
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
File: Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft (raw, json)
Hash identifier: Ak4uFA0v4CUzR5xsHIwjQBqMikgk+QkmKU+jde5y3Go=
Subject key identifier: 2D:07:04:DD:A9:5D:6A:94:36:99:AC:97:DF:AB:B2:21:74:1E:96:3E
Authority key identifier: 43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
Certificate issuer: /CN=A918B16C/serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
Manifest number: 2B
Signing time: Tue 11 Aug 2026 08:16:19 +0000
Manifest this update: Tue 11 Aug 2026 08:16:19 +0000
Manifest next update: Tue 18 Aug 2026 08:16:19 +0000
Files and hashes: 1: Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl (hash: 1pB2uY0/2uSQscwEaCryOFMOWEM/3x4JXLi/vUZg7oA=)
2: b3URnCNopdBPb5-olOwDCxwCfu0.asa (hash: FhVtU0L7B5W6b9aiDhTNFv0YOjbDTC+YisKb8AYU78U=)
3: 5717F26C76DC11F1B27CFF067EA30FBC.roa (hash: UnxraCxdQ4lE3he3/K4k1PrHUY4Y6JC7kU/SixWY2p8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 08:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B16C, serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Validity
Not Before: Aug 11 08:16:19 2026 GMT
Not After : Aug 18 08:16:19 2026 GMT
Subject: CN=6a7ada53-914d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:1c:14:45:6f:38:27:40:c2:ab:17:02:b3:
14:e3:31:86:67:1e:28:a2:bb:7f:d8:4a:ba:b2:5e:
f4:55:b7:f8:c9:6f:27:7d:57:e0:c0:80:4a:0b:97:
99:6b:f2:24:d7:5b:21:b2:ae:bc:03:d5:b5:2c:27:
bc:e7:40:dc:58:92:32:51:c0:97:8c:d0:f3:49:6d:
9e:f0:65:64:d8:f2:6f:b8:88:92:8d:63:bf:24:a0:
2f:69:87:03:a9:40:d1:d1:70:61:19:19:27:22:a5:
3c:0b:c4:72:a6:81:2c:59:e7:22:58:1d:86:76:c0:
ab:7f:99:4e:58:09:0c:b2:fb:e5:ae:1d:d4:eb:96:
be:4c:7b:6e:db:50:3a:19:03:98:81:8f:00:66:7b:
7b:3c:68:87:da:ad:8c:06:0a:03:87:a8:6b:93:c5:
e8:a0:c4:63:0d:5d:3b:9b:72:c3:d8:da:1a:df:54:
8f:b5:fe:7b:9e:18:74:45:9a:dd:06:95:7d:f2:a7:
be:c8:77:54:cf:5a:59:d1:94:d3:6e:b6:54:a8:ae:
d2:ce:c9:9c:88:2d:33:ab:5b:70:c1:78:bf:85:08:
90:25:63:0e:fe:75:04:b4:cc:4e:6e:f9:3a:50:ef:
2a:d1:61:e1:5b:a5:45:9f:a6:19:b7:b5:13:4a:50:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:07:04:DD:A9:5D:6A:94:36:99:AC:97:DF:AB:B2:21:74:1E:96:3E
X509v3 Authority Key Identifier:
keyid:43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1e:e4:49:ca:7d:52:22:6b:8e:48:0d:c3:92:ba:cd:6a:b3:
f8:d7:d0:bf:9d:14:01:8c:7a:9f:2a:9f:4e:c4:d4:cc:36:0a:
81:da:29:b4:c3:9e:a5:12:57:7a:84:32:39:1d:aa:6a:3c:66:
8b:32:78:a2:c9:66:82:3b:55:e6:de:f2:fd:1b:d1:5f:c3:b1:
e3:fe:a9:f9:76:39:59:cd:fa:eb:16:45:ab:5c:22:ba:49:a1:
1f:c4:0c:46:52:62:32:1d:c1:a6:01:0f:1d:34:0d:3d:75:16:
5c:0f:c4:8d:57:2c:12:80:3a:7c:e0:a4:dc:ab:1b:8c:ae:be:
63:56:0c:e1:95:cf:be:64:67:9e:0b:6f:49:24:c3:02:06:92:
88:cc:7f:c6:60:09:53:e1:a7:5b:8d:bc:36:ea:21:57:49:49:
fd:5a:9a:ca:f4:f9:f0:d9:43:bd:56:fc:45:11:f6:4d:21:df:
6f:5e:58:d0:46:5e:83:86:0c:da:4a:bf:c6:a0:b3:14:84:ea:
c3:d3:7f:52:db:25:25:6e:59:0a:6e:dd:2b:97:2e:6d:00:f0:
2e:32:3e:11:8b:d0:de:fa:4c:10:79:25:4e:98:d9:8c:55:82:
db:30:fd:b7:38:2f:62:64:ff:e7:ad:b3:7b:23:04:13:08:47:
a8:23:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:36 2026 by rpki-client