
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json)
Hash identifier: BcEUkrM3SrS29ZHriyf+QLIPExRxzfFwYsJ+kw0VM1I=
Subject key identifier: 14:60:D7:82:D0:ED:21:11:0D:BE:FA:D4:07:B2:AA:20:C8:4F:87:47
Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
Manifest number: 01AA
Signing time: Thu 13 Aug 2026 03:48:07 +0000
Manifest this update: Thu 13 Aug 2026 03:48:07 +0000
Manifest next update: Thu 20 Aug 2026 03:48:07 +0000
Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: y9AJsRQQrCMFgvpXn3JbwoRVj7W5j04pNeG3/rFV9Rs=)
2: o1Hnt3pYHdDl-L3mnK-sgg_Rcig.asa (hash: Zccc8+XJpnSnsaDg6uSKWCceWIp1ghS+5M+XYjTnkjo=)
3: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: EmlnlS4Z9CMI7PDZI/wf0AKGdImncjWzGhUb3m4XvQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl
rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 03:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Validity
Not Before: Aug 13 03:48:07 2026 GMT
Not After : Aug 20 03:48:07 2026 GMT
Subject: CN=6a7d3e77-cc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:06:76:68:71:6c:da:d0:ce:be:95:f3:24:3d:
86:7e:41:4d:ad:bf:cc:da:ca:fe:2c:55:af:e8:58:
5a:db:79:a5:5e:c8:e9:f5:ac:8d:7a:7d:74:3e:83:
9a:bc:5d:c8:68:5c:fb:67:7d:28:f6:ec:1f:a0:eb:
48:86:43:a9:60:65:e6:32:8e:9d:42:75:76:91:39:
40:a2:49:34:be:35:64:9f:a6:c9:1f:f5:a8:a0:58:
0a:d2:79:56:b3:cf:85:25:ca:53:6c:cc:0b:06:9b:
4e:b6:e8:cc:aa:50:ab:c4:6c:25:66:55:22:a9:a2:
5d:c3:95:6f:f8:d0:67:c1:93:22:ab:5f:30:52:c7:
cb:0d:94:03:f3:27:75:43:26:87:8e:e7:66:d7:06:
f5:bb:04:3c:9d:c9:b1:06:db:f9:cd:67:b4:4a:58:
6c:35:ca:54:13:3f:de:5b:c5:76:a0:39:ca:90:74:
30:a8:38:50:9d:57:14:30:93:0b:99:b7:14:78:63:
9f:57:a3:44:1d:b8:67:90:5e:fd:87:6f:89:43:b1:
60:99:26:cb:7d:d0:b4:0d:37:1f:7c:eb:48:3e:50:
fc:f2:59:d3:aa:da:b5:1b:6a:4c:2c:97:75:16:6b:
ad:75:04:9e:a4:f9:7f:63:50:c1:bf:6b:a2:ea:5b:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:60:D7:82:D0:ED:21:11:0D:BE:FA:D4:07:B2:AA:20:C8:4F:87:47
X509v3 Authority Key Identifier:
keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:62:91:17:60:1c:ca:60:c3:c2:5f:2a:6f:f2:8a:99:35:92:
3f:38:26:cd:87:e3:81:6a:12:10:2e:be:69:14:3d:4d:d3:de:
17:87:34:5c:47:a0:ce:2d:59:a4:47:39:fc:0e:01:07:59:fc:
24:00:de:07:51:8f:ad:fc:9c:8c:52:e8:eb:b0:9a:91:27:7a:
3c:3f:bb:dc:76:1f:1c:84:ce:3e:d8:a8:72:5e:6b:22:27:d0:
5e:bd:e2:e9:f1:b2:9c:1e:70:71:30:fd:3b:c5:49:d5:e4:1b:
bd:72:93:57:d0:53:1c:e8:c2:2f:93:26:f7:3c:99:c3:ac:02:
cf:25:44:20:f9:5c:6d:e1:cc:04:10:1f:91:a1:d1:8d:70:e4:
88:8f:79:51:9e:5f:c7:28:a3:04:28:f1:77:eb:5e:70:4e:34:
dd:72:05:f0:00:d7:0b:f9:14:93:8a:fe:98:73:c1:e6:4b:e7:
cb:d4:69:a2:6f:20:8e:6f:1e:e1:40:56:72:98:91:3e:ff:9b:
6f:99:3f:3b:e3:b6:0d:42:26:f0:5c:dc:32:45:e3:98:d4:a6:
b7:06:b4:fc:6f:97:d8:6c:35:e7:c9:53:a8:9f:91:1c:c1:d5:
a4:eb:a1:2b:7e:09:7c:ca:c7:a0:c9:74:83:9d:63:8a:c7:8a:
fc:72:fb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:27 2026 by rpki-client