
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier: h4tXfKlRcXTVxeq5IetZWJcPf7ABAn/1OALMUVJYMw0=
Subject key identifier: D8:B9:8F:A2:F0:3B:B0:ED:3F:87:67:57:4F:85:A5:F9:6B:59:8C:A2
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 0806
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number: 07E8
Signing time: Wed 22 Jul 2026 21:57:48 +0000
Manifest this update: Wed 22 Jul 2026 21:57:47 +0000
Manifest next update: Wed 29 Jul 2026 21:57:47 +0000
Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: 1ArhIGITAzdJlnOOWHSJzSFRXeIvu78YBzHWNe/Cj2A=)
2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: 1duLitLlKe5JGX7eQUYs2Azf52gj3DJyaqa7K/tCUk4=)
3: 68D4AD12DE0A11F08D9C3B5C5E6F56BC.roa (hash: w5VOo/6r3NeoiKj8fNZOZ/VJngKbDV07+QpgEuw1iFA=)
4: 66667640547B11F1B35F59E4B9833773.roa (hash: xUvcOGfbKcgryK4sqev8kZ+k3b3AHJ+6QuD/2AevDnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054 (0x806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: Jul 22 21:57:47 2026 GMT
Not After : Jul 29 21:57:47 2026 GMT
Subject: CN=6a613cdc-6e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:57:15:95:d5:43:33:ba:7d:e4:85:a5:4f:
32:f5:5d:18:0b:54:27:65:41:ff:64:ff:2a:34:bd:
82:6d:8a:36:ab:33:69:9e:25:d0:17:74:e3:22:d2:
7f:d2:6c:01:d3:1d:f2:61:81:38:a3:06:74:6b:10:
6e:77:46:12:f4:80:01:f8:b1:ff:66:e6:5c:8b:19:
b8:94:02:0c:ac:38:f5:75:6e:e0:10:9e:11:3e:27:
29:c8:1a:d0:64:f3:6c:0c:10:ff:bc:5a:c4:67:59:
c8:4b:a9:5d:80:d7:4e:d6:dc:70:e7:1c:16:75:4d:
87:0f:d6:6c:4b:38:f9:91:4a:60:e2:46:0a:8b:e0:
db:f9:8f:a5:85:83:f4:52:3a:7d:16:bd:10:a2:81:
81:56:38:2c:7f:bf:68:7a:99:a7:c6:f6:91:d0:39:
14:d6:7a:33:b0:80:27:30:4e:bf:5f:9f:e4:24:40:
da:6a:99:e5:b2:8a:ba:cf:26:c1:5a:c7:6d:64:55:
d9:31:4f:da:85:f0:d6:90:97:d4:65:08:ee:9f:e5:
bd:ee:ff:62:e8:aa:d0:0e:9d:68:d8:66:5e:37:c6:
05:f8:ad:b6:08:01:e8:e4:d9:47:ac:83:d1:d1:c8:
60:c7:17:94:26:62:3f:4c:c7:7e:2a:11:ee:c9:72:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:8F:A2:F0:3B:B0:ED:3F:87:67:57:4F:85:A5:F9:6B:59:8C:A2
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:26:ec:61:94:28:14:5d:ea:11:89:b5:53:c6:18:c8:28:a3:
50:56:13:a6:14:25:b5:f7:06:5a:9f:31:ca:26:52:c7:1f:11:
0d:d8:3c:12:7a:50:cc:3f:09:07:5f:7a:9d:66:da:b4:1b:43:
6d:fb:a7:04:9c:c7:81:bd:44:f7:86:12:14:cf:e3:c9:7a:bf:
82:36:b3:54:22:c2:2b:05:e8:19:2f:6c:7d:b0:28:e6:fd:e8:
ed:13:f4:2e:5d:14:f1:ed:0e:a0:3c:11:f6:ce:38:08:42:82:
80:cf:af:a9:40:5a:8e:6c:14:4b:c0:9e:f0:93:b0:66:3b:05:
8c:f6:79:1b:85:2a:44:24:d8:04:f9:9c:05:35:42:69:40:25:
73:95:ac:de:da:c4:9f:bd:76:22:2e:59:ff:75:78:02:5e:3e:
66:13:8c:89:8a:f1:93:46:80:7e:23:4c:8c:dc:f5:96:ce:ee:
c9:52:90:f4:8d:e3:91:ed:68:d4:07:43:a8:84:9a:44:5d:e9:
c9:47:12:73:17:3c:6f:74:76:1e:37:0f:b3:65:58:03:a1:a7:
ec:55:a4:cf:77:85:a4:6b:97:6d:ab:16:26:22:ff:9c:6f:ae:
5b:6a:05:3e:2e:f2:7d:50:5d:a5:99:44:01:ba:93:88:db:b2:
3c:6a:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:21 2026 by rpki-client