
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier: E0ZhYtSgy1vw9uTk5P9+kHHkvTnQSubZXuPjty34v8g=
Subject key identifier: 7C:F9:43:67:AF:F3:87:0C:2F:67:56:73:29:A9:CF:28:E0:F7:13:5C
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number: 0179
Signing time: Thu 23 Jul 2026 06:13:36 +0000
Manifest this update: Thu 23 Jul 2026 06:13:36 +0000
Manifest next update: Thu 30 Jul 2026 06:13:36 +0000
Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: AtCI4gXfr7TPOrLmEEOKBTtF3sdgsbd+YaGM5eA55Vw=)
2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=)
3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Validity
Not Before: Jul 23 06:13:36 2026 GMT
Not After : Jul 30 06:13:36 2026 GMT
Subject: CN=6a61b110-0e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:20:71:fb:11:50:01:41:ca:74:db:a3:c0:
b3:ec:6d:1e:4d:a6:38:60:27:ef:9b:ac:cd:d3:79:
f3:5f:1a:d8:f0:b0:50:b8:33:22:69:8f:f0:82:20:
6e:0e:1c:16:2a:47:d0:96:fc:e2:bf:d1:a6:8c:5e:
15:e9:00:99:26:28:86:9c:07:73:47:08:86:4c:e8:
fd:f5:d2:79:74:45:12:a5:63:22:be:17:08:9a:e0:
40:55:73:7d:13:1d:d1:8c:8f:ad:a0:75:65:66:58:
89:48:b2:23:20:d2:cc:60:fc:e9:81:cb:35:4c:60:
f8:cf:5a:45:4e:22:c1:60:7d:9d:a6:86:4a:ea:61:
f0:b4:30:40:a3:1b:33:c9:b7:f2:32:b2:26:c2:62:
6c:79:4a:9d:03:1b:5c:d4:a1:0b:ec:3a:15:35:f2:
71:88:ba:69:fe:b9:a5:4d:9a:dc:b5:2e:4e:fb:a0:
3e:bd:9b:31:1a:fd:7d:19:b2:5e:c5:a1:94:89:e8:
13:79:08:a0:d7:e5:4e:6c:89:02:05:66:76:92:06:
dc:e4:1f:b5:24:f0:e9:f4:3a:4e:1c:17:0d:a5:c4:
16:a3:cd:79:c1:fd:46:07:25:25:e9:f1:23:c2:ff:
96:d2:d2:ef:d6:76:18:3f:64:a7:4b:44:30:a3:4f:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F9:43:67:AF:F3:87:0C:2F:67:56:73:29:A9:CF:28:E0:F7:13:5C
X509v3 Authority Key Identifier:
keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:74:7b:bb:62:25:28:13:da:58:55:3b:d5:37:21:16:08:15:
69:24:2c:3b:3e:97:46:f7:b8:d5:be:d2:b6:2f:2a:d9:02:7e:
90:e3:4b:a1:4c:08:92:8a:33:0f:16:ab:10:b2:1c:90:94:62:
be:39:65:3d:10:3d:a8:d4:7e:f4:c5:4f:2d:e2:cf:41:ef:d2:
83:13:c8:f1:84:70:d8:36:24:16:40:24:5c:41:2e:36:45:26:
ca:98:39:b3:fa:bc:46:58:1c:fe:47:08:1e:25:46:e9:f2:19:
a4:97:15:f4:b8:7c:4e:0e:92:e2:d9:dc:bd:eb:c9:c0:f7:f5:
22:ff:df:b9:51:80:b1:1d:b0:9a:8b:96:db:a4:f4:f7:05:2c:
d4:cb:6c:87:ac:8c:9f:d0:ab:68:c7:13:85:af:b0:d1:8a:dc:
12:1c:3a:65:81:38:95:39:75:12:fa:78:06:be:6f:e4:11:f3:
ce:f0:c8:80:2a:d1:11:e8:6b:7a:b5:be:95:f0:a2:34:5e:69:
71:10:07:98:7f:1c:48:26:dd:86:23:32:69:e9:f8:d2:f1:92:
6f:22:5d:bc:03:f1:09:ec:80:6d:d9:10:35:be:ba:70:e2:76:
a8:a5:b7:86:a7:fc:31:9d:e7:cb:08:36:d3:95:60:81:87:62:
2a:cf:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:34:05 2026 by rpki-client