
$ rpki-client -vvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
File: qvIbcGtV8TNNz2thfp4PMR1b9zM.mft (raw, json)
Hash identifier: 9SZk/InR7upyVc6+alpbT612T4WphVQsQlMTRW36z4E=
Subject key identifier: 4B:4E:8C:B5:59:63:22:EA:EB:58:29:37:1F:C2:DE:24:6B:B0:AB:D7
Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
Certificate issuer: /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
Manifest number: 07
Signing time: Tue 07 Jul 2026 10:29:13 +0000
Manifest this update: Tue 07 Jul 2026 10:29:13 +0000
Manifest next update: Tue 14 Jul 2026 10:29:13 +0000
Files and hashes: 1: qvIbcGtV8TNNz2thfp4PMR1b9zM.crl (hash: MtbXz+IBW/JOyYbkfzFWKWzw1DQTEL31Vu9ws7KCqwE=)
2: 88B4A746725111F189F604128DA30FBC.roa (hash: /emz37e0m2LLZWcMUqkDepflFN5315Y0u/7biRL6nWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 10:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733
Validity
Not Before: Jul 7 10:29:13 2026 GMT
Not After : Jul 14 10:29:13 2026 GMT
Subject: CN=6a4cd4f9-b746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:e5:97:57:6a:f2:fe:c3:ac:a0:c0:cb:14:
b8:aa:f1:b5:bd:3e:a6:24:7a:dc:2c:66:78:62:aa:
04:6e:fa:a3:4c:be:4b:07:29:88:1f:a1:29:dc:9d:
16:42:b6:0f:d7:53:bf:a4:54:6f:f5:ed:49:d8:c0:
18:47:85:5c:55:27:11:5b:96:6b:95:c8:a1:d1:e6:
19:49:06:20:6d:b5:1b:a0:de:f8:ab:f3:5a:c6:82:
54:79:6b:69:7a:3b:7d:0f:b0:1e:a6:eb:62:71:fb:
e5:bf:94:77:2a:48:94:51:e0:36:09:d9:b7:a4:ff:
1c:55:d7:cb:52:dd:cb:69:ab:ff:f4:1f:e3:c3:9b:
a3:39:b6:a8:56:5d:29:23:33:d7:6d:ec:1e:6c:12:
f8:ac:d7:a0:07:15:64:02:1b:eb:79:1b:c4:38:c4:
c9:b9:57:69:50:e7:b3:21:00:53:0d:1d:ad:b3:6d:
65:20:bf:6f:86:b8:d1:89:72:2a:79:24:6a:f2:71:
12:55:89:b0:50:2d:bc:16:44:8e:5a:ad:97:c8:54:
ea:18:9a:37:43:ba:a0:73:21:e4:4c:d1:7b:b6:5e:
31:9c:26:b2:d1:f3:06:8b:e9:22:06:ad:4b:da:ef:
2f:e9:0f:39:f8:40:eb:ec:cc:13:fc:2b:fa:70:e3:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4E:8C:B5:59:63:22:EA:EB:58:29:37:1F:C2:DE:24:6B:B0:AB:D7
X509v3 Authority Key Identifier:
keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:d8:44:ed:5e:af:06:08:23:97:aa:52:54:23:c4:c1:20:
67:9e:d8:72:a6:a5:2b:44:6d:83:77:cc:f6:dd:ed:ac:e6:a7:
f0:7f:b3:a8:1c:bf:96:3c:1f:c2:18:57:1a:52:9f:59:01:d9:
ca:32:a1:62:91:18:75:fd:2d:f3:82:29:7a:a9:ff:be:99:17:
0d:84:28:1e:2b:fb:2d:3c:bb:f4:9c:de:3d:28:e6:09:cd:1a:
c9:34:23:d3:ec:3d:66:37:98:cd:b2:8f:76:e0:9a:ad:2a:06:
af:f6:19:44:25:22:3e:fb:e7:dd:65:01:38:60:d7:44:52:f4:
70:f8:ff:43:db:02:2e:63:78:13:a5:f8:b6:26:e7:74:fb:08:
de:22:54:ce:c9:16:06:e2:7c:ff:e8:29:19:d5:c3:18:be:f7:
65:95:02:08:da:8a:91:5c:4a:d9:7f:18:60:1c:10:3d:4d:fd:
91:da:bd:e5:f8:28:7b:4c:f7:8c:8e:b0:34:26:c9:2d:a9:7c:
09:23:e1:11:b4:50:1f:c6:28:68:7e:93:56:49:89:34:73:43:
f0:74:0d:14:ac:c0:89:83:f8:4c:3d:57:3e:8b:fe:b6:8f:44:
29:8b:73:81:95:e9:05:2c:54:25:79:d2:99:e7:2e:04:13:55:
d2:9e:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 00:39:31 2026 by rpki-client