
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json)
Hash identifier: QLSDX93nGKFlkz60dqPkrvcUaS6O0Wm2305xGA07Pgk=
Subject key identifier: 7A:0A:AC:1D:E6:D3:78:2A:BE:22:25:9B:83:E6:21:0F:A3:5C:F5:B1
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial: 07A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
Manifest number: 078D
Signing time: Thu 20 Aug 2026 21:28:58 +0000
Manifest this update: Thu 20 Aug 2026 21:28:57 +0000
Manifest next update: Thu 27 Aug 2026 21:28:57 +0000
Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: ecSXPvMi1FofaH28TMk8BsZXrfjpssdUMEF82x/mpiE=)
2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: yll6EleWhluFREKT8NzETIGMZoAw4Is6iNKhftN9k0s=)
3: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: ja+InHtGIgo82Asz/+ZVF2gnztVHMmOvkEj/+OfWSAc=)
4: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: TW3Yzr4nVCh6fw/bwk2DNXvw9C9/OVS9zcojLveOPlk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960 (0x7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Validity
Not Before: Aug 20 21:28:57 2026 GMT
Not After : Aug 27 21:28:57 2026 GMT
Subject: CN=6a87719a-f7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:48:0e:4d:77:d1:6e:d2:54:90:50:78:09:
c5:de:ba:85:e1:d0:99:ab:0f:c1:a2:57:99:44:98:
72:3e:6e:10:ac:50:6c:58:5e:f4:69:f2:51:78:b9:
2a:67:2c:52:ba:d4:58:26:cb:a7:ee:83:4b:80:a2:
3d:37:40:00:3b:ee:da:ad:6d:e3:21:0d:64:12:5f:
8b:72:49:f1:00:27:3c:1e:fb:04:4d:dc:0d:6f:da:
77:40:7e:7b:90:db:14:0c:55:4b:40:3b:5e:64:eb:
b3:a8:02:41:bc:45:22:f5:83:14:c7:fb:3c:33:86:
37:03:46:1c:cb:59:23:c0:4e:c3:54:e4:6b:81:85:
6b:09:de:ca:de:25:48:22:3f:95:64:9f:1f:ed:54:
80:5f:76:1f:f4:32:63:01:42:4b:d0:7e:73:60:bf:
c1:3f:41:43:26:95:1f:01:57:7f:83:98:ef:44:94:
a8:4d:64:61:37:29:f0:44:53:fe:33:63:c8:74:e1:
a1:37:58:07:b1:6b:8d:4a:c5:d2:ce:83:75:70:5e:
08:07:fe:75:2e:f9:18:60:f7:3a:d0:d1:81:0f:64:
7d:cb:c6:4e:59:f6:e1:a8:7e:67:7a:a7:8f:38:fe:
48:fa:9d:06:55:4d:5d:ea:82:71:4b:07:83:3f:bd:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:AC:1D:E6:D3:78:2A:BE:22:25:9B:83:E6:21:0F:A3:5C:F5:B1
X509v3 Authority Key Identifier:
keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:17:4b:cf:4c:29:1d:4d:f9:44:65:ee:d1:cd:7a:5c:68:18:
31:3b:13:8b:36:36:97:2c:80:b8:0e:ea:1e:58:00:af:e0:54:
e8:ba:69:c4:1b:85:6e:c1:cd:13:2e:7a:56:68:72:f2:bc:3b:
8a:90:d4:50:5a:ac:af:17:b5:d3:6f:c9:a6:63:7e:15:d8:16:
76:98:d6:3f:95:77:00:6c:89:fd:c8:48:84:e6:df:3c:8a:9b:
ad:25:e3:48:f5:80:5b:1f:95:12:5c:13:a1:d9:1f:ac:49:50:
fd:17:b9:b0:f5:d7:74:bc:b8:a5:c9:11:10:1b:d5:84:0d:55:
ca:c7:ad:0e:4b:20:18:74:e5:50:29:47:52:1f:c4:af:2a:5d:
04:a6:96:97:c4:20:32:50:d8:8f:d5:bf:8b:21:31:43:fe:1e:
56:e2:e2:eb:11:ec:43:5c:58:61:bf:f5:f2:97:84:b3:1d:ee:
cf:2d:b4:91:9d:89:a8:3c:c1:cb:02:e8:5a:72:6a:fa:88:11:
dc:0a:f2:7c:f0:15:d2:73:5c:61:2d:ec:bb:04:41:94:da:45:
a5:4b:b5:65:12:3a:3b:da:c8:bc:5e:3e:67:eb:43:97:68:14:
4b:11:62:fa:fd:2c:bf:56:8d:99:ad:db:b0:be:61:5c:36:c6:
66:a5:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:53 2026 by rpki-client