
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json)
Hash identifier: 0V2BKeo6/fn1vOIWXR4jCH+tlqb9xEqxafz+Q6wwtH8=
Subject key identifier: B9:5E:F9:BA:72:28:89:8D:1B:A4:94:6F:2E:C7:B6:40:EB:80:FE:51
Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12
Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
Certificate serial: 0D76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
Manifest number: 0D72
Signing time: Wed 22 Jul 2026 18:13:13 +0000
Manifest this update: Wed 22 Jul 2026 18:13:12 +0000
Manifest next update: Wed 29 Jul 2026 18:13:12 +0000
Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: t+Pm7hJmvNJlgPkr3iBIvzHndV6JqtMWH1667nET+KM=)
2: 95693F483EFC11F19C051D00C6833773.roa (hash: M5SN5EGxc5NyHEJDLm2TcpSC8S8Y0BYtXOyoPOm7xl8=)
3: CEFC9F4C3EFD11F18502D769C6833773.roa (hash: FVKpYfCHPdPaELMYVb2ZrEZUKTclZWOqDrHvXakeCfY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl
rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412
Validity
Not Before: Jul 22 18:13:12 2026 GMT
Not After : Jul 29 18:13:12 2026 GMT
Subject: CN=6a610839-38ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:2f:60:49:2b:f8:dd:82:29:24:c5:64:df:
d0:7a:b0:6f:96:1c:31:06:8b:b3:e4:58:52:f1:31:
56:92:7c:7d:9a:a2:1a:94:b3:cd:2e:ea:a8:50:30:
35:12:b5:6b:c6:80:13:d4:58:8e:95:89:ef:f4:91:
30:b7:0c:49:50:9b:d1:40:46:ef:57:0e:43:77:bf:
e6:c1:ca:9e:c0:e0:d1:c1:55:6e:5e:64:f3:09:31:
4f:43:ac:1e:aa:34:11:75:90:f0:9f:e4:b4:db:2d:
fe:bd:49:ff:4b:de:45:97:32:70:9a:f9:b4:a1:dc:
37:0d:32:33:41:22:4a:b8:43:93:ad:f0:65:a2:ba:
0f:94:20:51:3b:9d:0b:34:c0:a7:cb:ad:3c:45:43:
87:1e:60:34:a4:c2:89:c5:af:09:b6:ab:c9:a6:c8:
de:e6:ef:27:c3:b7:df:8a:63:b1:16:03:01:5d:0c:
33:77:c1:11:3f:c6:a4:f1:28:cb:55:99:b7:fc:dd:
76:79:d2:ca:24:40:7f:d2:dd:1b:be:18:7f:c6:0f:
9e:47:18:5f:2b:65:07:97:dc:8d:70:d1:09:ac:11:
1b:1f:5e:c9:2e:80:bd:f4:b6:d2:c5:f5:fc:c1:f5:
ce:c7:f4:92:33:3f:27:2f:69:23:ae:ea:93:96:3e:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:F9:BA:72:28:89:8D:1B:A4:94:6F:2E:C7:B6:40:EB:80:FE:51
X509v3 Authority Key Identifier:
keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0c:0c:dc:a3:5f:f6:56:f1:8f:3f:2e:e4:ec:49:1f:b2:53:
83:bd:58:53:18:50:98:04:33:9d:ec:34:42:71:0a:3a:23:d1:
48:62:fd:f3:42:83:81:85:f9:76:4b:04:0a:29:52:55:ec:2e:
82:01:50:9e:06:27:00:41:3a:b4:75:84:26:74:32:59:07:af:
d6:12:a3:46:8d:dd:2e:64:e7:1f:3c:c9:16:8e:e9:40:a6:24:
70:62:72:f0:24:26:b4:f2:4a:71:b0:ac:21:a9:df:a2:92:83:
42:f7:2f:f8:3f:d0:7e:3f:9c:20:ec:74:6e:38:3a:be:6f:c5:
30:35:e8:c4:bc:f4:39:87:20:99:56:3e:63:06:72:cc:bd:bb:
80:ec:6f:cf:e6:45:00:67:07:ea:1e:b3:52:f5:ef:1c:1c:5e:
fe:13:83:b5:88:7a:00:11:f0:3e:3d:d3:c3:80:4a:cf:60:84:
6b:2e:3a:3d:58:fa:df:95:2a:70:c9:1d:87:f0:4a:6b:ae:c7:
ed:8b:6c:5d:29:b1:5c:f1:ea:49:c6:e0:e3:00:86:1d:64:20:
d9:5f:1d:84:99:79:dd:cf:62:ea:b5:08:42:5d:80:ad:dd:b7:
a1:a2:e4:21:7c:34:d5:99:83:51:0e:a7:7c:46:de:d8:e2:83:
76:9f:99:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy
ODcyNEU0MTIwHhcNMjYwNzIyMTgxMzEyWhcNMjYwNzI5MTgxMzEyWjAYMRYwFAYD
VQQDEw02YTYxMDgzOS0zOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjVQvYEkr+N2CKSTFZN/QerBvlhwxBouz5FhS8TFWknx9mqIalLPNLuqoUDA1
ErVrxoAT1FiOlYnv9JEwtwxJUJvRQEbvVw5Dd7/mwcqewODRwVVuXmTzCTFPQ6we
qjQRdZDwn+S02y3+vUn/S95FlzJwmvm0odw3DTIzQSJKuEOTrfBloroPlCBRO50L
NMCny608RUOHHmA0pMKJxa8JtqvJpsje5u8nw7ffimOxFgMBXQwzd8ERP8ak8SjL
VZm3/N12edLKJEB/0t0bvhh/xg+eRxhfK2UHl9yNcNEJrBEbH17JLoC99LbSxfX8
wfXOx/SSMz8nL2kjruqTlj6aaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLle+bpy
KImNG6SUby7HtkDrgP5RMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1
NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1
QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2
VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALwwM3KNf9lbxjz8u5OxJH7JTg71YUxhQmAQznew0QnEKOiPRSGL980KDgYX5
dksECilSVewuggFQngYnAEE6tHWEJnQyWQev1hKjRo3dLmTnHzzJFo7pQKYkcGJy
8CQmtPJKcbCsIanfopKDQvcv+D/Qfj+cIOx0bjg6vm/FMDXoxLz0OYcgmVY+YwZy
zL27gOxvz+ZFAGcH6h6zUvXvHBxe/hODtYh6ABHwPj3Tw4BKz2CEay46PVj635Uq
cMkdh/BKa67H7YtsXSmxXPHqScbg4wCGHWQg2V8dhJl53c9i6rUIQl2Ard23oaLk
IXw01ZmDUQ6nfEbe2OKDdp+Z6w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:17 2026 by rpki-client