
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier: GJK6QzPbJSmP6p86dUBFKsolC5z2kH6HK5pI91BpxBU=
Subject key identifier: 83:B2:B0:1F:8F:9E:2A:67:1C:3A:75:EE:E5:F9:9D:D7:04:49:B1:11
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial: 017C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number: 0171
Signing time: Tue 07 Jul 2026 05:47:56 +0000
Manifest this update: Tue 07 Jul 2026 05:47:55 +0000
Manifest next update: Tue 14 Jul 2026 05:47:55 +0000
Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: UasVCs+d2S88FKVetpBkUrDx19iSbjxOGDkbNpJUByQ=)
2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=)
3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 05:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380 (0x17c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Validity
Not Before: Jul 7 05:47:55 2026 GMT
Not After : Jul 14 05:47:55 2026 GMT
Subject: CN=6a4c930c-0b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7f:3c:d2:fb:ce:5c:c7:01:54:d9:76:7a:e0:
7c:1f:21:8d:6e:bc:96:9e:51:ea:6c:66:ba:8c:b0:
e3:eb:27:dd:1a:96:8b:50:93:93:7e:9f:e1:b8:db:
4f:f1:41:e4:a9:60:7d:33:5e:67:ba:6a:23:55:70:
2e:57:30:0d:a1:5b:29:c9:db:83:3e:99:ee:76:f8:
09:5b:2b:8c:6a:8d:cb:0a:e6:28:8d:54:89:51:51:
0f:e3:45:55:c3:58:b5:ff:18:82:0f:4d:0e:4a:7d:
05:14:ce:b1:d7:c8:f4:c7:bc:21:dd:45:a6:0d:16:
9e:aa:aa:d4:6b:34:ab:b8:b9:70:6c:69:ab:5b:28:
ac:c0:e9:f0:83:f6:b3:3b:e7:4f:dd:4c:00:45:a0:
b6:ee:4c:af:03:ba:d7:b9:e0:e9:2f:e9:ce:db:c3:
b2:36:d1:01:7a:e3:47:6a:57:50:fd:8a:97:4b:15:
d9:0b:90:bd:e0:49:a2:49:0a:bd:e5:4a:76:96:4d:
bd:03:e1:a1:ba:2e:be:fa:76:97:22:5a:3c:79:04:
0c:98:b5:5c:63:28:fb:18:c1:82:3e:39:4f:26:77:
96:d8:4c:09:b5:d9:6a:59:52:6b:00:e9:d2:0b:ea:
52:9a:3d:32:68:f5:52:91:ac:09:5a:d7:ed:01:0a:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B2:B0:1F:8F:9E:2A:67:1C:3A:75:EE:E5:F9:9D:D7:04:49:B1:11
X509v3 Authority Key Identifier:
keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:ba:33:a8:7c:4a:4f:39:e8:66:37:a6:e9:36:41:42:45:93:
8d:0f:9c:56:a6:f1:d7:70:85:16:bf:c5:8d:cb:00:d7:ea:18:
3e:79:f0:04:69:b1:9c:b0:e9:8a:12:0f:3f:39:9b:11:09:9b:
3d:b9:0a:2e:db:a4:86:4d:8a:f8:69:73:82:5a:35:ea:85:42:
1a:5b:d2:59:7c:78:b2:39:da:18:4e:a2:33:24:ca:09:2e:b1:
50:ca:0e:a7:ba:3a:f6:ea:d7:ef:b8:a6:72:4e:8f:69:9d:09:
49:77:94:fa:8b:c4:8c:94:81:80:ea:09:ec:46:34:a7:9f:e3:
13:ee:0c:17:36:1e:e7:81:5e:a6:b7:93:bd:3f:d9:3f:fd:95:
9c:fc:60:b4:05:7b:c7:bc:6f:90:ec:fb:57:4c:f6:53:ee:a9:
b9:cd:82:5c:38:c1:50:32:c3:b9:58:29:2e:e7:8a:de:7c:90:
ac:9d:09:e1:f5:d1:91:1d:8b:f7:c5:ee:0b:11:64:dd:3c:28:
d9:ce:3d:ab:92:f1:f3:1d:b0:87:95:f5:f7:ad:6a:5c:c0:7a:
48:d5:42:b0:3f:03:b3:fc:32:78:35:65:b4:91:7d:05:39:08:
d7:c9:bf:29:1c:73:d0:47:9a:83:e7:7c:0f:91:b6:66:10:bc:
6c:d8:33:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 00:01:17 2026 by rpki-client