
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json)
Hash identifier: QktPwjYczBcuIYQqZjnELa5z4mWzwSI78adiGmQHtMo=
Subject key identifier: BC:5F:97:22:4C:F0:9A:86:49:B4:0C:E7:F9:60:B7:6E:7E:FC:FB:FD
Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Certificate serial: 10AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
Manifest number: 279C
Signing time: Wed 22 Jul 2026 16:43:29 +0000
Manifest this update: Wed 22 Jul 2026 16:43:29 +0000
Manifest next update: Wed 29 Jul 2026 16:43:29 +0000
Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: HTdrbmgIwgXPO7GVRHrM6bmqgWs/MKxU+nuVeM/HUxQ=)
2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: 9GKBxAqwPTAO+hWMiV5oav3VDxVKz2FMAbeDwl8q3ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Validity
Not Before: Jul 22 16:43:29 2026 GMT
Not After : Jul 29 16:43:29 2026 GMT
Subject: CN=6a60f331-1708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:ad:d7:aa:bb:cf:1b:db:b0:5f:cd:48:6f:
d7:e0:e6:26:c4:7f:d0:01:83:3e:35:6c:dd:d0:79:
fd:df:86:47:4f:3c:c2:b7:9b:9b:9a:8c:c1:81:2a:
0b:f8:49:9d:53:f3:45:2f:e0:a9:f4:15:02:46:e7:
25:16:f3:17:95:6f:e4:ad:68:e0:21:57:f5:e9:98:
65:a0:2d:f9:70:b1:46:2d:50:54:6d:1d:8d:be:37:
d7:8e:8d:51:a8:90:0a:cf:7e:8e:4e:ed:68:7e:c9:
c7:ee:3a:d2:52:ed:79:55:72:00:69:cc:3b:10:27:
aa:15:a4:ce:2f:d4:f6:5c:e3:9a:5a:2c:d9:94:d1:
c3:59:79:92:a4:02:5d:3f:cc:29:7e:42:d4:2e:90:
aa:5e:61:4e:af:19:cd:32:d5:88:7d:2e:4e:a6:73:
5a:0d:2a:10:6a:5f:30:40:7a:0c:03:e0:dc:30:ef:
3e:a7:4d:2a:83:6e:89:2d:c5:66:23:42:c2:98:1f:
3f:13:37:0c:96:66:5e:3a:6b:d5:6d:30:9a:b6:54:
aa:5e:61:fc:c7:91:bc:a7:f4:67:0d:76:76:af:91:
4e:d9:47:b5:73:88:f6:35:dd:c1:78:9d:4b:b0:00:
b6:53:61:99:8a:b9:9e:a0:10:ed:65:88:d8:c9:72:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5F:97:22:4C:F0:9A:86:49:B4:0C:E7:F9:60:B7:6E:7E:FC:FB:FD
X509v3 Authority Key Identifier:
keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:30:13:ef:96:fd:87:a4:bd:43:39:39:c6:94:ec:fd:62:48:
3d:62:1e:9e:c9:b8:b2:09:fe:7f:55:bc:dd:4f:05:a4:f2:2b:
e8:c2:1f:3d:89:7b:00:b6:f8:07:6b:7a:c5:16:8c:9b:ba:09:
08:6b:bb:a6:c5:c8:20:d2:9a:c6:b5:24:3f:10:fb:fe:d6:18:
a6:0c:01:96:4f:fe:ec:65:4c:0c:90:19:ea:44:52:fa:84:25:
c0:c4:47:a9:3d:22:c1:d0:56:ab:22:ac:ba:33:5a:72:c3:90:
d2:20:93:32:13:a7:e5:99:d3:d6:36:c3:3a:15:be:6d:c3:e6:
1e:a1:94:d2:c1:07:1c:48:2f:52:78:c4:7a:29:56:a9:37:40:
6b:3e:f8:2a:74:72:6f:6e:76:66:1b:d8:e7:25:f7:ec:d3:81:
25:27:0f:7b:56:82:6d:7f:d2:e6:98:16:06:fa:76:c0:a1:a0:
98:81:4a:a0:eb:56:55:fe:79:00:c5:49:a1:f4:4b:28:da:86:
87:0d:9e:2e:7b:c3:07:4e:ac:93:e8:58:27:72:1b:2e:84:f5:
ca:3d:5b:62:60:0c:f8:04:66:1b:dd:6d:60:b7:61:e8:f9:19:
4a:56:81:8f:b9:5f:2e:ab:44:b7:44:f5:67:10:7b:fe:49:13:
f8:0d:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:45:24 2026 by rpki-client