
$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
File: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft (raw, json)
Hash identifier: +er+lTxJqM/Fw69IRGfuh/tRU9vgCy2TsXV7dQv9ZsM=
Subject key identifier: 8F:20:3B:51:BE:8C:DF:43:05:1A:1F:44:B1:4A:05:78:45:54:06:09
Authority key identifier: 40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
Certificate issuer: /CN=A913089B/serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
Manifest number: C5
Signing time: Thu 23 Jul 2026 08:47:07 +0000
Manifest this update: Thu 23 Jul 2026 08:47:07 +0000
Manifest next update: Thu 30 Jul 2026 08:47:07 +0000
Files and hashes: 1: QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl (hash: IErslzxY2v7LvSqqY7KvpJw18T98bi8WNQRehyFQN+k=)
2: AE811872614711F0B811645EC4F9AE02.roa (hash: CEPtXkuVKx6QKp3MVtGTrXzO5plriy+U5ciLSfemG7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=403F2E7E4DAB13C419C68690C9499547F2C58FC4
Validity
Not Before: Jul 23 08:47:07 2026 GMT
Not After : Jul 30 08:47:07 2026 GMT
Subject: CN=6a61d50b-b739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:b4:b5:14:1e:22:4c:3b:a4:a7:01:00:a2:
b2:57:cf:2e:0d:2a:5e:54:5a:1b:b3:dc:84:f1:bd:
77:7c:a1:4a:cb:3c:65:64:3f:ee:73:00:e2:3c:70:
72:31:8c:a0:b2:c6:da:ed:12:64:3d:58:fc:76:73:
f6:ce:2b:be:d4:63:e4:d2:a3:8a:78:65:39:50:2a:
85:b5:b9:af:58:1a:c2:bf:e3:02:8f:d6:1c:ca:e5:
c2:ad:b9:00:06:04:e9:23:08:ed:ee:1b:86:68:41:
c8:f2:d3:b0:5a:3b:99:2f:3e:e3:4a:ed:f6:b7:54:
b1:6f:9f:c2:ac:8f:f5:f6:75:8e:00:f3:29:81:0d:
0c:9b:ab:71:35:69:92:56:d2:27:3f:ee:f4:67:29:
95:a6:19:38:d7:55:d9:b8:44:64:21:83:1c:c9:e2:
11:4c:5d:45:42:1b:99:95:26:dc:25:5d:d6:7b:9e:
7f:c0:91:5c:c0:c8:0e:5d:f4:23:f0:be:0f:ba:2d:
90:90:65:ad:17:4b:a9:ac:be:6c:7c:5e:10:f4:07:
88:76:5c:3a:4e:ff:ef:7e:d2:6e:0a:0f:10:cb:07:
8b:0a:3e:35:2f:d8:7b:8f:85:0a:aa:8f:1f:56:78:
fe:91:3d:bf:6e:2b:63:32:22:a2:e8:07:6b:68:24:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:20:3B:51:BE:8C:DF:43:05:1A:1F:44:B1:4A:05:78:45:54:06:09
X509v3 Authority Key Identifier:
keyid:40:3F:2E:7E:4D:AB:13:C4:19:C6:86:90:C9:49:95:47:F2:C5:8F:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/544C2050614611F0B4864E5AC4F9AE02/QD8ufk2rE8QZxoaQyUmVR_LFj8Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:01:1f:ed:ea:ed:1a:2e:ad:86:25:20:c4:0f:0b:49:f2:e2:
62:1c:33:31:16:87:41:30:02:29:87:ab:52:2d:0d:56:8e:5d:
28:99:51:8e:a0:a5:68:16:1f:06:54:2d:2a:85:68:c7:4d:ba:
d4:76:26:9b:9e:a6:70:a5:b6:cc:7c:23:d0:fc:15:dd:43:ec:
c6:ca:27:96:48:bc:9c:f6:25:1c:fe:1e:50:32:d1:72:33:8a:
3f:73:7f:7d:2c:4d:12:19:7c:4d:df:da:af:c3:2b:dc:a4:11:
16:77:e9:f2:49:82:cb:5c:06:d0:46:6f:a9:0d:52:f7:ad:0c:
34:c8:e7:54:c5:5d:cb:46:5e:7a:23:ce:84:86:30:08:60:e9:
bc:7d:f6:32:60:66:f9:aa:28:cc:98:ed:0f:91:55:3b:85:44:
2f:9a:23:ef:47:c6:a7:dd:66:f9:9e:33:06:e3:ce:af:ea:91:
1c:b7:3e:02:3b:70:2f:fc:42:e2:9a:e3:3c:9b:2e:1a:f7:2a:
14:a8:79:68:63:5c:b0:e0:09:05:48:59:72:3b:d9:6a:7f:b6:
2f:4f:1d:ee:5c:0b:69:a1:58:80:d7:92:ce:a3:10:83:08:c8:
f0:9a:10:57:84:d0:e1:b7:38:6c:eb:c8:d8:5d:9f:20:fa:75:
dc:01:ae:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:17:43 2026 by rpki-client