
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: 3rwarMMzm3b2pZDuCV2XOc2BBGKi4ln3VNeuXzuaF+w=
Subject key identifier: 38:40:F4:75:FF:0E:07:45:E7:9E:7D:03:A0:DB:F2:FB:13:75:30:96
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1C03
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1BFC
Signing time: Mon 31 Aug 2026 16:12:37 +0000
Manifest this update: Mon 31 Aug 2026 16:12:37 +0000
Manifest next update: Mon 07 Sep 2026 16:12:37 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: eQ+ikCb+J8QF0H1WW/sOIdDGUYzswj9F9fC8bcugvl4=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 16:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7171 (0x1c03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Aug 31 16:12:37 2026 GMT
Not After : Sep 7 16:12:37 2026 GMT
Subject: CN=6a95a7f5-8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:7c:6d:0c:16:c8:f2:1f:5b:fc:35:92:65:
0a:23:c5:13:2f:d9:00:f6:69:10:7c:1d:9f:80:8c:
d3:af:da:94:5d:bc:d0:21:86:23:c0:5e:ea:5f:a6:
12:e6:4b:44:d6:c2:cd:e1:b7:5f:59:ad:f5:39:f7:
80:09:8b:ca:2a:36:33:b9:b5:16:d3:d1:21:3b:ab:
57:b6:14:f3:f1:5d:a6:8e:77:06:bf:e0:b7:9b:ff:
46:f9:ba:0e:52:a2:df:b9:3d:c6:38:1b:aa:83:1b:
4f:c4:ce:29:fe:06:52:9d:18:0a:da:05:0a:ea:ca:
1a:f4:2a:09:af:c3:11:bf:be:0d:c1:b8:0a:0a:f8:
ca:79:c1:7b:c3:d4:86:b8:6e:03:38:3e:68:2c:95:
24:a7:06:e0:09:ad:cc:86:c6:f9:72:eb:24:ed:67:
d6:20:8f:98:fd:dc:c9:b9:13:d2:e5:f5:93:9c:85:
fc:fe:0b:69:9a:10:f6:7f:5c:d3:ab:25:25:a8:12:
9a:71:29:4f:e1:16:f6:57:62:ef:c6:19:01:83:e2:
02:18:d6:9b:1f:ef:2f:75:a3:73:a1:3b:06:3d:fe:
07:22:a9:0e:50:40:37:4d:cc:b5:96:aa:0e:f3:eb:
d1:6a:d8:7a:ff:f7:31:0f:1d:37:50:7e:41:a8:ae:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:F4:75:FF:0E:07:45:E7:9E:7D:03:A0:DB:F2:FB:13:75:30:96
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:39:e1:c2:72:92:44:3a:3b:ae:79:35:3b:1a:72:fe:f5:d8:
57:08:91:4d:1f:5e:7c:3d:d0:9e:15:13:f2:2e:1a:be:4b:ec:
da:84:34:77:86:39:a2:62:2c:9a:07:3e:f9:f9:e2:88:6d:e1:
6c:e6:99:35:49:45:d0:c1:97:c7:33:92:6f:fe:a2:c2:8f:2e:
16:8d:66:c0:73:9d:ee:45:cb:3e:53:b5:90:f1:d9:a8:63:5a:
15:14:68:35:c6:4d:59:fa:89:fc:65:c9:4b:51:35:93:0d:2f:
00:7c:77:23:6e:ba:4b:e6:e6:f6:78:8a:09:81:ff:c3:57:cb:
9b:df:35:02:bf:0b:aa:eb:df:a3:77:e2:14:82:d7:4b:1e:b2:
0d:f4:38:e2:52:d8:4d:75:99:e1:0d:b2:2f:8f:a7:48:21:b0:
73:3b:64:fe:03:f6:65:fb:66:01:2e:74:20:aa:c3:50:96:6c:
74:97:c7:52:97:65:f2:3b:52:d8:a3:c5:d7:c8:cd:3e:9d:b1:
2c:ce:20:4b:52:e3:78:37:b4:3c:85:50:87:83:b1:e9:8f:74:
19:cd:f6:cc:47:d8:7e:00:21:21:92:4f:ff:cb:13:97:a3:b5:
ea:e9:a1:83:46:23:d6:c5:80:57:25:95:45:40:1c:2e:76:ed:
c1:b7:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:41:23 2026 by rpki-client