
$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
File: QOkwK3XF6hkj6n9pWOKvQQhlr44.mft (raw, json)
Hash identifier: zq9XwkpJBahM15LpbvUXxD668r1MEfaaPwQN54n3q6s=
Subject key identifier: 66:49:15:D1:58:8B:29:36:83:A1:90:1E:2E:91:3D:DF:19:9A:05:29
Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
Certificate issuer: /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
Manifest number: 49
Signing time: Thu 23 Jul 2026 10:20:49 +0000
Manifest this update: Thu 23 Jul 2026 10:20:48 +0000
Manifest next update: Thu 30 Jul 2026 10:20:48 +0000
Files and hashes: 1: QOkwK3XF6hkj6n9pWOKvQQhlr44.crl (hash: OgpBMx8wqZhdsMmciLBfs0BAZjoALEGDpIdr7GmV7t8=)
2: 2B7E65BE16BA11F18FA4AADE273D8C67.roa (hash: Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=)
3: 2C0C6AD016BA11F18FA4AADE273D8C67.roa (hash: Mo9qwFmdq75T/whkFUsqjkEWIUbTkfdU/vMW7YIniHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Validity
Not Before: Jul 23 10:20:48 2026 GMT
Not After : Jul 30 10:20:48 2026 GMT
Subject: CN=6a61eb01-09e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:5f:56:c8:43:0c:5b:de:99:4e:e0:7d:04:
e0:e4:c6:6c:31:33:73:23:ae:60:8c:b7:8b:d7:d4:
66:24:7f:b9:e0:b6:f1:29:87:62:1d:7a:cf:e5:bd:
ab:a6:a8:80:00:b8:3f:bd:e8:bc:74:82:5e:8a:a5:
e5:7d:0f:e5:15:75:4d:94:9a:46:1d:0a:ea:b9:94:
85:a0:b1:b5:95:19:10:91:5b:98:32:62:cb:c1:99:
ae:97:bc:fb:61:11:2d:65:37:52:2a:37:58:2e:fe:
c2:4b:8d:6b:4c:62:70:a9:5d:62:f7:4c:0b:c3:81:
bf:fb:f4:79:41:1f:cb:85:95:a5:61:b4:6b:9a:98:
cd:c9:33:0e:73:b9:f5:13:b8:f1:e9:91:89:c0:68:
dd:2a:42:de:95:53:03:08:8a:b4:a8:51:d1:7f:a2:
6e:5d:8d:1c:43:24:68:d9:6b:72:50:a3:65:05:02:
3c:0b:b9:c0:3d:37:e6:6f:e2:8f:02:c3:5c:7f:fa:
9c:f7:55:6e:0e:94:9e:04:36:b0:af:1f:58:53:fc:
b9:c5:f8:00:8c:13:8c:10:3a:05:2c:b4:a5:b4:a0:
cc:fd:24:d2:bd:5c:b2:c9:12:af:d8:6b:da:b6:66:
10:22:22:84:c5:f4:31:cf:44:12:e9:8f:29:77:e9:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:15:D1:58:8B:29:36:83:A1:90:1E:2E:91:3D:DF:19:9A:05:29
X509v3 Authority Key Identifier:
keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:f4:43:02:b8:fc:71:b9:ed:f3:e5:e8:29:78:97:83:0c:
2c:04:f9:69:aa:e3:44:84:5b:8e:70:43:6b:60:fe:cb:c7:42:
74:b3:43:eb:54:8b:e4:18:7b:59:7b:8b:ef:bc:68:cd:ee:96:
a3:b9:40:c7:18:bb:3c:b0:d2:ca:45:8b:0c:bf:ac:5d:eb:f9:
b7:68:2a:67:ea:c8:13:cc:0a:96:34:12:29:82:a5:63:93:6e:
3d:4f:02:86:f1:2b:5a:cb:6a:16:30:5e:dd:3d:72:4a:1b:b8:
9f:86:b2:6b:de:68:91:f3:8a:54:4a:7b:aa:aa:2f:6d:7e:e8:
1c:be:56:29:d1:8b:8a:0e:88:90:a8:35:77:94:40:a7:c5:bb:
62:9e:cf:96:b5:c3:8c:fd:c1:5b:c0:cc:9c:3a:69:8e:44:9e:
31:e1:59:a9:a4:f1:b4:bd:ec:6e:72:b9:91:cb:1c:39:c6:22:
1a:f7:10:b7:f4:2a:a8:70:b3:5b:7e:de:d8:60:44:15:9c:9d:
1a:5a:9e:24:8e:a7:45:ae:53:e9:bc:d7:0a:4c:ac:79:13:ad:
87:47:6a:fb:2c:0d:7f:7e:15:25:33:44:f5:e1:e7:06:c5:8f:
98:44:a5:6d:61:3e:03:f0:88:74:0d:fd:ba:1e:a6:ee:2a:69:
74:9d:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:00:40 2026 by rpki-client