
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
File: qKOD5jSR4Rute14s0kFBYh9NtBY.mft (raw, json)
Hash identifier: 5Z35FjkXKxpzcDgBfSknb4kGUo7os2990vx5syrEjLA=
Subject key identifier: BB:EF:B1:B8:77:16:17:61:D2:10:BE:00:F1:22:B4:A9:1D:3E:BA:7A
Authority key identifier: A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
Certificate issuer: /CN=A913BB9E/serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Certificate serial: 069B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
Manifest number: 0690
Signing time: Wed 22 Jul 2026 23:12:34 +0000
Manifest this update: Wed 22 Jul 2026 23:12:34 +0000
Manifest next update: Wed 29 Jul 2026 23:12:34 +0000
Files and hashes: 1: qKOD5jSR4Rute14s0kFBYh9NtBY.crl (hash: ZcKgq0heVDkoF3rHBqV22Pr8R4U95PvfektovDuQLME=)
2: FD62B046DF1611ED81C1BE7CC4F9AE02.roa (hash: RpPhdY8+tXmNKm2CO6PsrLMjG0gZZmTjNB6euQu9tho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1691 (0x69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BB9E, serialNumber=A8A383E63491E11BAD7B5E2CD24141621F4DB416
Validity
Not Before: Jul 22 23:12:34 2026 GMT
Not After : Jul 29 23:12:34 2026 GMT
Subject: CN=6a614e62-ae5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:c2:8e:a0:a1:de:f1:0f:24:41:87:e0:00:
9c:10:c1:76:6d:52:6c:3f:c5:69:bc:d4:37:78:ce:
77:e2:d1:f5:39:71:91:19:f4:c3:4f:7b:3d:7e:cb:
1e:6c:30:b4:d9:93:2b:69:fd:5b:36:d9:0e:88:50:
95:c7:7a:b2:34:56:5d:9b:74:dc:fa:28:07:bd:6b:
38:a4:e5:73:e0:16:28:7e:9d:d1:6b:c7:c7:f6:01:
f9:d6:4c:57:93:2c:93:1a:8f:51:1d:83:3e:01:87:
8b:57:b9:b8:d9:33:4c:07:c4:ba:c3:24:ee:be:d1:
10:a0:69:ea:15:74:87:60:19:b2:77:8a:4b:1a:d7:
92:a6:6a:04:15:10:09:fc:a3:11:7a:5b:cb:2f:43:
e2:7f:73:f2:4e:b0:20:91:0c:f5:f1:29:52:e1:e1:
06:ff:3e:a1:62:f2:dc:98:16:2c:01:b0:a3:8a:2c:
53:3b:1f:c7:46:ff:72:e0:3d:8f:11:ab:b8:f1:52:
17:d7:7b:f1:cf:3e:9e:d3:70:f5:d6:e4:36:52:9f:
37:c8:a6:c9:cb:17:6b:79:c8:cb:ab:b8:6a:9f:59:
dc:62:67:a3:5d:06:fd:70:06:b0:a1:c9:6a:c1:da:
34:74:c3:c0:da:80:c2:92:15:90:5a:fd:f5:c2:ed:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EF:B1:B8:77:16:17:61:D2:10:BE:00:F1:22:B4:A9:1D:3E:BA:7A
X509v3 Authority Key Identifier:
keyid:A8:A3:83:E6:34:91:E1:1B:AD:7B:5E:2C:D2:41:41:62:1F:4D:B4:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qKOD5jSR4Rute14s0kFBYh9NtBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BB9E/43E2C426C7F811EB80947515C4F9AE02/qKOD5jSR4Rute14s0kFBYh9NtBY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:b0:e6:ee:6c:bc:60:3f:7c:95:bc:63:75:75:f2:f7:49:e6:
42:dd:3e:26:19:9f:5b:72:e8:3d:70:92:23:75:96:ae:85:89:
ad:35:33:0e:fa:3f:fa:27:16:b5:f6:47:da:86:cb:c1:f0:e9:
f2:7e:cd:fb:37:c2:29:15:f7:94:4c:9e:bc:af:5b:d0:50:a9:
3f:c9:c5:24:a5:5d:5d:ab:9b:c5:80:27:3f:62:95:72:de:3b:
fa:3e:b9:32:38:1f:23:cd:4e:ff:10:fe:48:05:28:26:46:53:
2d:a4:ec:96:ed:9d:13:2f:8c:87:6b:04:5f:4d:b2:d1:12:3e:
6e:47:4d:89:02:ad:4b:e0:8f:14:f2:38:b7:95:69:d8:3d:c4:
1d:82:1a:95:54:83:f6:5f:1d:5f:a0:a2:7c:62:2c:67:18:36:
58:96:75:ba:62:75:e1:9a:a6:f1:d8:4d:40:d9:e3:4c:75:74:
75:c1:7c:c6:ba:4b:a7:97:53:25:0e:6c:8d:e1:1c:07:81:87:
2d:3d:db:50:e8:aa:8f:79:b3:04:93:4d:16:93:20:d2:84:10:
3b:94:1e:ef:92:0a:62:2b:32:20:7f:09:a5:35:4d:c3:af:0c:
31:e3:26:80:de:42:33:ff:73:28:3b:09:a2:ff:53:72:44:11:
b8:92:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:24:47 2026 by rpki-client