
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier: wJ/R7Xa2l/3Fx5exI8OTNj3sWabsD6ED5oM8KdXdbL4=
Subject key identifier: 4B:C7:C0:10:82:5D:F5:9D:53:E4:6D:77:9B:F0:2B:D0:4A:8E:F9:97
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial: 080E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number: 0800
Signing time: Mon 22 Jun 2026 21:17:27 +0000
Manifest this update: Mon 22 Jun 2026 21:17:27 +0000
Manifest next update: Mon 29 Jun 2026 21:17:27 +0000
Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: fvkDVmgbh8kKn3muy6x2jANcS4wWD0SbniUTiSyAjlM=)
2: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=)
3: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Validity
Not Before: Jun 22 21:17:27 2026 GMT
Not After : Jun 29 21:17:27 2026 GMT
Subject: CN=6a39a667-3286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9d:d8:17:38:ca:a1:c4:24:df:05:f8:ae:f3:
27:76:7f:ac:f4:b1:cd:f3:ad:60:62:6a:19:c8:9f:
1e:17:d3:a6:ea:8f:30:32:e4:5a:52:60:ad:5d:37:
15:9f:b0:b4:2d:57:d9:fc:8d:1c:b7:5f:e1:7b:5a:
a2:15:33:07:a8:a6:ea:d6:f9:90:15:22:9f:1c:b7:
6c:20:99:18:a8:9e:49:70:22:af:7d:24:0b:ee:34:
47:40:a9:08:4d:3f:2c:de:4d:93:48:e1:55:49:bd:
91:24:f6:f6:e1:d7:5e:46:4e:79:b6:f4:da:f2:e6:
80:fa:36:3a:4c:d5:eb:90:b3:67:cf:56:e3:9a:9b:
6f:82:e7:52:55:3a:dc:08:c7:f8:80:3c:35:2a:14:
ae:7c:c8:4a:ac:ac:37:15:eb:8d:dc:56:dd:41:90:
c1:0e:d6:3d:c5:6a:a3:05:0c:be:2f:ce:39:dd:c0:
3f:b4:18:23:d0:45:61:14:2e:d9:06:81:c4:33:1a:
92:a1:e5:9a:50:78:41:f6:54:77:76:cc:24:20:84:
ab:95:32:06:72:c9:29:80:cd:c2:2d:ec:12:b4:69:
ac:df:d5:5c:15:a3:27:10:39:81:30:d7:09:99:16:
d0:fd:1f:e7:86:41:b3:b5:10:02:2d:53:1a:41:41:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C7:C0:10:82:5D:F5:9D:53:E4:6D:77:9B:F0:2B:D0:4A:8E:F9:97
X509v3 Authority Key Identifier:
keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:19:5e:92:70:ce:07:0a:df:dd:21:e0:e4:43:b2:be:3e:e1:
28:6c:a7:d9:1a:a4:55:72:8a:8e:5e:a4:a3:9a:b9:f9:99:95:
b0:67:6c:33:47:ba:3d:70:1e:63:08:d2:bd:74:0b:41:7f:78:
21:9c:8e:58:4c:be:77:2f:d8:38:cc:c0:8b:d4:a9:27:5c:0b:
69:dc:b3:ad:99:6b:55:49:6e:fc:c8:9a:2a:73:12:c5:81:3d:
d6:fb:19:3b:b8:c8:59:6f:e0:2e:92:93:dc:32:4d:f4:2a:1b:
73:b9:eb:87:ea:df:31:d5:8c:38:3f:26:0f:dc:9a:36:d2:ec:
95:a4:2c:66:c1:ad:e7:95:86:7a:35:9e:b5:b6:f0:65:bd:0f:
3c:8f:eb:5c:3d:ff:30:d7:30:e5:31:e9:c5:39:f3:62:4d:e8:
c0:92:3e:12:c2:b8:86:fe:ab:a7:89:ac:f9:6f:6e:62:82:16:
e0:d9:5c:56:d8:31:4c:e4:e4:ee:3e:03:78:09:89:86:25:42:
5c:dd:82:3f:98:ad:8c:7b:5b:ff:84:da:9d:c2:cc:14:85:3f:
8a:64:8c:f4:8f:8c:0e:61:f1:e9:80:a9:e1:3d:72:c2:94:03:
fe:a4:04:03:dc:83:70:cd:3d:a0:af:67:51:86:1f:44:af:c1:
1c:9b:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:41:24 2026 by rpki-client