
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: 0Uho7yOLR+7uLL1fb/U+6bdqNzSlEekO9bFITgBdun0=
Subject key identifier: 12:DB:F4:4E:AF:B9:89:80:2E:5A:77:63:AA:62:29:71:F5:BE:87:1D
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1BEE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1BE7
Signing time: Wed 22 Jul 2026 16:19:56 +0000
Manifest this update: Wed 22 Jul 2026 16:19:55 +0000
Manifest next update: Wed 29 Jul 2026 16:19:55 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: 6NepI5edXUtQURqN4JdFCTHjwPp5JSuR5/CSZNClDkA=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: VUPltuoFww8hZ1Urrtv19HM0IQZ3a1bmc12QvfJk9Ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7150 (0x1bee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Jul 22 16:19:55 2026 GMT
Not After : Jul 29 16:19:55 2026 GMT
Subject: CN=6a60edab-5967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:89:55:8c:f4:b8:bb:a6:47:61:a4:79:fa:
ef:e8:22:37:f0:82:80:bc:fe:66:7d:b5:af:99:62:
c0:7b:74:09:e9:19:d6:94:ce:51:01:a6:46:89:59:
bd:14:00:5f:aa:37:1b:54:6f:76:00:ac:6a:19:4d:
52:84:b7:d8:0a:27:fd:73:39:71:d4:6a:d0:e8:ff:
94:b0:db:a0:ff:0a:e0:2d:97:d3:ce:1f:d8:71:15:
a7:a5:62:80:86:d5:1d:a5:f2:6d:0f:9a:bd:f5:27:
e6:e8:f4:e9:87:33:10:f3:fa:38:b5:57:da:3a:6e:
15:a7:8b:ab:9a:d5:6e:5b:04:61:d7:f5:c8:1f:83:
c8:8d:fc:07:06:e0:e4:ac:5a:82:67:df:56:03:c0:
b8:8e:47:dd:75:a1:e5:49:53:bc:ed:b5:92:75:1c:
17:04:83:63:ec:c8:51:5c:26:55:df:ad:85:24:2b:
6a:7a:09:1d:30:d9:98:09:dd:be:69:26:e4:59:a4:
f8:60:84:6c:81:8c:50:4d:e2:67:65:97:7d:30:8f:
99:e6:3a:c4:84:83:10:fc:53:6f:d3:a9:a1:c7:65:
9e:dc:eb:c3:48:74:36:f2:4c:3e:6e:05:2e:5b:c8:
c6:ff:6c:2e:cc:84:09:ee:04:17:27:18:36:8e:32:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DB:F4:4E:AF:B9:89:80:2E:5A:77:63:AA:62:29:71:F5:BE:87:1D
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:7d:06:72:0c:f7:a6:fc:eb:d5:65:2e:a6:01:67:57:7a:5a:
71:04:ea:28:af:23:68:b4:92:60:71:b3:24:73:5a:41:e0:02:
44:e0:22:ff:67:d8:49:87:5c:f5:c4:e8:ab:f9:80:87:2a:56:
6b:03:9e:6b:d6:d7:60:f4:c9:78:c9:4c:e3:68:35:de:d6:f3:
fc:8c:78:dc:e3:da:68:0d:51:36:f9:f7:ee:83:ae:06:c5:f8:
e3:ae:5a:24:36:6d:0c:34:50:a7:64:56:8b:cf:d7:bf:93:38:
c5:67:a7:bb:cc:e5:73:c8:ec:d0:42:77:1f:87:d8:99:4c:60:
b8:67:da:4e:45:74:f7:8f:a1:83:1f:4b:ad:ec:fd:21:e8:24:
bd:d6:a9:de:13:dc:dd:c0:14:22:17:30:08:00:fa:59:4e:1b:
ef:fe:00:d5:78:b5:c5:13:c6:9b:0e:37:6f:61:05:0b:e5:93:
29:a4:7f:bb:15:51:0e:53:5f:70:5d:e7:c4:a4:db:f4:44:ab:
b4:34:25:29:82:ac:38:19:19:5c:8b:03:4c:f0:f0:36:21:fc:
f7:a4:d2:a0:2b:fd:ea:d8:91:5c:be:0e:17:52:d1:1e:52:f2:
5a:5e:76:bc:7d:0c:5d:1f:81:44:b5:52:c3:86:0f:ac:10:63:
a8:c7:6c:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2
NDg2MDIwMTgwHhcNMjYwNzIyMTYxOTU1WhcNMjYwNzI5MTYxOTU1WjAYMRYwFAYD
VQQDEw02YTYwZWRhYi01OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5GJVYz0uLumR2Gkefrv6CI38IKAvP5mfbWvmWLAe3QJ6RnWlM5RAaZGiVm9
FABfqjcbVG92AKxqGU1ShLfYCif9czlx1GrQ6P+UsNug/wrgLZfTzh/YcRWnpWKA
htUdpfJtD5q99Sfm6PTphzMQ8/o4tVfaOm4Vp4urmtVuWwRh1/XIH4PIjfwHBuDk
rFqCZ99WA8C4jkfddaHlSVO87bWSdRwXBINj7MhRXCZV362FJCtqegkdMNmYCd2+
aSbkWaT4YIRsgYxQTeJnZZd9MI+Z5jrEhIMQ/FNv06mhx2We3OvDSHQ28kw+bgUu
W8jG/2wuzIQJ7gQXJxg2jjJAJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLb9E6v
uYmALlp3Y6piKXH1vocdMB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RUFFNC81RUNDMTVBQTI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlT
U3hFUWxseWM5UGxraGdJQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiX0Gcgz3pvzr1WUupgFnV3pacQTqKK8jaLSSYHGzJHNaQeACROAi/2fYSYdc
9cToq/mAhypWawOea9bXYPTJeMlM42g13tbz/Ix43OPaaA1RNvn37oOuBsX4465a
JDZtDDRQp2RWi8/Xv5M4xWenu8zlc8js0EJ3H4fYmUxguGfaTkV094+hgx9Lrez9
Iegkvdap3hPc3cAUIhcwCAD6WU4b7/4A1Xi1xRPGmw43b2EFC+WTKaR/uxVRDlNf
cF3nxKTb9ESrtDQlKYKsOBkZXIsDTPDwNiH896TSoCv96tiRXL4OF1LRHlLyWl52
vH0MXR+BRLVSw4YPrBBjqMdsOA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:18 2026 by rpki-client