
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
File: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft (raw, json)
Hash identifier: 9N0L/Ks3F5czRjmvAO/g/UzNmJI1zFtWVxRUuOPEnBE=
Subject key identifier: 26:D0:CA:B5:14:7D:41:98:93:9B:73:06:F9:9B:DD:D7:A9:5C:E5:CF
Authority key identifier: AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84
Certificate issuer: /CN=A916DFDD/serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
Manifest number: DE
Signing time: Wed 19 Aug 2026 07:15:34 +0000
Manifest this update: Wed 19 Aug 2026 07:15:34 +0000
Manifest next update: Wed 26 Aug 2026 07:15:34 +0000
Files and hashes: 1: qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl (hash: 2H+6g4sIVmEx2VAyymhoq4gDEb90Cx2dbGK6+POpBL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl
rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:15:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DFDD, serialNumber=AA2CAF4E4F16ABB339C1E5D0F059F413AE5CE884
Validity
Not Before: Aug 19 07:15:34 2026 GMT
Not After : Aug 26 07:15:34 2026 GMT
Subject: CN=6a855816-c3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:1d:37:b7:2a:84:2b:82:bc:9f:c6:e5:20:
35:98:f2:97:78:9b:b9:7a:84:98:76:00:ef:35:77:
05:91:f8:72:4d:d8:6d:b1:a7:26:41:61:cb:82:be:
09:e5:c6:03:cf:40:6d:f7:99:81:0a:a6:cc:66:8f:
aa:9d:3b:90:67:88:de:f5:42:c1:5f:98:8e:66:32:
7b:44:9d:f9:a1:75:77:31:cb:60:57:ef:ed:08:0b:
1a:b0:1a:4a:bf:95:e6:16:a6:cd:8f:64:7c:59:7f:
44:3e:ac:cc:e8:57:d6:27:fd:38:e4:19:d6:45:c1:
65:77:d9:4e:aa:03:d5:b8:7e:e0:61:d4:b7:e2:4b:
15:c7:b0:91:f2:ae:09:08:33:8d:52:86:2f:ae:e8:
30:35:32:91:60:b5:55:73:b4:d6:31:0b:d8:f7:94:
ad:8b:6e:77:2b:a6:79:eb:33:23:a4:bc:7a:ba:71:
ab:2b:08:45:da:58:af:b5:bb:6b:b4:6c:52:a2:e0:
30:4f:b1:36:80:a4:ba:f4:fa:92:f6:b0:5e:df:4f:
fd:ba:97:d1:d5:59:ae:4f:de:33:88:41:65:4b:ce:
88:49:aa:ac:68:fe:41:db:db:8e:80:1a:d6:e0:34:
f8:15:a2:bd:87:76:27:19:2b:be:7e:b1:7f:4e:e5:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:CA:B5:14:7D:41:98:93:9B:73:06:F9:9B:DD:D7:A9:5C:E5:CF
X509v3 Authority Key Identifier:
keyid:AA:2C:AF:4E:4F:16:AB:B3:39:C1:E5:D0:F0:59:F4:13:AE:5C:E8:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/A0D42A2A4A9011F0B288AC59C4F9AE02/qiyvTk8Wq7M5weXQ8Fn0E65c6IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a6:c6:65:b4:5e:54:03:52:45:70:36:1a:72:37:05:a2:ae:
bd:31:b4:23:45:8e:f3:ee:b3:5e:b1:63:df:4d:2b:b0:71:f7:
42:20:7b:c0:9f:4a:45:6a:a4:21:af:81:b4:d3:2c:68:e8:e1:
d5:e0:66:4d:19:6a:43:91:79:3d:17:b3:c0:78:9a:07:8f:f1:
cf:3d:d7:92:71:e2:ec:43:a7:4d:a6:14:eb:b5:67:35:8c:1f:
c4:d7:e0:bd:0a:12:94:07:f9:d2:15:d2:67:2d:c7:5c:56:df:
48:96:7d:6f:45:05:47:73:eb:05:36:5b:56:17:62:77:c9:78:
43:28:b7:25:10:a1:7d:92:6f:96:40:2b:73:91:f5:66:69:ec:
4a:db:f9:08:89:e7:85:47:c9:f9:93:fb:64:17:46:20:6d:73:
84:e2:58:48:17:8a:ce:3c:8b:f1:ca:bc:59:85:c7:c3:2f:66:
d3:14:78:66:2c:cf:09:0f:6d:69:8d:d2:7f:5b:a9:e1:05:e3:
c3:00:97:db:7b:f1:99:2f:a5:27:5b:81:d6:13:83:01:86:96:
64:ae:0a:05:a7:08:45:43:d8:8f:8e:45:da:78:00:e0:fe:13:
bf:ac:08:0f:42:cc:75:54:c6:5b:4f:3c:c9:52:05:7d:75:3a:
89:b9:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:56 2026 by rpki-client