
$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json)
Hash identifier: 45v/+m7kbfU6uOsIi3+l7y2gMHiyffOw33sty15AWVM=
Subject key identifier: 30:3D:2D:0F:B1:97:6C:8E:38:75:F7:6B:4A:F8:75:5C:6F:93:FB:E3
Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Certificate serial: 0454
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
Manifest number: 0446
Signing time: Sat 11 Jul 2026 00:45:39 +0000
Manifest this update: Sat 11 Jul 2026 00:45:39 +0000
Manifest next update: Sat 18 Jul 2026 00:45:39 +0000
Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: w/Ty43fD3Yy4omq/Sg4Kky9T6ntoCSf7rdNwlgi1lEQ=)
2: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: YHAl4wyL5lBLADe3tYGJfQq5g48eFSMbVbWuT+BMPaQ=)
3: 61138FD0708111F1AFA81DDF7CA30FBC.roa (hash: UXuyg07q384x+vqE80NFlYLxxP2h+t2gXIe3OeSv7hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 00:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Validity
Not Before: Jul 11 00:45:39 2026 GMT
Not After : Jul 18 00:45:39 2026 GMT
Subject: CN=6a519233-6e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:10:62:09:85:40:a9:8b:a5:4a:8b:e2:f8:
b6:f1:dc:25:0a:1e:d1:3d:2b:20:cc:44:79:e6:f1:
e9:3d:e5:76:eb:6f:85:a5:ee:85:c9:b1:8c:1c:e5:
50:5a:24:7b:4c:76:5f:7c:be:6d:b3:c9:02:82:09:
63:dd:e6:78:b4:c2:8c:52:04:ad:f4:60:0b:f9:cf:
0b:c8:3a:af:7e:b8:df:75:bb:8f:bb:24:48:c8:7c:
f4:01:dd:7e:4b:d0:e3:8e:59:7e:c9:65:97:d3:80:
f1:d7:91:c4:89:12:3a:76:19:de:19:4e:80:8d:12:
71:33:f8:e9:17:c4:87:d6:68:5e:2f:33:d1:63:fe:
7b:88:30:da:60:09:b7:ed:53:5e:91:d2:d7:97:64:
46:45:bb:ab:c5:dc:0f:d4:ce:a8:9b:4e:92:2c:e5:
c4:7e:e0:6b:96:f5:bc:1e:57:86:43:b2:0d:92:e8:
7f:3d:5e:17:1f:f5:36:96:e8:ad:5f:84:e8:28:16:
2f:51:88:59:fc:ec:2e:61:b6:f3:ab:2a:6a:3a:5c:
24:80:aa:cd:20:8a:f3:4f:be:23:06:5c:75:49:8c:
54:a4:e7:0c:4f:55:d8:71:9a:74:8f:6a:38:3b:d9:
0c:31:ef:65:f5:11:27:59:a3:d8:82:5e:62:c2:c1:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3D:2D:0F:B1:97:6C:8E:38:75:F7:6B:4A:F8:75:5C:6F:93:FB:E3
X509v3 Authority Key Identifier:
keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:bb:53:2b:58:93:46:db:3f:e2:c9:4e:1a:fd:e2:e9:e9:
62:bb:9e:73:60:a8:1a:d2:bd:e5:02:1b:7f:b2:52:1a:df:09:
fd:ed:52:da:95:61:68:9b:09:9a:01:d8:2b:97:39:7b:b7:2b:
a9:75:c2:62:a5:84:b7:52:b0:35:c8:11:bc:be:79:2e:3d:57:
36:8d:35:cf:91:32:a4:73:f0:ae:a9:4a:dd:cd:b1:4e:74:ef:
0c:2a:35:54:6c:31:59:78:85:e1:6a:4d:a0:80:e1:34:37:bb:
79:e5:89:27:8e:24:98:6a:8a:23:4c:3c:6f:8f:fa:39:84:87:
ff:6a:8c:71:1a:f6:29:5f:e2:d6:70:04:88:1c:4b:28:ee:e6:
24:13:d0:45:08:2a:5e:1c:b1:2e:ef:dc:26:24:f7:0e:16:57:
4b:c3:cb:7b:17:e7:99:13:00:9a:b5:24:e8:59:45:5e:38:ff:
a7:2c:a0:38:08:a1:a0:00:e3:75:2c:d9:95:bc:e1:e8:d1:1f:
52:c8:f1:13:02:39:ad:3c:36:70:6a:92:0e:bb:50:d0:d7:f4:
57:2a:ce:e5:4f:58:db:49:9d:11:5e:c5:c7:64:1c:59:bc:fb:
62:e3:21:ae:bd:2e:46:7d:1b:a4:99:35:63:81:bb:62:1e:e6:
f2:3e:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 12:04:41 2026 by rpki-client