
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier: OpltGWVxclU1W71Fc4NM866Oivux7lmwmnYSoUJ0LVk=
Subject key identifier: 73:C5:50:41:11:6C:13:16:21:C0:73:78:3F:AE:3E:A7:D8:D9:6D:D6
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number: 0138
Signing time: Tue 11 Aug 2026 05:02:55 +0000
Manifest this update: Tue 11 Aug 2026 05:02:54 +0000
Manifest next update: Tue 18 Aug 2026 05:02:54 +0000
Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: PWhX7OX4EmwiIQxM2bI9pKjHWR5nMyFYlXqGwORDTzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 05:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Validity
Not Before: Aug 11 05:02:54 2026 GMT
Not After : Aug 18 05:02:54 2026 GMT
Subject: CN=6a7aacff-1402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:bf:f1:fe:5f:29:e8:ca:7f:cb:ca:bf:72:
5c:d7:8f:a1:22:8b:43:cd:e7:2e:d4:a0:ad:df:47:
70:24:ea:fe:43:e8:ed:88:21:61:80:70:90:14:54:
eb:0e:f7:7d:d6:6e:d0:49:be:b9:8e:0f:3b:62:1a:
23:5c:21:89:c5:ff:8a:6b:28:ca:11:90:e1:c4:c0:
bb:7e:e1:29:15:5b:b4:1b:5c:38:b8:4e:56:01:ec:
59:9c:e7:43:1a:56:b9:29:94:a3:63:0f:9e:10:3b:
d6:e0:74:a8:3a:28:ff:09:1b:de:e5:35:87:c9:7b:
56:9d:6a:7d:19:52:b5:a9:e6:78:98:8a:46:f7:ab:
c1:7a:50:a1:d8:c3:49:9c:f1:c0:cc:d4:c0:cc:8a:
10:ae:90:b2:54:1a:09:f5:73:3e:f6:34:8f:aa:7c:
a4:2c:36:67:fb:11:f9:ce:d5:36:45:04:45:3d:6b:
c3:08:e4:87:f2:96:25:50:09:c4:a8:d3:da:fd:64:
dc:4f:5a:30:5a:06:ac:53:7b:53:43:e4:52:f9:c1:
08:30:a0:90:a6:ad:d9:a2:0b:a4:41:b7:c0:f8:af:
11:5e:38:7f:91:b4:6b:e5:e5:9f:0a:9a:95:1f:db:
a1:98:45:b9:b9:3e:75:08:8a:e6:af:d2:48:19:b2:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:50:41:11:6C:13:16:21:C0:73:78:3F:AE:3E:A7:D8:D9:6D:D6
X509v3 Authority Key Identifier:
keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:01:23:36:e0:e9:19:f2:21:63:42:dd:6b:67:67:53:be:14:
d5:f9:31:2e:9f:84:76:ee:e8:ff:e3:18:43:93:6f:ec:d4:f9:
3b:45:07:81:df:a5:f7:e2:1f:69:6f:89:73:dc:85:e2:3d:f8:
4e:3d:21:1c:bb:88:dd:fa:3d:97:78:28:63:91:80:60:d4:b8:
0f:c5:43:fb:93:dc:2b:64:2e:56:00:5d:ef:c5:5d:1c:0a:f4:
16:a3:fb:64:28:82:c8:79:75:e8:1f:2c:67:35:9f:77:11:08:
e2:af:90:ee:5c:2e:1f:13:92:d9:de:80:0b:09:70:f9:79:33:
1d:13:5d:4f:ea:4d:bc:fc:9c:6a:cb:a3:49:78:44:59:bb:0f:
a1:8c:02:2d:07:bf:b7:7a:88:98:02:a1:ba:e4:0a:df:94:9b:
ad:e4:a1:22:7a:3a:4a:ce:5f:c1:9a:78:d8:22:8f:e9:ec:9d:
45:c5:a8:d2:15:2b:0c:ee:db:44:c2:82:cc:da:b7:80:91:a5:
c1:29:3d:f3:1a:d8:b9:36:70:fb:11:d0:84:8a:ec:0e:a8:42:
c7:20:bb:e8:3f:51:50:72:75:3f:d3:02:95:26:a2:cd:6e:ff:
1c:80:64:c6:38:46:83:fe:26:6e:c1:0a:8d:86:d6:b9:97:ce:
bc:2a:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:29:51 2026 by rpki-client