
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json)
Hash identifier: eqge+JgHMUmqUpy1QKA9I/kdesc3A5QGoTgfS+QxYVQ=
Subject key identifier: 5D:AF:1A:1C:83:77:E2:EA:44:10:2B:13:77:2B:64:69:BB:14:85:65
Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
Manifest number: 76
Signing time: Thu 23 Jul 2026 09:46:21 +0000
Manifest this update: Thu 23 Jul 2026 09:46:21 +0000
Manifest next update: Thu 30 Jul 2026 09:46:21 +0000
Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: BJagNV6QB9R2i83ebww6q49nXd2iPJQI9Aq5CsqyLgs=)
2: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: F1265JguS11gp2J6OEHqaooyI1SAzSWA0Nwq1O/s41g=)
3: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: sM6CeOH9Bgvv3iRWHhGYzH5sAI6j1iD3slAlqraB/mI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4
Validity
Not Before: Jul 23 09:46:21 2026 GMT
Not After : Jul 30 09:46:21 2026 GMT
Subject: CN=6a61e2ed-5bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:73:7e:f7:92:c0:c1:3b:0f:8c:b2:04:ae:
a0:fe:f3:19:ea:d9:75:37:72:18:b2:a6:e8:45:0b:
21:48:d3:9f:f5:cd:51:4e:0a:e1:83:b8:22:14:1e:
73:b6:e0:8b:b3:55:ce:95:0d:e6:ae:ca:49:f0:47:
1a:09:c5:44:1f:70:e7:41:38:bd:fa:4a:d5:7a:ba:
6a:03:32:0c:03:09:31:a1:e3:ea:ca:9f:ef:b3:d1:
2d:d5:9b:e6:fd:5c:8c:2b:17:23:cd:ea:4e:67:0f:
40:41:ee:63:00:31:22:4f:54:8d:27:27:78:ca:d9:
c4:b1:8f:ab:ec:aa:a3:a4:f3:a3:9c:dc:05:a4:98:
08:41:49:66:14:fb:4b:4f:de:31:39:36:3f:6d:25:
72:dc:2a:29:21:3a:5c:7b:e1:f5:19:28:04:80:ed:
3f:40:d6:9d:8a:17:df:4a:34:62:79:f3:17:35:91:
11:35:9e:9e:7a:dc:12:b7:95:86:58:78:f2:3a:0b:
f8:b6:07:15:6a:bf:17:62:71:48:1a:e9:b6:33:79:
46:61:ea:61:f8:04:20:93:36:75:ca:a7:8f:da:af:
94:55:e6:2e:3c:2d:5a:27:ad:29:e6:69:38:36:db:
e1:a1:c4:92:0b:36:5b:65:5d:5b:ea:df:d7:e3:15:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AF:1A:1C:83:77:E2:EA:44:10:2B:13:77:2B:64:69:BB:14:85:65
X509v3 Authority Key Identifier:
keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:9b:c6:c8:c7:88:6b:3a:66:89:90:6b:54:1c:5b:77:26:
b5:d4:bb:ba:62:28:ed:d4:74:3d:12:ba:3f:48:cc:a4:d2:03:
af:5c:10:35:9e:6e:36:b3:1b:9d:aa:80:fd:db:a2:88:1a:15:
d9:d7:5a:52:fc:e1:d3:e9:ae:55:eb:69:f4:07:9c:83:0c:d6:
d5:f4:79:12:a9:ee:9d:55:25:26:07:ca:34:30:e1:a6:82:98:
d3:bc:ef:e7:88:51:93:b6:ae:91:29:b2:7c:d1:ce:5f:f0:36:
dd:58:d3:84:0d:b0:5f:e7:3f:2f:dd:a3:9a:98:2b:c4:3b:85:
6f:e7:98:ec:64:67:7e:a7:1e:80:32:3b:7b:ef:fa:36:68:52:
96:20:68:8f:19:ab:c9:e5:a1:ef:dd:90:56:32:5e:0d:4f:8f:
f6:e1:3a:3d:7d:d1:c2:32:3c:61:1c:84:31:54:d6:fa:b9:1d:
ea:62:0c:3e:02:fc:8e:e9:9b:02:18:36:11:46:5a:5e:2b:85:
8b:e0:b0:c9:77:8f:a7:49:a5:93:1c:13:f6:1e:ea:7f:a9:b6:
06:9e:bb:ae:bd:8e:70:79:bc:36:94:59:a2:73:8b:f6:54:81:
c7:a5:54:ce:96:79:7c:90:6e:f7:a8:9a:a3:36:d6:9b:81:ca:
ed:bd:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:05 2026 by rpki-client