
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: o65yziHTn8D8Foi5/KFpdg/NZ/v5vL1aKvHd/TVfnFU=
Subject key identifier: 8E:2D:B9:9B:91:14:9B:E6:6D:6E:F1:10:55:F0:37:7C:15:0B:37:24
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1BBE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1BB7
Signing time: Sat 18 Apr 2026 16:11:10 +0000
Manifest this update: Sat 18 Apr 2026 16:11:10 +0000
Manifest next update: Sat 25 Apr 2026 16:11:10 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: w3U5BEB2L6P/WCpP6ODS0rFHfy1jFbmbYdZP1kZggE0=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7102 (0x1bbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Apr 18 16:11:10 2026 GMT
Not After : Apr 25 16:11:10 2026 GMT
Subject: CN=69e3ad1e-63f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:a6:07:78:93:28:df:6f:7f:35:c1:5b:f7:
a4:67:02:91:60:27:6d:c2:9c:e8:61:2d:a8:d3:65:
43:d5:6a:c8:b6:ae:56:8f:b3:a0:9f:75:e7:a7:9d:
87:bf:b4:36:34:73:ea:4a:8a:87:e7:4a:40:33:c2:
64:4c:28:97:99:29:64:76:dc:bb:ee:24:3b:82:72:
8c:b0:bd:1a:eb:ba:1e:76:ed:59:63:24:40:0e:54:
1c:9c:f6:05:59:a4:e1:2a:6e:27:1e:dc:95:cc:12:
1a:23:af:91:1a:dc:82:11:6c:e8:1a:74:5d:3b:58:
85:42:90:03:19:91:2f:e3:e8:61:98:3d:52:41:6a:
c9:07:2b:c4:e9:9a:67:1c:ba:86:28:cb:01:b2:17:
24:98:9e:e3:7a:51:c4:20:41:a8:3e:b0:50:37:65:
da:57:e9:18:88:89:4b:d7:71:9b:ef:93:5b:02:56:
d9:96:8e:21:25:90:f5:a4:7f:6b:77:ac:0a:9a:ed:
a4:98:c8:f4:be:ee:04:a6:71:64:03:f1:49:03:f8:
54:bb:d7:92:68:d5:e9:35:cd:df:09:d9:5e:f5:6d:
95:9f:28:c3:6a:e9:73:43:00:7c:08:6d:f4:db:3e:
06:52:19:73:06:76:39:f0:34:fb:8a:2a:27:1a:79:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2D:B9:9B:91:14:9B:E6:6D:6E:F1:10:55:F0:37:7C:15:0B:37:24
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:3f:25:76:18:53:ad:5f:86:40:b6:b1:ff:3e:9f:40:7b:1e:
22:54:b7:1c:21:0b:b2:40:a2:b4:a4:77:83:95:88:0f:81:e3:
29:f5:7c:5e:55:ad:cf:41:32:53:9b:c9:1e:75:3c:5b:a7:aa:
31:64:34:69:d8:ef:28:9e:5e:47:b3:a1:a7:56:10:c2:f8:9f:
c3:23:1a:18:e7:7e:89:97:b9:4e:36:86:04:07:96:15:88:c7:
29:df:e0:30:3e:5a:20:48:46:f8:29:00:e6:ea:2a:e8:75:fe:
1f:09:9f:cf:39:57:d3:57:9a:ec:49:80:5f:62:31:3b:cb:49:
af:fa:5f:ac:72:19:93:20:71:16:1e:f9:ee:12:01:21:09:3b:
40:07:e5:55:fa:55:19:d0:78:5f:bd:4e:d9:26:0c:8a:91:59:
66:89:af:c6:cd:e7:b4:62:f1:78:35:85:a9:fa:91:fd:85:1c:
0b:90:2a:15:36:4c:09:f8:a2:d1:62:77:39:80:8c:e3:02:fc:
61:05:72:94:86:88:e5:c8:18:61:25:3b:63:8c:60:c4:90:67:
04:4f:e7:01:c7:cd:61:07:a9:dc:32:6a:74:44:61:12:55:cf:
ce:a0:75:ce:dd:07:8d:df:cd:55:7e:ee:9e:12:06:30:e2:c7:
6e:fc:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:26:11 2026 by rpki-client