
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier: 6ZkSihTDv7g+2zP7EermOutZciFGdier9TmJQkZtqcQ=
Subject key identifier: F6:F7:4D:51:80:59:5F:93:98:4E:41:E4:8F:7C:E7:E9:F1:5B:A6:15
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: 029F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number: 0291
Signing time: Thu 23 Jul 2026 02:56:41 +0000
Manifest this update: Thu 23 Jul 2026 02:56:41 +0000
Manifest next update: Thu 30 Jul 2026 02:56:41 +0000
Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: WNkTGdHtL+0uM6g4/CGVepAPZ/hWUqlXdG9D7rpDr1E=)
2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: Jul 23 02:56:41 2026 GMT
Not After : Jul 30 02:56:41 2026 GMT
Subject: CN=6a6182e9-82f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:67:0c:42:55:e5:fe:5d:e6:6b:08:d8:aa:
a8:fc:b8:a5:c2:16:b2:12:8b:58:c5:83:e9:8b:07:
06:e1:8b:48:c7:a8:a0:b0:10:f8:17:25:79:96:8e:
16:f1:38:71:f8:f1:e0:41:22:b8:3f:6b:1d:4a:64:
ac:bc:96:4f:30:b5:7c:fc:54:00:2e:e7:99:5b:85:
8f:60:26:6d:3a:a8:f9:30:97:0d:11:ae:bf:4f:10:
de:5f:63:89:7f:5a:61:2c:b4:f3:f1:e5:b4:03:e8:
92:a2:fa:a6:46:50:09:d4:b6:10:b8:2e:22:f3:67:
e3:5b:bf:1e:84:32:b6:df:41:af:e0:0e:a4:4b:b0:
be:1b:f7:ca:a0:dc:46:7c:ea:d4:b3:26:9b:44:5f:
6b:d0:2f:3b:94:49:4b:be:87:7f:35:d7:50:6d:59:
e0:11:68:10:27:f4:04:cf:3a:1e:24:c3:d4:12:8a:
17:db:71:76:23:63:67:67:71:5e:29:2b:44:bd:a0:
5e:b3:41:dd:9c:da:62:2d:1d:f7:dd:34:bd:7c:08:
77:11:0d:7a:ea:c3:58:61:51:e2:9b:b6:ca:0f:b5:
17:e2:05:67:8a:3e:21:5b:d7:58:8e:3f:0d:a3:8a:
1b:a8:83:24:e1:44:57:2b:58:cf:e8:c7:a4:81:b8:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:4D:51:80:59:5F:93:98:4E:41:E4:8F:7C:E7:E9:F1:5B:A6:15
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:82:dd:56:75:f4:f4:a2:46:eb:42:4f:2e:8a:ec:66:4d:ee:
92:8d:0c:e5:a0:a3:3c:24:80:55:91:fe:85:7b:d7:74:d4:75:
cb:3f:d6:55:a3:b0:fa:41:72:29:fd:f5:1d:1b:9d:69:5d:f0:
37:3e:c9:a7:31:70:af:55:9a:5c:b2:2d:10:7f:d0:89:86:de:
60:1c:e8:62:68:a7:56:de:1f:68:54:62:6f:6e:0a:02:cc:2c:
7b:bc:d9:82:c7:d4:be:e3:b9:a1:ab:7c:d4:6f:2d:ab:e7:78:
8e:19:da:1a:d9:0f:62:59:e6:2f:6a:31:82:29:89:61:b7:e2:
07:5a:f7:13:42:f5:a0:9b:62:ba:43:1c:35:68:aa:0d:4c:59:
9b:fc:35:55:e9:f6:0a:6d:7a:b1:2f:36:2b:ba:40:96:5f:8f:
e0:46:d5:4c:4c:98:67:e0:23:65:27:80:6a:67:b1:25:aa:58:
ff:70:e2:49:00:d8:e4:cd:01:59:1d:d6:10:6a:77:cb:c3:60:
68:1b:ef:30:55:b3:53:cf:f6:41:8f:4d:f9:1e:58:57:0c:ac:
a7:0a:61:76:3b:0d:e3:f0:a6:73:4d:da:10:08:df:61:e2:5d:
47:d3:13:57:f3:2c:ae:04:02:eb:6e:79:cd:28:0b:fc:e9:90:
37:04:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:03 2026 by rpki-client