
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier: ACX5RgslyilWwoc3D+GlV827mIr3BzQUM6se/k/M/5I=
Subject key identifier: EA:52:4D:4D:C9:2D:A9:9D:DF:FB:20:62:7A:B5:3E:72:26:D2:A2:5F
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial: 1944
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number: 1921
Signing time: Wed 22 Jul 2026 16:31:42 +0000
Manifest this update: Wed 22 Jul 2026 16:31:42 +0000
Manifest next update: Wed 29 Jul 2026 16:31:42 +0000
Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: q7i4kOntEZt4iTVBUHKPtOe+qH9yhi+i4FqgcUk1bfc=)
2: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: aze7oRbnjZ11dpJLkBi4xyiEoCsX64SwDqIgSioB2cM=)
3: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: gpPf8YHxUumqTPOX7/waaXvtALxStgij8JmqlVAXhlc=)
4: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: QtWEc3antTd2K+91CBKQnCvQy2+FDNwa+QWniiVB1lI=)
5: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: awYe5rrh007RCSjsVd7jO0qaN9guB6y5rbMfa7rSYvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6468 (0x1944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Validity
Not Before: Jul 22 16:31:42 2026 GMT
Not After : Jul 29 16:31:42 2026 GMT
Subject: CN=6a60f06e-2da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:88:1e:23:d2:d7:16:81:b9:41:25:bc:d7:
31:ef:bd:d5:31:5a:f2:b1:af:39:e0:0c:1b:8d:ec:
ad:56:b1:d0:8f:6b:f3:03:ae:33:36:72:39:bf:62:
f2:7b:22:be:7a:f0:b7:9c:0a:21:8a:46:73:23:a4:
2b:ae:2e:bc:da:81:c2:1a:9f:7c:75:58:4b:87:9c:
74:b6:07:de:0b:09:9f:f6:f9:92:48:49:90:61:7b:
13:29:55:f3:ed:5f:0b:cf:1e:6e:e4:f5:9b:82:cd:
57:8a:f4:bc:d5:f6:f4:8a:97:cc:50:e4:6a:5e:e8:
e5:5e:04:22:2d:37:00:25:b4:8e:4e:d0:3b:1a:7b:
f2:0d:c7:a6:44:36:0f:99:62:d6:59:be:bb:8f:4e:
18:fc:33:cf:fc:15:ba:d9:d1:ce:c2:ee:9b:d3:20:
b4:62:06:4f:18:fe:37:dc:0e:90:4f:07:93:89:33:
8f:8c:1e:9e:b7:b1:c8:5f:5a:1e:39:b5:2b:f7:b4:
e1:06:7d:60:95:39:e4:c8:56:b9:5a:95:a1:60:c8:
e0:6c:72:07:ce:c4:7b:7e:4f:c3:0b:df:8e:13:f8:
21:db:3f:7a:4c:bf:1d:fd:d0:62:09:ce:11:96:fe:
eb:c8:d1:56:4e:5d:04:d2:35:7d:02:e6:4e:37:72:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:52:4D:4D:C9:2D:A9:9D:DF:FB:20:62:7A:B5:3E:72:26:D2:A2:5F
X509v3 Authority Key Identifier:
keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:41:9b:f5:e3:77:5f:5e:d1:e6:40:22:95:16:20:2d:c8:32:
30:12:98:d8:a7:84:ea:79:64:67:d9:04:38:c7:c1:38:45:61:
13:cc:c2:94:03:80:e6:98:92:30:86:39:56:e0:c0:ad:3c:45:
05:71:6a:e9:8d:c8:cb:e8:42:6c:1b:e2:b8:3e:33:e5:b5:41:
39:a4:d1:86:1a:70:4f:5b:2c:0c:9b:b9:82:ca:b0:d5:a0:00:
ba:bb:98:4f:bb:ab:61:4a:87:0f:9f:ef:7a:5c:29:b8:ac:dc:
e8:14:8c:22:eb:17:26:ae:bf:c0:fd:b7:c5:e0:95:61:03:17:
9a:c6:34:44:26:10:85:e5:0b:7d:25:f8:86:26:53:80:cb:b5:
78:da:46:28:f7:3e:e2:df:36:8f:56:84:7c:2d:13:b0:0f:98:
41:a6:18:5f:fe:dd:bf:b8:97:76:9e:d8:7f:23:69:ca:0c:81:
d9:bc:40:0f:61:06:70:5b:c8:b4:11:80:0c:96:25:78:25:a0:
37:fb:da:61:84:2d:3a:eb:9a:3e:9f:b7:05:82:e3:75:fa:a9:
10:49:eb:49:d2:1f:79:d7:e2:7c:b9:08:19:d8:c1:1b:51:cf:
6a:cd:f5:99:12:e0:fd:6b:09:44:eb:f0:95:26:e0:e8:61:d1:
12:23:de:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG
NjQyNDZDN0MwHhcNMjYwNzIyMTYzMTQyWhcNMjYwNzI5MTYzMTQyWjAYMRYwFAYD
VQQDEw02YTYwZjA2ZS0yZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPKIHiPS1xaBuUElvNcx773VMVrysa854AwbjeytVrHQj2vzA64zNnI5v2Ly
eyK+evC3nAohikZzI6Qrri682oHCGp98dVhLh5x0tgfeCwmf9vmSSEmQYXsTKVXz
7V8Lzx5u5PWbgs1XivS81fb0ipfMUORqXujlXgQiLTcAJbSOTtA7GnvyDcemRDYP
mWLWWb67j04Y/DPP/BW62dHOwu6b0yC0YgZPGP433A6QTweTiTOPjB6et7HIX1oe
ObUr97ThBn1glTnkyFa5WpWhYMjgbHIHzsR7fk/DC9+OE/gh2z96TL8d/dBiCc4R
lv7ryNFWTl0E0jV9AuZON3IfMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOpSTU3J
Lamd3/sgYnq1PnIm0qJfMB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB
OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky
bkhNNWRGYkJLNUQyUWtiSHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgUGb9eN3X17R5kAilRYgLcgyMBKY2KeE6nlkZ9kEOMfBOEVhE8zClAOA5piS
MIY5VuDArTxFBXFq6Y3Iy+hCbBviuD4z5bVBOaTRhhpwT1ssDJu5gsqw1aAAuruY
T7urYUqHD5/velwpuKzc6BSMIusXJq6/wP23xeCVYQMXmsY0RCYQheULfSX4hiZT
gMu1eNpGKPc+4t82j1aEfC0TsA+YQaYYX/7dv7iXdp7YfyNpygyB2bxAD2EGcFvI
tBGADJYleCWgN/vaYYQtOuuaPp+3BYLjdfqpEEnrSdIfedfifLkIGdjBG1HPas31
mRLg/WsJROvwlSbg6GHREiPeLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:50 2026 by rpki-client