
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File: Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier: fISUlD7PBwDKGcpqh/V43DwXYITZLZGTLZTtgP8wfAw=
Subject key identifier: 9E:C6:A6:65:CE:F0:EE:3E:99:46:C4:02:EC:64:2E:81:1C:EC:0C:5E
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number: 018C
Signing time: Thu 23 Jul 2026 05:52:47 +0000
Manifest this update: Thu 23 Jul 2026 05:52:46 +0000
Manifest next update: Thu 30 Jul 2026 05:52:46 +0000
Files and hashes: 1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: rjlX5r3XOtvpWv99ofOHEpBVP2pDBytynoeE7tI6CUY=)
2: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vL9CnB4VhNfvCGfjKTpVpyZ3hX+MBOGWCdcUnoltMFE=)
3: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: /XTyxqSYUJyaevZitv5Zo/nsUreDwOBj39YjFuaF4Dg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Validity
Not Before: Jul 23 05:52:46 2026 GMT
Not After : Jul 30 05:52:46 2026 GMT
Subject: CN=6a61ac2e-fd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:35:f8:5b:3a:ce:2e:ac:d8:fc:94:c0:d2:5f:
ff:36:ba:2f:0a:76:5d:c7:c0:f6:cb:f9:91:ae:32:
cd:ac:c1:be:1a:f8:58:30:cb:66:56:8a:36:90:14:
67:a8:72:2b:1e:1c:bb:0e:74:06:b3:cd:81:4f:7c:
bd:f5:3c:05:fe:34:90:50:98:be:b7:38:36:d6:95:
7b:e4:48:9c:3a:65:4f:6a:f0:7f:34:8b:36:df:72:
25:50:3f:6c:03:e2:8f:8b:e7:43:f7:10:70:44:ac:
b3:e9:ad:43:ec:c9:46:52:ff:61:d5:68:c4:48:6f:
93:b1:91:68:60:5c:a2:66:6e:03:56:13:c0:99:52:
55:e7:f6:2c:a5:42:ac:4d:12:7e:2f:c3:eb:15:83:
79:a7:4a:7d:18:bc:39:f3:3d:e0:98:b1:70:2a:c1:
4c:ef:cc:96:fa:01:48:ee:7e:52:08:15:46:33:6b:
17:a0:17:5c:98:47:59:84:12:1e:e3:fa:d1:4a:4b:
10:92:da:4f:db:fa:d8:87:d3:cb:aa:1d:0b:c6:73:
a5:9c:ba:8e:a6:7f:53:ed:af:6b:ed:44:0a:20:33:
76:4a:dc:c8:06:c6:f9:7b:a9:9b:c8:b8:fd:89:16:
35:14:82:f6:f4:22:18:f6:67:ba:08:72:a6:b6:8a:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C6:A6:65:CE:F0:EE:3E:99:46:C4:02:EC:64:2E:81:1C:EC:0C:5E
X509v3 Authority Key Identifier:
keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:83:70:93:35:c1:be:10:e3:66:47:7a:22:de:92:ce:e7:55:
00:cb:8e:80:8a:40:2c:d4:2d:9f:5f:1b:9a:88:03:e8:3f:68:
33:6c:66:68:48:4d:ab:5a:f3:38:9f:47:f0:63:0e:f1:0c:e3:
c2:0b:6d:90:e4:fc:f4:ed:ee:41:d2:90:b3:d7:e5:8b:8b:cf:
ab:20:d5:7a:50:60:11:92:1e:24:9f:ac:0b:b4:a2:01:e3:fa:
83:ec:fc:36:f2:50:f8:6f:4b:7a:1e:94:7e:02:80:81:d6:6f:
60:87:a9:d0:20:60:fc:b7:a1:de:c1:f1:e1:76:72:42:f7:54:
15:d6:36:d5:a9:da:26:92:9d:2d:af:44:9d:c1:aa:68:f3:66:
12:32:b3:d2:5b:a1:2f:2f:27:f9:bf:8c:9c:ce:d2:f4:04:72:
5e:86:7b:24:95:51:d9:2c:60:88:3c:2d:d8:77:06:1a:ff:4b:
0d:08:45:61:c2:19:c9:90:23:52:34:e9:73:78:e1:55:f0:77:
0c:fa:2b:8a:78:20:ab:cf:d1:4b:df:ef:03:d6:d6:15:de:5d:
8e:cc:7f:e1:61:1a:9e:fc:af:ec:79:e8:81:9f:13:dd:a4:56:
44:33:fd:02:fa:4f:e8:f2:d7:8d:fe:d4:10:fb:14:4a:62:65:
ac:a5:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:36 2026 by rpki-client