
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
File: CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft (raw, json)
Hash identifier: GFVCfY6P7VSPgVZPYFHYKLW3G/Fts/7zN6I89Zbz2Kg=
Subject key identifier: 73:51:C8:1D:A8:CA:C8:1E:72:92:03:2D:55:1E:1C:55:41:70:E8:51
Authority key identifier: 0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
Certificate issuer: /CN=A9176E1D/serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
Manifest number: 0110
Signing time: Mon 27 Jul 2026 08:09:31 +0000
Manifest this update: Mon 27 Jul 2026 08:09:31 +0000
Manifest next update: Mon 03 Aug 2026 08:09:31 +0000
Files and hashes: 1: CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl (hash: P/DoP5WfyvXOAWKbhsDZtzF3jSZEOhyBns6kbicJdHs=)
2: 8A5CF8F0FB7411EF83C11685C4F9AE02.roa (hash: S+nQRnmZXUnFE6DkSM3kkEvhuxoEZtbN5DKGaAMAS/E=)
3: 4C9617646D0611F0BBBF9039C4F9AE02.roa (hash: dVVvRypUK9/KtfRB7/hEbBL1MeEBt6MHgMHLpJHk1uI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176E1D, serialNumber=0AA6E48328425E124C561C2AC187C8A196247110
Validity
Not Before: Jul 27 08:09:31 2026 GMT
Not After : Aug 3 08:09:31 2026 GMT
Subject: CN=6a67123b-b84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:d4:5c:e6:4a:45:0c:08:58:ca:50:0a:17:
9c:ac:41:b9:a0:1d:b9:ab:8a:09:a8:44:48:97:13:
bc:d0:01:36:19:ae:b3:ae:ac:c1:f6:51:67:4f:66:
cb:62:71:bb:2f:d5:df:f4:e8:11:39:58:10:31:ad:
25:4a:c4:2e:07:36:d1:35:91:cd:10:20:88:fe:37:
e5:11:0d:cc:39:b8:6e:8e:02:d3:ec:a3:dd:41:fd:
62:b2:f7:fc:50:86:b7:12:2a:36:88:0c:a3:30:9b:
fa:32:00:4e:4d:ff:d6:06:e4:89:4d:d8:b2:49:dd:
f6:d5:d6:9c:77:e9:2d:4e:2b:18:69:61:2f:9d:f0:
ec:03:cf:d3:89:1a:8b:86:a3:f2:c7:30:fb:16:b1:
68:5b:2d:34:9d:26:08:dd:12:16:9f:d6:54:77:4d:
34:0f:a8:0a:65:19:97:12:ed:33:cd:54:3d:df:6b:
d3:19:22:23:36:44:6b:9e:50:4d:d5:5d:09:25:50:
ae:c7:fb:1f:db:86:8d:9c:1d:38:d4:d2:d2:e1:2c:
bb:7c:ba:33:99:31:d1:0c:08:2b:b0:f3:ab:30:0b:
8b:e6:5a:85:b5:0c:d4:95:97:a0:c1:82:df:44:5e:
db:17:74:cb:2e:62:dc:18:f3:d4:d3:9e:5b:49:0a:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:C8:1D:A8:CA:C8:1E:72:92:03:2D:55:1E:1C:55:41:70:E8:51
X509v3 Authority Key Identifier:
keyid:0A:A6:E4:83:28:42:5E:12:4C:56:1C:2A:C1:87:C8:A1:96:24:71:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqbkgyhCXhJMVhwqwYfIoZYkcRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E1D/FE8835BCF9F011EFB77A8C6EC4F9AE02/CqbkgyhCXhJMVhwqwYfIoZYkcRA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:49:d4:05:a3:c8:3f:3b:b6:60:ce:32:66:9b:3a:b6:f2:99:
c9:14:7a:86:90:8e:60:12:88:87:f9:f2:0b:c8:d4:71:4c:cf:
b3:74:f6:72:58:72:f8:65:e0:86:a3:5b:80:93:4c:90:c9:fd:
ec:a1:4a:37:6c:ff:c3:0f:1d:0c:f9:2e:1d:4c:0d:40:4f:55:
53:f4:e8:fa:18:7e:58:a0:38:29:d7:f6:e4:f7:61:d0:34:79:
d1:3d:1a:1b:96:5f:7e:f9:56:78:4e:be:8d:c4:3c:ac:db:23:
2c:2e:76:8e:5e:9a:cb:83:1b:ba:d8:f6:25:f4:d6:c0:f5:29:
ad:26:67:dc:84:7a:af:45:81:b0:ff:6c:c9:be:e1:ef:bf:3c:
0f:f8:08:a4:91:58:6d:ab:ee:4a:fd:64:6b:a7:9e:0d:96:75:
ae:7a:57:a7:5a:ad:e4:d4:57:c3:21:5b:f3:26:58:bc:18:f5:
15:65:9d:6f:67:26:4d:20:52:2e:98:b6:cf:f8:a7:32:4c:e1:
8b:99:4c:0c:85:30:88:51:49:24:57:4f:71:09:df:f8:a0:87:
5d:2d:bd:38:52:ac:77:a5:6d:8d:8e:9d:de:ec:cf:16:4b:a1:
62:22:e7:23:fc:b5:e7:a0:e1:df:17:fa:bc:e0:4f:15:77:cf:
f6:b0:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 06:30:02 2026 by rpki-client