
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
File: Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft (raw, json)
Hash identifier: d4aysEW4Jcm+IaEbFCKNPQ3TqzmR6G0qdN2yQQZ34bE=
Subject key identifier: 39:21:2C:28:94:98:9F:D3:04:51:E1:6A:83:67:6A:A2:7D:45:0E:45
Authority key identifier: 4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
Certificate issuer: /CN=A9148CCE/serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
Manifest number: CF
Signing time: Thu 23 Jul 2026 08:34:23 +0000
Manifest this update: Thu 23 Jul 2026 08:34:23 +0000
Manifest next update: Thu 30 Jul 2026 08:34:23 +0000
Files and hashes: 1: Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl (hash: UkdcQzjWu94w4EaFu3dh0HRIGffGUavaXsaoM8F0cQ8=)
2: 8FD5A938522911F0AECD911AC4F9AE02.roa (hash: 9yyOlJOhdq5a9n8HjUs77Doecig0wOxCg0TdaMSwGMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148CCE, serialNumber=4E7FEA71A447A6A16179C2697EBEE555199DB098
Validity
Not Before: Jul 23 08:34:23 2026 GMT
Not After : Jul 30 08:34:23 2026 GMT
Subject: CN=6a61d20f-21ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:75:60:7e:dd:2c:63:99:58:d2:f2:a9:23:
e5:f7:e0:2f:f5:8b:1c:d3:9d:01:eb:7c:c5:34:75:
e7:f2:6c:12:0b:9c:fc:d7:27:86:64:b3:aa:16:20:
31:d4:cc:06:58:4f:88:5c:bc:9a:c9:f7:18:51:c3:
10:c6:88:d6:e2:70:cb:97:35:dc:a3:a8:1d:36:f5:
41:0a:50:7d:ed:13:34:d0:5d:19:6a:65:52:78:ea:
70:ec:2b:2e:39:8d:75:aa:80:71:7f:14:b3:52:c7:
81:64:28:79:18:89:e5:8b:0c:88:99:f3:5b:a5:dd:
a2:54:a2:1e:30:44:7c:a0:2e:ce:65:ef:24:55:5f:
25:f9:41:c0:f7:a7:d4:30:b6:f0:4d:40:d1:0e:b6:
00:1d:2e:2a:ce:d0:95:3c:92:1d:06:dd:47:df:ed:
99:e5:fb:3f:34:d3:c3:da:1a:00:39:14:92:cf:f9:
e9:22:ea:c8:2c:dd:54:fd:7c:1b:8f:ed:6a:b1:71:
fd:6c:85:1d:d6:c2:1b:3c:23:7b:af:d9:3f:e8:81:
a4:b9:a0:19:27:77:8f:36:f2:03:06:00:f2:18:55:
e9:2b:2b:26:18:fa:2d:7e:22:5a:ff:5f:6f:91:55:
a5:93:34:dd:0f:87:59:0f:1f:13:bd:75:68:5d:94:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:21:2C:28:94:98:9F:D3:04:51:E1:6A:83:67:6A:A2:7D:45:0E:45
X509v3 Authority Key Identifier:
keyid:4E:7F:EA:71:A4:47:A6:A1:61:79:C2:69:7E:BE:E5:55:19:9D:B0:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn_qcaRHpqFhecJpfr7lVRmdsJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/8B21909C4FEE11F080379482C4F9AE02/Tn_qcaRHpqFhecJpfr7lVRmdsJg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d7:83:b3:1d:8f:46:e6:d2:50:9d:93:0c:33:79:16:33:c0:
af:90:44:b9:13:84:2b:86:d3:1f:c4:35:ed:0c:5c:b3:f0:13:
1b:a0:59:5c:4a:7c:62:43:7b:94:fb:b0:70:fb:f1:d2:5c:f8:
9b:1b:a9:01:da:ce:b6:5e:5a:13:ec:bc:73:3e:d2:f3:22:6b:
b7:2f:0f:c1:5b:33:1b:a0:3c:97:ea:85:ac:74:f6:4a:d2:1a:
15:40:7c:e6:8c:df:94:49:12:d6:79:c2:72:3e:28:0e:69:5c:
e1:8a:73:04:9c:87:39:a8:3e:4b:f5:8a:b4:52:dc:3a:5e:24:
e4:62:ff:01:0f:b4:7f:75:6e:46:41:90:fd:11:ff:37:64:eb:
71:1a:ee:5c:9d:5c:52:cd:1d:e1:92:8d:8e:b7:76:c4:8a:0f:
78:26:1a:d9:6d:22:fa:68:a4:81:3c:96:13:91:f0:3a:37:8a:
42:bd:e8:9c:c6:36:e7:68:3c:33:28:b8:b2:1d:a0:ba:54:45:
d6:16:5a:78:dc:00:7f:bd:3b:66:2b:77:2d:0c:e1:5d:23:88:
4e:05:4f:27:db:7f:ef:80:df:ed:13:0f:ad:da:12:2b:2d:ad:
20:9c:74:2d:cc:02:3a:44:1a:a2:14:60:e4:95:1c:3e:7c:b2:
db:88:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:35 2026 by rpki-client