
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
File: QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft (raw, json)
Hash identifier: G68tE5yTd3iTyOBVreMjyXAaGoBkuPwdAFiwbLjpL9k=
Subject key identifier: B7:6C:71:D5:34:95:63:59:B0:56:B6:DA:F8:C3:85:F2:2B:88:27:FB
Authority key identifier: 40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
Certificate issuer: /CN=A9165C64/serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Certificate serial: 0D6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
Manifest number: 0D58
Signing time: Tue 18 Aug 2026 18:17:43 +0000
Manifest this update: Tue 18 Aug 2026 18:17:42 +0000
Manifest next update: Tue 25 Aug 2026 18:17:42 +0000
Files and hashes: 1: QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl (hash: XHH0oIomZJKEo/89iPzDFmpP88b/XfYUe70VS8qOLkI=)
2: FD9E07EAAB1111EF89574855C4F9AE02.roa (hash: 3bEt+BEL0/++S5Hn6XyvCpw2hPaq5SjA7QhpJ7kxSWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3434 (0xd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165C64, serialNumber=40EBC25A08BA5E7541CE142D2BC28AE4F8288A4B
Validity
Not Before: Aug 18 18:17:42 2026 GMT
Not After : Aug 25 18:17:42 2026 GMT
Subject: CN=6a84a1c7-7b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:d1:89:c5:23:f4:e1:24:c7:23:03:c9:07:
2c:c0:36:c3:ac:b5:1f:ac:c8:a8:2a:90:fc:33:b4:
64:07:26:d3:03:e0:56:e5:e4:ef:d0:8c:1c:1c:15:
8b:9e:a9:a7:1e:2a:9c:05:c8:05:b4:92:1d:88:0b:
1f:1d:52:71:80:58:0b:f2:10:0f:52:34:bd:83:ba:
64:07:6b:9e:16:6e:e7:e7:0d:18:b3:95:d9:46:02:
bc:b9:d3:35:34:6e:0e:e7:23:a5:5e:b1:1e:87:48:
3d:d8:8f:ef:e5:f1:e7:b1:89:6d:e5:fb:d2:8c:1d:
52:c6:7c:8c:fb:1c:8f:1f:ca:56:ab:93:62:1a:0b:
3b:5d:94:9c:4d:d9:64:59:39:c7:9a:69:49:bb:6b:
52:10:f4:78:c8:2e:57:fb:e3:53:ef:f1:33:88:06:
db:66:4f:48:54:6c:cd:77:11:38:84:1c:f8:6f:85:
e6:c6:32:dc:68:b4:7f:82:b9:24:08:c4:ea:c0:1e:
3f:9d:61:aa:d1:44:8a:a5:e6:77:c1:ec:a5:97:2c:
cf:fb:1e:52:a1:11:e7:52:ab:dc:f1:62:8d:93:3c:
26:b6:08:d2:c3:ed:bd:dd:33:db:90:f6:ab:10:6f:
4a:1c:48:38:d7:b8:b0:e4:38:b0:76:8d:5d:09:ff:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6C:71:D5:34:95:63:59:B0:56:B6:DA:F8:C3:85:F2:2B:88:27:FB
X509v3 Authority Key Identifier:
keyid:40:EB:C2:5A:08:BA:5E:75:41:CE:14:2D:2B:C2:8A:E4:F8:28:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOvCWgi6XnVBzhQtK8KK5Pgoiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165C64/425B423CFFA311E98735A685C4F9AE02/QOvCWgi6XnVBzhQtK8KK5Pgoiks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:90:6a:b4:d2:05:44:5f:94:f6:e8:f0:ce:57:af:b7:b0:03:
12:7e:80:ba:7b:b2:e9:75:28:d5:f1:69:9b:d3:a1:15:bb:1f:
f3:5f:ca:02:78:cc:22:bd:8e:d2:b5:dc:ac:65:90:44:3f:b4:
9e:cf:d9:31:14:ea:88:81:30:0c:fd:b2:0b:a1:50:eb:cd:29:
d9:5a:e9:d8:51:c7:14:7e:09:12:f8:27:91:b6:4b:71:3b:24:
8b:49:36:64:8e:8d:f4:bc:ca:b6:32:b7:07:3a:98:25:28:d0:
b7:c6:8c:5b:eb:da:d6:98:5d:4c:b7:32:47:e8:31:c6:7b:97:
52:91:a7:69:62:ff:96:33:da:56:a3:01:e0:1c:22:f5:6e:c3:
b1:0a:44:24:6a:d5:65:88:77:ef:59:f5:0f:14:c6:e5:b5:3a:
37:a0:79:d8:91:94:84:e4:15:45:95:2c:12:99:06:24:ea:60:
c5:c8:4b:2f:ff:4b:f8:62:fe:01:c9:63:65:21:38:f5:37:61:
cb:a0:40:3e:31:e1:1b:c7:94:ea:a5:cd:1d:01:ee:7c:c1:00:
fa:9a:97:02:1f:0f:f9:09:3d:3f:d2:58:28:d0:f8:e7:f6:3c:
15:33:96:15:c0:e6:ca:e6:bc:36:89:b1:77:69:50:6a:6f:53:
8f:98:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:07:46 2026 by rpki-client