
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: lp2UWSZxgsAkXjgYYAjHAAZ40fIAsAcLMr4xhAqY++0=
Subject key identifier: 16:46:C6:70:03:8E:BD:9B:AD:34:3F:3A:F3:C0:27:E0:42:FF:EB:8A
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 087B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 0871
Signing time: Tue 18 Aug 2026 21:10:26 +0000
Manifest this update: Tue 18 Aug 2026 21:10:25 +0000
Manifest next update: Tue 25 Aug 2026 21:10:25 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: sQq1qHCO+LFlk1GWsqFwsEfBrIjZh1+iCJrm/L1rpmE=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:10:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Aug 18 21:10:25 2026 GMT
Not After : Aug 25 21:10:25 2026 GMT
Subject: CN=6a84ca42-9ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:60:e8:1e:97:1c:40:61:47:ae:26:14:82:
86:8a:25:23:18:09:3c:4a:52:ad:6d:00:db:5a:7c:
f3:32:92:5a:3f:68:77:ba:20:60:f6:b4:6f:a6:99:
2d:b2:9d:b9:ff:43:09:4e:79:47:0c:33:24:ba:a3:
c1:1f:80:6a:a6:22:48:07:e2:d4:37:08:fd:fb:57:
c8:1b:d7:ab:95:f1:71:8a:4d:e6:e7:0b:af:7b:5e:
c1:52:98:6d:74:f8:71:45:fd:97:34:88:97:44:5b:
60:fa:96:a7:ca:ec:29:58:47:08:fd:47:e1:7b:6b:
39:ac:d9:65:be:7b:6c:76:72:ad:01:fd:bc:6a:45:
31:ad:a9:f7:1c:1e:e3:6e:6d:cc:52:9a:31:26:af:
74:99:5a:1c:5c:64:6c:89:78:3d:54:0e:77:31:fd:
4f:4a:ed:01:7a:f3:1b:bc:d8:50:32:2c:e4:52:cf:
4b:3d:c7:b3:2c:2c:c0:8f:db:32:05:d0:d7:7f:ed:
9d:e7:6e:50:d3:aa:31:2b:d9:9a:d3:c9:8a:79:c3:
9a:07:fb:91:15:7e:0f:23:3a:ed:e5:90:44:4b:00:
1f:61:a2:67:fe:62:03:ee:6a:6b:9c:47:5d:fc:4e:
fa:e1:5e:9a:ca:88:0a:4e:4e:8e:8b:37:bc:c1:d9:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:C6:70:03:8E:BD:9B:AD:34:3F:3A:F3:C0:27:E0:42:FF:EB:8A
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d6:76:ed:47:c0:ae:63:21:59:78:04:bc:1f:e3:9a:b4:fe:
cf:a3:ad:89:54:72:6d:32:ce:54:c6:b4:84:a2:71:31:9f:37:
6c:c7:39:9d:48:40:dd:ec:79:63:34:5a:b1:9f:6b:9a:50:2d:
fd:d2:e1:df:69:79:4e:70:f3:36:a5:4e:c5:31:83:65:37:1b:
22:3c:b5:54:c5:25:ea:f6:47:bf:b3:a6:4c:c5:b3:50:3f:fa:
f6:b2:0d:af:2c:c0:c5:04:25:14:d2:0c:4c:eb:08:6a:08:43:
75:68:e1:32:cf:88:05:14:e6:d3:2a:4c:4a:53:1a:6b:9a:68:
97:5c:39:4d:fd:c7:50:af:e8:8b:6c:d9:3e:4e:41:bf:d5:47:
36:99:ed:23:01:a7:9a:fd:4d:eb:12:19:bc:fa:09:4c:68:bc:
0c:fc:a9:83:35:63:ab:58:68:4b:36:77:ea:c9:4a:45:51:59:
8e:24:25:54:27:62:82:04:4c:68:ff:39:4b:c3:54:89:14:13:
84:d8:29:d5:03:67:fa:b4:7b:ba:11:96:1d:52:c8:49:4b:96:
af:2e:f0:bf:db:b1:06:e8:cf:31:9b:37:10:5e:da:d0:c6:d8:
19:4d:ab:7d:b3:f5:36:fe:11:05:26:00:04:3c:51:1a:97:22:
2b:53:a6:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix
QUU1NDQyMzkwHhcNMjYwODE4MjExMDI1WhcNMjYwODI1MjExMDI1WjAYMRYwFAYD
VQQDEw02YTg0Y2E0Mi05ZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJVg6B6XHEBhR64mFIKGiiUjGAk8SlKtbQDbWnzzMpJaP2h3uiBg9rRvppkt
sp25/0MJTnlHDDMkuqPBH4BqpiJIB+LUNwj9+1fIG9erlfFxik3m5wuve17BUpht
dPhxRf2XNIiXRFtg+panyuwpWEcI/Ufhe2s5rNllvntsdnKtAf28akUxran3HB7j
bm3MUpoxJq90mVocXGRsiXg9VA53Mf1PSu0BevMbvNhQMizkUs9LPcezLCzAj9sy
BdDXf+2d525Q06oxK9ma08mKecOaB/uRFX4PIzrt5ZBESwAfYaJn/mID7mprnEdd
/E764V6ayogKTk6Oize8wdnkWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZGxnAD
jr2brTQ/OvPAJ+BC/+uKMB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF
QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM
Y3pidV8zcDZXTXNhNVVRamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATNZ27UfArmMhWXgEvB/jmrT+z6OtiVRybTLOVMa0hKJxMZ83bMc5nUhA3ex5
YzRasZ9rmlAt/dLh32l5TnDzNqVOxTGDZTcbIjy1VMUl6vZHv7OmTMWzUD/69rIN
ryzAxQQlFNIMTOsIaghDdWjhMs+IBRTm0ypMSlMaa5pol1w5Tf3HUK/oi2zZPk5B
v9VHNpntIwGnmv1N6xIZvPoJTGi8DPypgzVjq1hoSzZ36slKRVFZjiQlVCdiggRM
aP85S8NUiRQThNgp1QNn+rR7uhGWHVLISUuWry7wv9uxBujPMZs3EF7a0MbYGU2r
fbP1Nv4RBSYABDxRGpciK1OmuA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:56 2026 by rpki-client