
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier: luj8nNDfzvOFyqG8XLu5PjqLhTkWG3L56AXy7CXVkKo=
Subject key identifier: 71:D1:4A:14:D8:E2:6A:A1:4B:FB:07:A5:5B:D1:6C:20:9F:D8:66:CF
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number: 01A6
Signing time: Mon 19 Oct 2026 04:48:36 +0000
Manifest this update: Mon 19 Oct 2026 04:48:36 +0000
Manifest next update: Mon 26 Oct 2026 04:48:36 +0000
Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: W8KfqickGnIFwGAVrnaLVESz3rjKgbR7scLOIIYaOBw=)
2: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=)
3: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 04:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Validity
Not Before: Oct 19 04:48:36 2026 GMT
Not After : Oct 26 04:48:36 2026 GMT
Subject: CN=6ad5a124-ba4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:87:5c:86:f1:a6:a4:cc:75:d4:3c:ce:91:
6b:95:b3:ad:8b:e1:f1:9b:f3:0e:3b:86:f9:d8:41:
d7:b2:d5:61:b4:00:12:77:bd:1b:1c:73:83:56:75:
e1:f7:53:5f:14:fb:73:49:1f:91:24:18:97:24:9e:
ed:ba:2c:77:cd:bd:00:33:3a:86:f8:5e:60:00:a0:
40:fb:aa:2e:21:54:7f:03:dc:01:30:fd:da:2d:4f:
87:37:87:6b:fc:5e:97:f7:09:7e:0a:c8:69:f0:db:
29:61:da:3f:8a:8b:ff:62:9e:61:a5:57:f3:1c:f0:
ad:a2:3c:e8:82:0b:78:15:46:ac:51:f4:d1:3f:72:
a3:8a:a6:42:6f:ef:06:88:47:10:8a:d4:0b:3b:db:
22:e4:5a:b8:56:28:9d:3b:ad:27:07:3f:cb:8d:e9:
15:ac:a1:4d:69:1d:60:e2:c6:3f:52:fe:5a:fa:24:
43:fc:22:87:82:b6:51:8b:98:0d:42:29:3f:2e:dd:
c7:02:ad:43:f0:6d:26:dc:81:b6:ba:c4:e7:e7:29:
59:25:6a:f0:2e:d6:c3:0e:b3:2b:62:3d:09:86:75:
54:be:c2:3d:12:63:34:99:73:f5:0b:3b:6d:17:ec:
c2:e3:a2:1a:ee:66:d8:b8:51:1b:1d:83:a8:df:09:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:4A:14:D8:E2:6A:A1:4B:FB:07:A5:5B:D1:6C:20:9F:D8:66:CF
X509v3 Authority Key Identifier:
keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:07:12:38:9e:8d:79:32:f9:80:3d:6b:64:05:3e:aa:02:
44:e4:b9:d4:56:d9:12:b5:7a:bf:34:56:d9:67:91:af:b2:01:
b1:e4:35:6e:bb:61:29:7c:18:1e:e3:ac:83:29:2d:a2:ca:88:
4d:98:16:f3:0f:ea:e9:e5:fd:71:39:72:46:79:5e:47:84:47:
18:79:e4:c2:4a:ca:17:e7:42:10:8a:9f:f6:cd:06:d6:c7:12:
61:33:ca:16:c2:3c:f6:fb:b5:05:71:b7:fa:b1:ea:6f:04:69:
66:65:ca:ef:62:b0:22:7e:b9:3a:f0:f6:5d:63:97:d6:73:94:
8f:0c:ac:34:f8:a2:b2:2a:e1:62:eb:59:18:59:fa:42:5c:ee:
4f:76:74:da:b4:3b:23:3e:2e:bc:9a:1d:c7:63:87:70:2e:b0:
f1:03:f7:fd:08:80:77:3f:59:a4:02:02:9d:3c:55:19:0b:39:
f3:ac:46:e1:4e:27:d5:f2:6a:1f:05:ca:c8:b9:cb:a0:7f:c9:
ff:02:c9:08:4d:1b:24:77:9e:d0:5a:da:a2:55:6e:81:08:bc:
08:2e:e7:c4:b1:5c:9a:68:e2:2b:f5:51:a8:89:98:46:02:d1:
75:23:00:e5:84:e5:23:26:60:c5:be:ef:f5:cd:d8:49:01:5c:
a7:50:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:20:42 2026 by rpki-client