
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json)
Hash identifier: 2Hy16NAxczFT3F1aIaC8If9K88iK+DNch4BKA0RN4c4=
Subject key identifier: 56:F1:AD:FB:DD:4D:7B:3D:CC:E2:B6:25:60:38:E0:03:8B:29:69:8D
Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
Manifest number: 019E
Signing time: Thu 23 Jul 2026 05:41:40 +0000
Manifest this update: Thu 23 Jul 2026 05:41:39 +0000
Manifest next update: Thu 30 Jul 2026 05:41:39 +0000
Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: +wXlkyXMa61coElobpzEle4l6fdfLDghVxJhqemOnw8=)
2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: EmlnlS4Z9CMI7PDZI/wf0AKGdImncjWzGhUb3m4XvQ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl
rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24
Validity
Not Before: Jul 23 05:41:39 2026 GMT
Not After : Jul 30 05:41:39 2026 GMT
Subject: CN=6a61a993-a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:b3:74:93:b1:c1:60:ca:68:1a:39:25:3c:
b2:b7:cd:b9:d7:f8:14:bf:15:df:1d:bc:7f:df:c3:
fb:12:2d:4c:36:db:63:29:9b:34:bb:22:09:37:a6:
04:bc:e4:b4:7a:11:60:54:5f:e8:3f:d4:8b:c6:25:
81:75:08:3c:c9:40:99:a0:c5:43:bb:ee:22:2c:a2:
f9:8f:23:7a:e9:ae:f0:49:fe:23:31:83:f4:1a:d3:
27:29:88:19:25:96:80:69:23:9c:97:13:5e:13:3e:
f5:78:a5:be:5f:64:fd:0b:66:6f:8c:62:f8:9d:fe:
b2:fd:a8:3f:43:6f:aa:48:d3:78:6b:8f:57:2a:23:
10:84:b2:95:6c:9d:55:84:8c:f3:45:4c:54:5f:3d:
29:ad:63:73:d2:d0:8d:f6:65:7a:82:b6:9b:d0:53:
b8:44:cb:7d:12:de:6b:5e:fb:2c:9e:78:a7:8f:00:
f1:d8:dc:a1:72:cc:0f:32:c5:7f:3f:ca:d0:cd:16:
c2:75:5a:c5:dc:fa:fe:6f:6b:63:15:0e:0f:20:d9:
0b:07:1b:5d:d1:0e:fa:4b:28:b6:81:af:24:9e:dc:
00:17:f3:f4:d4:5d:43:52:6f:19:86:c6:18:5f:f6:
49:c1:ec:00:69:90:2e:4c:f2:a3:4f:ca:cb:2e:68:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:AD:FB:DD:4D:7B:3D:CC:E2:B6:25:60:38:E0:03:8B:29:69:8D
X509v3 Authority Key Identifier:
keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:87:72:3f:0c:f9:41:c7:f7:8d:e4:29:97:7c:50:e9:1a:60:
a9:b7:86:74:d2:51:91:1b:bd:69:ae:c1:6c:e0:5e:40:46:8d:
f8:a9:6f:bc:b1:59:4e:ed:07:dd:29:24:a7:8c:d3:e0:1b:5a:
22:b2:19:34:2e:cb:c7:ef:36:53:b8:a3:4a:9a:38:08:92:27:
0b:30:b6:0f:79:d1:ac:2c:90:85:b5:5e:d7:70:86:14:5d:9f:
3f:69:21:af:d0:55:8f:c7:97:4c:d9:dd:82:c8:17:e4:8b:26:
8d:62:b9:4d:e1:12:00:7c:03:d2:3a:a1:72:92:08:59:18:1f:
96:f0:67:82:0a:30:21:a8:fc:34:f4:a4:d8:19:97:d0:dd:aa:
8a:fe:0d:30:c0:3d:a5:99:91:4d:25:e1:85:e0:c1:1b:fc:2e:
ab:b3:dd:b8:78:3d:8e:7f:7a:a4:43:01:71:08:71:50:3b:e0:
c3:02:bf:f8:49:d9:10:0c:f6:2a:11:c6:aa:aa:18:72:86:41:
87:2f:27:12:d6:27:7c:0a:7b:3f:95:65:53:62:55:c2:07:28:
a7:8f:e6:15:1c:a4:7c:74:5f:58:11:cd:f8:e4:d6:7b:f9:3c:
4d:d2:2d:80:d4:27:52:fd:f3:5d:25:ef:c1:9f:84:78:26:64:
7a:0b:ec:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz
NzU0NThEMjQwHhcNMjYwNzIzMDU0MTM5WhcNMjYwNzMwMDU0MTM5WjAYMRYwFAYD
VQQDEw02YTYxYTk5My1hNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAicCzdJOxwWDKaBo5JTyyt8251/gUvxXfHbx/38P7Ei1MNttjKZs0uyIJN6YE
vOS0ehFgVF/oP9SLxiWBdQg8yUCZoMVDu+4iLKL5jyN66a7wSf4jMYP0GtMnKYgZ
JZaAaSOclxNeEz71eKW+X2T9C2ZvjGL4nf6y/ag/Q2+qSNN4a49XKiMQhLKVbJ1V
hIzzRUxUXz0prWNz0tCN9mV6grab0FO4RMt9Et5rXvssnninjwDx2NyhcswPMsV/
P8rQzRbCdVrF3Pr+b2tjFQ4PINkLBxtd0Q76Syi2ga8kntwAF/P01F1DUm8ZhsYY
X/ZJwewAaZAuTPKjT8rLLmjcnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbxrfvd
TXs9zOK2JWA44AOLKWmNMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2
QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo
N3NCOHhJMmdIVDgzVkZqU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUIdyPwz5Qcf3jeQpl3xQ6RpgqbeGdNJRkRu9aa7BbOBeQEaN+KlvvLFZTu0H
3Skkp4zT4BtaIrIZNC7Lx+82U7ijSpo4CJInCzC2D3nRrCyQhbVe13CGFF2fP2kh
r9BVj8eXTNndgsgX5IsmjWK5TeESAHwD0jqhcpIIWRgflvBnggowIaj8NPSk2BmX
0N2qiv4NMMA9pZmRTSXhheDBG/wuq7PduHg9jn96pEMBcQhxUDvgwwK/+EnZEAz2
KhHGqqoYcoZBhy8nEtYnfAp7P5VlU2JVwgcop4/mFRykfHRfWBHN+OTWe/k8TdIt
gNQnUv3zXSXvwZ+EeCZkegvsOw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:31 2026 by rpki-client