
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File: Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier: eDCPBCAjo/yX60dqPjQsAFsc+cFMvQ1zrEwirO00x0o=
Subject key identifier: 2B:27:DD:E0:19:E2:4B:00:F6:CF:D9:E8:79:98:53:3D:1B:BB:D9:55
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1CD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number: 1CB1
Signing time: Thu 16 Jul 2026 16:14:06 +0000
Manifest this update: Thu 16 Jul 2026 16:14:06 +0000
Manifest next update: Thu 23 Jul 2026 16:14:06 +0000
Files and hashes: 1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: +x522c4GDgrF1+bb67243gQ5vRLNG3+G6ovryWVtg8Y=)
2: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: QLCbgoMVS3G9VHYM06+C4WObA6B/KseYMNiE38jKgGw=)
3: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: wBGm4fFHkS0MsUDVoFS2mN9ly3H+yMyEnIGfWIGaVpk=)
4: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:14:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7385 (0x1cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Jul 16 16:14:06 2026 GMT
Not After : Jul 23 16:14:06 2026 GMT
Subject: CN=6a59034e-fede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:33:d3:e5:0a:ed:6d:e3:ea:46:07:cf:05:
01:04:4b:f2:9c:f3:a7:7f:d2:79:23:d0:18:a0:c5:
84:38:3d:a2:b3:78:d0:45:91:f8:5f:af:45:2a:a6:
3c:b2:ce:30:b9:66:8b:cf:e7:94:47:7d:31:3c:ec:
43:a4:49:af:1f:c7:22:0b:dc:6f:a9:43:eb:75:ab:
34:aa:04:8c:08:a0:b6:85:71:8e:b0:99:b1:6a:ae:
cc:11:3f:c5:0f:57:af:16:f7:7d:22:0e:5c:00:c1:
f0:1b:db:e6:a3:1f:2c:5c:11:33:4d:62:2b:2d:93:
46:0c:2f:e2:59:7e:ef:75:c6:ab:2a:3f:f0:1b:e0:
c5:a3:04:96:06:1d:cd:c8:e4:cf:da:d3:ee:e3:0a:
ac:08:3c:db:27:d0:cb:b0:91:e2:29:09:b7:ab:bf:
7c:b1:7e:dd:e3:f0:f8:60:23:60:bd:8a:59:a6:44:
32:48:f8:81:43:56:5d:54:0e:fa:b2:72:6e:48:0a:
a5:84:67:4c:50:d3:1f:2f:9a:5e:66:0e:b2:82:e3:
88:f7:f3:11:c4:c8:49:df:26:4e:ae:ab:7f:fc:50:
28:46:a3:1f:30:82:22:db:f6:a8:df:26:23:64:ad:
29:06:3a:7f:cc:50:9d:32:0e:8b:3e:85:6c:ed:8e:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:DD:E0:19:E2:4B:00:F6:CF:D9:E8:79:98:53:3D:1B:BB:D9:55
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d3:04:21:fc:98:d0:42:55:f2:51:05:0f:a8:e4:9c:db:28:
8f:96:c5:ed:d2:72:57:dc:68:1b:39:ef:da:7c:cd:b3:42:34:
cb:ea:b3:e1:d9:13:69:91:69:30:2c:63:49:e3:83:08:db:43:
62:9f:a3:bf:b2:77:a0:02:33:19:f7:5c:37:8e:f0:44:03:aa:
f4:af:4d:42:78:fc:24:fb:66:52:81:8d:de:cf:83:0a:b8:1e:
3c:61:be:60:e2:86:ff:fd:c4:fc:f3:0c:f4:38:04:40:39:3b:
23:88:a6:ef:70:2e:0c:9e:9c:64:b9:a5:7b:73:71:33:68:14:
87:e2:b7:8d:02:4e:8e:b5:ea:ee:2b:f2:1a:ea:10:c3:ee:e3:
31:cf:61:0c:f6:61:20:1c:ed:bb:88:5c:e5:40:7e:e4:c4:88:
1a:c2:88:f3:35:af:8a:cf:11:94:ed:fd:b8:d4:6b:94:38:d9:
47:b6:29:51:21:e4:70:21:a1:c8:aa:b6:0b:4f:77:8d:b7:3e:
a0:42:bc:58:26:ff:92:20:96:85:a4:59:75:74:68:21:1f:9b:
57:53:01:30:cb:2f:81:b2:38:97:8c:34:90:c3:cc:0a:ed:c6:
a2:5a:94:c3:86:8f:64:71:89:26:43:5f:32:57:c0:36:0b:0e:
d9:e6:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:14:16 2026 by rpki-client