
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: cybWF5N0UYR3S50vJPAjzBaNouxmd4py71+TjyzDe9I=
Subject key identifier: 57:B5:0C:2B:AA:F5:1F:8B:71:C3:A3:18:63:22:DE:2B:15:99:A6:73
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1BD5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1BCE
Signing time: Tue 02 Jun 2026 16:15:09 +0000
Manifest this update: Tue 02 Jun 2026 16:15:09 +0000
Manifest next update: Tue 09 Jun 2026 16:15:09 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: GEXgzRckQWhuSEHqg7rx2TgImrUPhqI46A83Fym4pnE=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7125 (0x1bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Jun 2 16:15:09 2026 GMT
Not After : Jun 9 16:15:09 2026 GMT
Subject: CN=6a1f018d-62c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:80:74:db:8f:11:b3:a9:af:75:fc:7e:07:
76:ff:5c:0f:12:4e:04:3e:8a:d4:c9:7a:8d:d4:19:
9b:fd:ad:7a:3f:59:ba:e4:54:57:05:8c:43:6d:e5:
85:79:3f:b3:38:6c:bf:c2:db:4e:ea:57:1f:9e:74:
6f:0c:61:6e:fa:01:0b:c5:d3:1d:06:4a:2c:ca:95:
a7:9c:c1:a8:84:c9:0a:be:f1:38:10:46:ae:09:5e:
88:d6:03:8b:c6:ef:5f:55:84:66:e6:03:25:28:6b:
48:ef:9c:32:7c:a9:ec:f3:02:32:45:dd:aa:73:e2:
28:11:63:0e:32:20:ab:9a:c1:94:1a:32:71:fd:51:
8c:2d:e7:03:8e:13:d9:69:81:c6:1d:9e:49:72:ec:
62:12:eb:72:b9:08:be:6f:d4:06:ca:9b:d0:2a:76:
8b:9b:c0:1d:7f:19:dc:6a:c9:6b:84:f0:19:cc:b8:
ca:11:76:88:c7:a0:e8:8b:ae:ab:94:11:36:f3:c8:
a0:a2:fc:da:f7:b4:22:04:a2:83:bc:94:98:d9:a0:
2e:7a:cf:19:3f:db:74:7d:51:ff:3d:16:53:d1:ee:
cb:c1:8a:00:e1:39:cd:64:ae:16:af:3f:81:82:73:
14:bf:24:bc:15:97:b1:ef:85:49:9a:e7:ee:f2:9c:
70:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:0C:2B:AA:F5:1F:8B:71:C3:A3:18:63:22:DE:2B:15:99:A6:73
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:31:ee:32:56:d9:8b:de:1f:96:0d:9f:c5:5d:78:43:c3:03:
3d:90:cd:70:64:62:38:82:d7:df:94:85:cb:9d:3d:79:4a:26:
f4:a9:8d:47:5e:a8:4c:45:2e:6e:fa:c4:95:82:b9:8c:1c:50:
5e:57:5a:8d:ed:88:88:71:8e:59:79:b9:20:6a:8d:49:55:be:
db:3f:a7:02:78:5e:71:63:3b:8e:5c:60:51:1a:ee:6c:4d:f4:
4a:e6:99:96:6c:98:50:e1:99:30:e5:3e:f3:5f:a8:72:16:c8:
14:46:8d:ac:94:de:88:a3:89:82:42:d6:a7:8c:75:26:35:4e:
08:2b:8c:44:5c:92:7f:c7:62:20:c9:de:9d:3f:cb:38:85:8e:
1a:c0:a5:6d:ab:3a:b0:9c:b1:ea:05:0a:fd:19:8d:cb:5e:39:
ca:12:bd:bf:81:49:5d:3f:c8:9f:59:90:b2:e3:f7:2e:9d:75:
12:40:3a:ed:eb:4a:09:1a:f1:80:14:2f:ab:60:c6:10:b1:91:
42:13:13:8a:d6:c4:3a:aa:13:f2:6e:68:a4:e3:49:c4:71:3c:
7a:bc:b0:48:e3:33:15:af:5c:85:12:f9:3a:03:3d:bb:b7:d5:
08:56:88:dd:d4:13:e3:02:12:82:17:76:c4:8c:52:c1:bf:d1:
e5:5e:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:27 2026 by rpki-client