
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier: lWVhqIEDaTFzaA8v9t2lHBS+/oESnC8ekw/Y38kGfOo=
Subject key identifier: 29:D3:8D:12:82:6D:F2:C1:88:AB:DD:EC:64:14:4A:2C:6E:78:42:13
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial: 024D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number: 0248
Signing time: Tue 21 Jul 2026 03:36:52 +0000
Manifest this update: Tue 21 Jul 2026 03:36:51 +0000
Manifest next update: Tue 28 Jul 2026 03:36:51 +0000
Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: XNnbb5El3QQDu7ChbXBjyAwJlkHkYj2VyB9sMngB3ZM=)
2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: zpm4WI/rpoX+PhSp4A1fa7cTi+uUSsWISqGvT07i/hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589 (0x24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Validity
Not Before: Jul 21 03:36:51 2026 GMT
Not After : Jul 28 03:36:51 2026 GMT
Subject: CN=6a5ee954-f262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:2b:b7:85:f6:da:8d:df:e7:e8:56:1b:a6:
6b:ef:8b:4b:e4:f0:c4:6f:26:79:ef:57:24:61:a4:
f7:26:ba:ef:9c:d1:b9:90:2f:9d:32:c5:e7:fc:1a:
1c:ca:1e:c3:87:1f:e7:87:f7:07:00:5c:ed:07:d0:
4e:63:41:8c:b7:2b:56:98:e3:48:47:50:b5:29:58:
00:64:7c:c3:e5:2c:f1:8a:40:c1:d8:86:f0:56:d1:
a5:64:90:dc:24:1e:2d:88:cd:24:36:aa:0f:2b:18:
b6:af:3f:f8:cd:bc:61:4c:24:fd:6d:c3:29:15:b8:
fa:92:28:b4:26:5e:ce:b7:68:d9:d4:03:43:7d:81:
ac:4a:84:44:ea:05:e5:2f:cd:14:ab:01:62:a5:ac:
66:af:32:b3:47:0c:cc:5d:d1:bf:42:e1:7b:03:92:
0c:aa:ed:ac:86:a7:cb:f7:2c:b8:b9:6a:76:81:31:
3c:3d:c7:5e:9e:48:00:4d:e5:b6:4c:58:c3:40:26:
a0:c4:5e:cd:7d:d1:52:9e:04:92:d7:c8:4d:a8:42:
8a:bd:a8:15:62:d8:10:79:7e:96:56:5d:67:85:72:
02:1f:ae:bd:5a:36:54:da:2e:89:86:b5:09:a1:0a:
8e:9f:f4:ae:2e:6e:27:c3:23:5d:40:90:dc:ff:6a:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:8D:12:82:6D:F2:C1:88:AB:DD:EC:64:14:4A:2C:6E:78:42:13
X509v3 Authority Key Identifier:
keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:25:70:fa:f3:f4:4c:eb:f7:3f:db:d6:3a:b2:57:30:77:89:
e0:0f:36:03:be:90:cb:4c:ae:9e:f5:9e:0c:0f:6f:7b:0f:e2:
11:35:90:fc:9e:05:83:62:68:a0:76:13:0a:04:3b:f4:db:f6:
30:c4:66:20:1f:9e:7f:17:1d:8a:54:5a:84:45:2b:09:cd:b0:
5a:04:30:b2:c0:74:87:a1:02:6a:e4:c6:7c:06:f8:da:ac:e3:
49:df:cb:71:51:f3:c1:61:b4:5f:1e:80:87:86:9c:13:f9:a8:
42:d5:af:3d:29:95:64:5f:fa:f2:6b:2e:81:92:41:da:d2:fc:
52:34:67:10:ea:cf:c7:bb:f3:39:f1:78:36:bb:51:c5:0b:55:
6e:78:93:70:9d:37:4b:94:44:f6:9d:85:e9:df:86:46:db:e1:
01:4e:c9:d4:ec:1c:e2:bf:67:63:79:6a:65:02:e0:d6:be:ff:
2a:8e:a5:28:af:0c:a2:3f:fd:41:81:9c:31:fe:c0:4d:f2:3d:
92:3d:07:28:a9:3f:e4:06:91:10:2e:30:ac:d7:13:92:2f:b1:
64:03:8a:20:30:3d:23:66:c5:e4:1b:a9:ce:c0:07:f7:48:b3:
91:ee:f8:b7:05:fd:41:6b:b8:1e:a7:31:27:bd:c9:bc:0c:ba:
26:50:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:50:52 2026 by rpki-client