423-50c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:f6:83:f9:80:78:79:c4:eb:d6:b0:2c:a9:
fe:f6:c0:2e:49:ce:ef:7e:1e:2f:95:00:60:54:b9:
44:5b:45:87:b9:20:69:ca:fe:e1:a2:bc:46:9f:52:
e7:55:3b:cb:ee:6e:56:b3:69:72:b6:2f:dc:4d:dc:
a9:32:d5:d2:08:43:08:35:96:00:c9:44:0b:fc:cb:
d7:d4:1b:b8:b6:e2:ce:5c:e2:30:9b:c9:c8:e4:02:
a1:a7:0f:38:3b:82:bc:65:a3:a1:fc:db:60:85:ab:
4a:c2:53:9c:f0:16:39:60:97:6a:27:86:fa:1e:7d:
5b:b1:0b:e4:41:69:ca:42:23:72:bc:42:9a:a7:d0:
5e:a6:53:83:3d:6f:ed:9f:d4:4c:cf:3e:9a:a1:53:
f8:6d:35:90:0a:08:b1:bd:09:29:5d:df:07:a9:be:
4a:c6:98:9a:54:f9:9c:96:75:54:d7:4b:e8:7d:cd:
27:0e:a9:f8:3a:30:87:24:fb:9e:db:f6:f3:ff:70:
65:6b:a2:9d:5b:a5:fe:15:6e:16:2e:8a:5b:f6:4f:
02:3c:37:25:a2:51:d0:37:50:c5:21:ca:cd:cf:63:
45:e2:89:50:0f:1b:80:79:f4:77:e4:aa:33:87:07:
1a:70:ed:38:08:cc:00:c5:03:fe:b4:30:ab:03:20:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:BB:CE:26:AD:29:E0:3D:2A:3C:C0:7E:FC:FB:D1:47:19:AB:29
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e3:39:51:a1:88:5b:a3:94:6f:5b:d1:2a:4e:0a:00:dd:0d:
88:67:34:87:b9:bc:26:16:93:ca:bf:8b:f7:3e:98:ca:b5:3b:
ce:c0:0b:78:c0:79:cf:4c:fb:6d:05:c0:5e:a5:54:9e:d1:1e:
2b:ee:cc:10:fe:86:5e:85:77:83:2b:05:fd:4c:10:65:db:eb:
26:49:ca:60:ae:72:10:a1:af:8f:55:95:3f:0d:1c:97:4f:f2:
29:37:47:19:c0:a4:c4:27:ca:3c:54:52:ae:eb:b0:ba:91:46:
5c:d1:bd:45:ba:b9:90:dc:b6:d0:40:41:8e:d4:8a:7d:d9:1c:
b0:8d:f8:41:44:56:26:5d:e9:dd:59:59:9d:28:16:b5:b5:d0:
dd:20:41:79:b0:92:62:e0:65:be:00:97:87:c7:07:3b:6f:0c:
9a:17:20:54:fa:a9:0a:86:a7:14:c1:2b:bf:fd:81:90:e6:c1:
e1:59:47:12:2c:d0:91:60:df:1e:84:3c:bd:76:c3:40:7c:4b:
b5:6d:03:63:4c:04:c7:80:01:62:83:23:2d:3b:0d:f3:c6:31:
ea:c7:c0:2f:b1:3b:f2:9a:95:cd:b8:0a:fd:2b:c4:92:aa:29:
27:9b:ad:37:44:94:05:65:eb:04:fe:a3:cf:d7:c3:16:15:41:
be:dc:06:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:55:05 2026 by rpki-client