
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json)
Hash identifier: kEz1epDq6ejF0OOQ1NL+sqFW6dvFteXfjl6LggmjS/s=
Subject key identifier: C6:1B:B6:47:59:68:2D:DE:2F:49:1A:E5:CD:5B:93:EF:D8:1F:03:55
Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Certificate serial: 0306
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
Manifest number: 02FB
Signing time: Thu 23 Jul 2026 02:10:30 +0000
Manifest this update: Thu 23 Jul 2026 02:10:29 +0000
Manifest next update: Thu 30 Jul 2026 02:10:29 +0000
Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: 4O1aPvaTPocILWgoQPkM8rpNuWlQVm6DSgFCKgG34h8=)
2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: 8pnF8r5Xhn3OD85TXM+iL6QbA+jKGQalG5vIFE6zqm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9
Validity
Not Before: Jul 23 02:10:29 2026 GMT
Not After : Jul 30 02:10:29 2026 GMT
Subject: CN=6a617816-51ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:78:be:d6:02:06:53:14:a6:11:58:20:67:
ee:ad:a7:b6:c9:e4:95:df:97:e3:b3:98:ef:4f:19:
2f:74:7b:7d:51:6f:55:c6:16:31:33:8d:aa:f5:5c:
71:52:1d:35:71:c1:4e:08:c5:5b:7a:a7:7e:e7:a8:
39:83:5c:2a:89:dc:a5:bb:2b:8a:04:ca:de:5d:30:
64:f2:1a:cb:76:db:17:6e:e2:e3:72:2c:12:c2:0e:
2d:30:d4:d5:56:34:5f:39:00:e6:41:7e:f6:60:42:
7a:57:32:c7:c8:cd:36:64:b7:be:7f:b5:db:84:3b:
2f:fa:b8:4c:54:4b:82:db:21:97:55:b4:cd:30:74:
8f:9a:a9:b6:95:30:6a:4d:28:b3:b3:06:7a:ee:70:
a9:d3:cb:27:9f:64:55:01:16:ed:96:53:d2:2e:be:
71:1b:1f:5a:a7:d4:d7:d7:02:07:2f:52:b5:08:ac:
79:d2:12:50:4c:32:9e:c2:3a:cc:a2:dc:1a:be:0e:
ff:14:5a:d9:42:c3:4c:86:06:0a:bf:57:09:ec:77:
53:da:13:a0:16:2e:cb:1f:48:ca:37:b0:f6:c1:94:
33:33:e1:75:88:e8:d6:9e:91:62:6b:69:ce:e5:98:
9b:23:ab:56:1e:50:e2:8a:e4:c6:c9:e3:ad:88:b0:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1B:B6:47:59:68:2D:DE:2F:49:1A:E5:CD:5B:93:EF:D8:1F:03:55
X509v3 Authority Key Identifier:
keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:a0:cc:c4:59:bc:58:68:b0:61:ce:1f:9f:ba:5a:aa:c0:6b:
11:7c:ac:29:33:16:d3:36:97:41:f1:7d:b6:09:9b:82:c7:ef:
5a:53:fb:c8:8b:14:1d:93:a5:6e:c0:bb:79:50:d7:b5:45:50:
0e:29:a1:20:dd:44:27:1f:0f:f1:db:55:e0:27:fd:7f:fa:18:
65:f1:93:9f:54:1d:7b:65:0b:a5:c9:7c:97:96:b4:f6:56:2d:
d8:0a:28:16:a2:98:f5:9d:9b:ec:24:7b:ca:c7:57:58:1d:98:
1c:cc:76:b4:71:84:d3:19:2c:97:3a:13:79:0b:7a:d8:dc:8b:
3f:70:79:21:98:58:a3:1a:f3:4b:fb:15:09:39:92:bb:3d:82:
84:b1:76:99:64:96:b7:90:e5:bc:b5:87:81:99:e8:97:a7:84:
13:1e:e8:ab:ac:b7:86:67:99:90:a8:00:cb:c3:05:b3:44:66:
c1:18:f8:50:15:2f:f4:f7:02:e6:af:a7:ad:b4:bf:37:bd:46:
95:7b:d6:07:9c:bf:ac:78:c9:04:19:db:45:62:86:c9:11:37:
bc:9c:0e:0c:8e:91:aa:3b:33:e5:ab:ab:f4:48:85:ba:e6:da:
10:02:4f:5a:00:86:ab:9d:a2:46:3f:3d:ae:16:eb:cb:1d:6c:
1e:49:a1:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx
QjUxMTNEQjkwHhcNMjYwNzIzMDIxMDI5WhcNMjYwNzMwMDIxMDI5WjAYMRYwFAYD
VQQDEw02YTYxNzgxNi01MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKl4vtYCBlMUphFYIGfurae2yeSV35fjs5jvTxkvdHt9UW9VxhYxM42q9Vxx
Uh01ccFOCMVbeqd+56g5g1wqidyluyuKBMreXTBk8hrLdtsXbuLjciwSwg4tMNTV
VjRfOQDmQX72YEJ6VzLHyM02ZLe+f7XbhDsv+rhMVEuC2yGXVbTNMHSPmqm2lTBq
TSizswZ67nCp08snn2RVARbtllPSLr5xGx9ap9TX1wIHL1K1CKx50hJQTDKewjrM
otwavg7/FFrZQsNMhgYKv1cJ7HdT2hOgFi7LH0jKN7D2wZQzM+F1iOjWnpFia2nO
5ZibI6tWHlDiiuTGyeOtiLDbEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYbtkdZ
aC3eL0ka5c1bk+/YHwNVMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy
NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx
dVJFejZXTHY5LUliVVJQYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANqDMxFm8WGiwYc4fn7paqsBrEXysKTMW0zaXQfF9tgmbgsfvWlP7yIsUHZOl
bsC7eVDXtUVQDimhIN1EJx8P8dtV4Cf9f/oYZfGTn1Qde2ULpcl8l5a09lYt2Aoo
FqKY9Z2b7CR7ysdXWB2YHMx2tHGE0xkslzoTeQt62NyLP3B5IZhYoxrzS/sVCTmS
uz2ChLF2mWSWt5DlvLWHgZnol6eEEx7oq6y3hmeZkKgAy8MFs0RmwRj4UBUv9PcC
5q+nrbS/N71GlXvWB5y/rHjJBBnbRWKGyRE3vJwODI6Rqjsz5aur9EiFuubaEAJP
WgCGq52iRj89rhbryx1sHkmh4w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:41 2026 by rpki-client