
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier: ab1YW3Dk2y5z2X5gnju5ZmbYit8rp8NUMB2F5lmJRQI=
Subject key identifier: AB:98:E6:15:4B:15:1E:35:EF:CD:B0:CC:D8:51:E9:85:85:6B:97:47
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial: 082B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number: 081D
Signing time: Tue 18 Aug 2026 21:31:11 +0000
Manifest this update: Tue 18 Aug 2026 21:31:11 +0000
Manifest next update: Tue 25 Aug 2026 21:31:11 +0000
Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: yc2q6dFixWOY+HRY9HEB4pqHh2yq1W6gAnumDbej1jc=)
2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=)
3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Validity
Not Before: Aug 18 21:31:11 2026 GMT
Not After : Aug 25 21:31:11 2026 GMT
Subject: CN=6a84cf1f-6844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:74:e8:b3:55:c2:3e:14:30:16:b1:e2:13:
5b:dd:ef:64:83:51:f6:22:83:c3:1a:f1:16:32:75:
9b:64:66:68:69:da:20:55:ca:ac:ad:0a:02:d0:5e:
b8:98:38:22:87:7a:6e:17:e1:74:2e:9b:9a:77:72:
60:ff:87:43:37:b7:ee:fa:b4:6e:31:52:57:63:c9:
52:63:0c:6a:be:58:cc:ec:39:95:a9:cd:6f:9c:8c:
40:b5:af:9f:68:90:d7:f6:44:7c:91:8a:40:7e:d4:
f6:33:62:ba:b6:49:8d:da:3f:ee:da:b0:cd:13:d3:
78:7a:1f:95:c6:bd:fd:55:60:d8:0a:bb:73:52:ae:
eb:b4:31:d6:00:44:23:7f:66:dd:d7:24:42:5b:75:
7e:ac:19:c8:06:e8:1d:9a:33:02:fb:87:f6:71:85:
46:ef:bc:51:99:f9:dc:db:e8:3a:5a:81:b6:c4:24:
f1:4b:95:09:b9:19:cc:1b:c7:4f:fc:5d:be:87:56:
63:3c:de:db:62:fa:9f:19:c8:4b:84:19:4c:85:1f:
2b:07:18:ef:86:85:e7:f9:ef:67:31:5e:51:d3:1d:
58:5c:af:48:eb:68:e4:0a:92:45:2f:2d:44:a2:80:
d7:b9:3d:6a:8a:fd:6c:94:78:31:45:e3:ac:ed:be:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:E6:15:4B:15:1E:35:EF:CD:B0:CC:D8:51:E9:85:85:6B:97:47
X509v3 Authority Key Identifier:
keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:51:dd:6c:d1:ba:e8:35:c6:f4:ac:d1:f7:65:e3:65:88:fc:
51:c3:a0:f6:41:86:60:41:fa:07:74:90:17:85:6e:54:be:c7:
88:75:a1:4b:35:73:04:80:3d:ac:d3:24:8f:bf:19:9c:84:ba:
83:b6:d6:c9:7f:15:13:10:72:b1:4a:c3:3e:f0:b6:7a:97:3b:
8a:08:4c:e9:e7:6d:82:73:bb:d2:a4:0a:d8:38:7f:c9:ff:61:
89:9e:21:4a:38:d9:11:59:18:c4:dc:51:09:c1:a2:b3:98:de:
c3:4c:a3:61:3f:1b:71:25:fb:56:82:e3:d1:9e:57:1e:8a:6d:
68:a3:f3:bc:60:10:c7:53:ca:1a:f2:f1:2d:3f:08:29:e6:3a:
6a:8b:b7:4f:53:e6:2b:26:b5:30:57:1a:38:58:12:6a:ed:48:
ca:cf:11:cc:13:ad:b4:8b:f4:b9:17:79:e8:4c:4a:cc:7e:bb:
7a:57:a2:9a:55:5d:a1:bd:bc:ec:05:bd:c2:83:43:58:1a:78:
fb:98:e4:db:e9:ae:70:eb:58:ec:bb:25:4f:ae:b8:69:05:1b:
6f:92:45:05:79:71:0e:e5:5b:80:37:f7:f9:80:a9:a0:b8:57:
05:ad:9d:5a:09:ee:ac:48:f7:fa:e9:89:d8:8c:e5:c8:fe:46:
23:ff:2f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:33 2026 by rpki-client