
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier: frYGDLbKyRDgunODRuPO3/UYXBROqMziLrqvF5g9oRM=
Subject key identifier: 38:BA:0D:C0:80:14:1E:CC:26:75:38:43:68:4E:C8:F5:2D:FA:0A:3F
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number: 0800
Signing time: Wed 22 Jul 2026 19:33:52 +0000
Manifest this update: Wed 22 Jul 2026 19:33:52 +0000
Manifest next update: Wed 29 Jul 2026 19:33:52 +0000
Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: zfT9aN7tLKwZZolWURIuzgpZ35ua5aiIvADO6l2J7xk=)
2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Validity
Not Before: Jul 22 19:33:52 2026 GMT
Not After : Jul 29 19:33:52 2026 GMT
Subject: CN=6a611b20-1556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:0f:33:7c:71:3e:1e:8e:86:05:5e:da:d2:
01:d4:53:10:b4:21:c8:e1:93:82:ec:e8:00:21:d3:
05:d4:2f:d2:50:25:cf:e4:d2:4e:ac:d9:50:34:86:
36:c2:fd:67:f5:7c:ff:ec:55:3e:fd:ce:38:9f:f3:
19:3b:b5:37:e1:8e:0c:c6:cd:d4:12:32:72:ab:4a:
0d:f1:c8:3f:42:12:e9:0d:6d:2f:f4:85:b2:57:13:
03:5c:37:ec:d1:8f:58:03:94:3e:64:74:2e:cc:8c:
8a:15:ed:9f:38:64:cd:60:7b:f6:f7:20:04:56:50:
8e:37:37:8b:2c:ab:2f:87:dc:4e:66:36:6e:84:44:
2b:78:52:36:bc:37:37:ed:7d:c1:ff:5c:d6:f4:b7:
45:1c:e3:05:4f:5e:5c:23:2a:37:7e:1c:58:77:ff:
31:0e:51:c0:94:e9:c1:55:20:7a:79:86:22:ee:7b:
af:4d:5c:96:b4:78:a6:0a:cf:db:e1:8d:6a:b8:cb:
4a:eb:31:de:13:35:03:50:fb:b5:1b:19:d2:c0:c0:
ba:f1:23:58:9f:54:a2:65:eb:59:56:c7:34:d1:b6:
2c:19:04:59:65:4e:5e:cd:52:5c:1e:37:0b:7f:1b:
0a:58:10:48:8c:0b:57:19:a8:44:31:e8:d1:b9:5f:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BA:0D:C0:80:14:1E:CC:26:75:38:43:68:4E:C8:F5:2D:FA:0A:3F
X509v3 Authority Key Identifier:
keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4a:0b:2f:b1:18:32:a2:63:f4:fd:88:9c:b0:53:d4:22:79:
6e:55:40:70:51:ff:51:eb:64:27:87:54:2e:81:ad:3d:ed:cc:
0e:72:01:10:a3:30:da:87:a0:10:b1:66:5d:fb:34:71:d9:d4:
76:9c:fe:6c:77:4f:77:e1:42:ae:81:32:13:61:75:e4:c1:cb:
4d:34:86:2e:90:fc:7b:ad:a6:83:fb:cb:6c:cd:6c:c3:cf:8e:
88:ff:d5:81:73:23:c5:96:27:af:62:ac:53:c0:35:7c:6d:c6:
99:0c:9b:b1:18:3b:da:c3:21:f1:96:fd:75:35:79:df:f9:c4:
aa:ba:40:81:5d:76:4c:26:c2:f4:b5:ca:3f:27:c2:7e:ca:99:
2f:c6:b5:ad:e0:75:3a:84:51:b4:60:bf:50:f0:64:ac:72:4a:
d8:05:0e:bf:b2:9e:0c:da:92:00:35:27:e9:9a:4c:b7:e3:8a:
87:56:d5:70:a2:f7:11:42:01:fb:38:8c:aa:88:d8:12:94:c9:
02:e4:34:31:53:80:21:7d:83:2d:10:89:3c:a6:75:1d:1d:07:
50:c0:c3:fb:ef:00:96:66:61:47:2f:4b:7c:80:b0:48:d3:eb:
f4:92:64:a5:90:3a:d3:a5:63:56:dc:e0:e2:33:fa:6c:bd:e2:
9b:1c:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:29:00 2026 by rpki-client