
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
File: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft (raw, json)
Hash identifier: Kgomhc+Kku9PoqXMTZ6QXgf77MjHo8T2LehRi/X/aIk=
Subject key identifier: C1:13:17:31:42:9E:3B:1B:69:67:44:DA:0E:67:E4:85:28:6D:C2:95
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
Manifest number: 0835
Signing time: Sun 04 Oct 2026 21:10:28 +0000
Manifest this update: Sun 04 Oct 2026 21:10:28 +0000
Manifest next update: Sun 11 Oct 2026 21:10:28 +0000
Files and hashes: 1: Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl (hash: Criq1TpWKXyLQnG4kk9L53dulL3sV5m9VfqJYpDBJeY=)
2: 203ADB5E412E11F097D29A20C4F9AE02.roa (hash: DvRNqYY5l6FpteItAXjTYDN+vegpciEIGblmsQkvg/A=)
3: 919ECCA8412C11F09E17FC56C4F9AE02.roa (hash: fwi+10rELM2ReD7ENwWww/f80u0EgCVFyBC8s9Jx27U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 21:10:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Validity
Not Before: Oct 4 21:10:28 2026 GMT
Not After : Oct 11 21:10:28 2026 GMT
Subject: CN=6ac2c0c4-a34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:fa:37:09:14:78:7b:89:f8:6d:1f:3f:d7:
13:bf:8c:a0:6d:62:41:a3:02:db:d2:ff:50:74:79:
83:e7:9d:09:3f:65:62:e9:82:16:49:0d:47:0d:05:
6c:c4:c9:ea:4f:5b:1f:a9:26:0c:93:2e:a7:ec:24:
97:c7:7b:d7:6d:5b:af:6a:10:be:fc:9c:24:3c:bd:
16:92:3a:a9:b5:85:28:8d:a8:fd:70:db:6f:6f:b8:
1e:e0:33:15:d2:d4:ec:05:24:4e:c1:87:b8:6c:bf:
9f:00:9b:5f:3d:fc:4b:0b:25:fb:32:1e:0c:42:59:
93:b3:1b:36:bd:3f:fe:d5:a1:dd:1c:06:3d:6c:eb:
a8:f2:fc:79:d5:a1:db:58:48:67:3d:ea:53:4e:82:
6c:32:ab:c8:19:df:a5:f1:22:b1:b6:ee:46:73:1e:
17:5f:97:ea:f3:e3:c8:a9:f6:cb:41:6b:68:7e:19:
db:1f:e2:d4:24:a6:dc:16:eb:90:8c:5b:f5:b6:3d:
f4:d8:12:3d:85:a6:64:70:f2:6a:29:57:6d:15:17:
40:fe:26:51:19:81:e5:5e:5c:06:6f:31:99:a7:05:
f5:9c:6c:98:69:55:ce:12:1c:ae:a4:9e:2f:b7:12:
e6:54:6a:8c:6e:7d:25:a7:79:ea:3c:79:fe:24:ea:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:13:17:31:42:9E:3B:1B:69:67:44:DA:0E:67:E4:85:28:6D:C2:95
X509v3 Authority Key Identifier:
keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c3:6e:e6:b7:1f:55:20:7e:fa:7a:59:be:46:cf:7f:d1:8a:
7d:be:f3:14:eb:0f:36:3a:51:18:94:8a:0d:e8:cb:72:d9:94:
cf:50:07:00:24:40:f1:1f:a9:fb:83:1f:5b:d7:bd:e0:fb:59:
3c:8d:72:18:1a:4a:9f:b3:88:24:c4:9f:e0:07:a7:0e:15:fb:
2a:d0:0a:65:e6:d6:02:fa:60:b1:bf:db:4a:dc:d7:f6:4f:83:
77:bf:a9:0b:65:ef:96:4c:9d:2c:49:a1:10:80:cf:00:dc:7f:
32:43:47:69:ce:9c:50:2c:4d:94:e8:64:17:0f:b3:7d:c8:b4:
6b:6f:92:4e:1d:52:d2:67:61:bd:3c:ad:5e:4a:f7:09:b7:b4:
a1:c1:2d:26:86:23:37:28:e8:8b:f9:06:7d:75:19:c8:fb:5d:
49:6c:c0:8d:0b:00:0a:9d:91:5d:d5:e4:2b:7b:36:bf:ec:ff:
89:5c:9a:6f:7d:bb:81:db:e2:db:35:86:a2:8e:87:cb:3a:3e:
9f:2d:26:2a:19:30:eb:a7:e0:3e:f6:0b:3d:f1:c2:67:25:23:
fc:79:2e:c9:61:4c:6e:f2:c8:b1:fe:1e:19:1d:1b:f7:00:5b:
9a:ff:14:7d:8f:78:ae:15:49:a0:28:f1:4a:38:24:98:58:be:
e7:3e:ce:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:10:24 2026 by rpki-client