
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: iAEu2m4r1bYAfap2ny8P+gjePNEdVq7m2UvnFgGZiVk=
Subject key identifier: 64:4F:F7:E1:FD:C3:46:0E:F0:3D:63:5E:D5:65:E5:69:34:96:3A:03
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0E0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0DC1
Signing time: Wed 22 Jul 2026 18:13:21 +0000
Manifest this update: Wed 22 Jul 2026 18:13:20 +0000
Manifest next update: Wed 29 Jul 2026 18:13:20 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: 8rQhzRsUCmURzKDlZzdUvjva9F/5PS6H8qIKu1rPpLk=)
2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WtRbho5g5BDH0VmjD381QM1AFpgUjX2PrH3Z2ld09Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3599 (0xe0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Jul 22 18:13:20 2026 GMT
Not After : Jul 29 18:13:20 2026 GMT
Subject: CN=6a610840-13d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:b3:dd:b3:12:a1:a1:ee:71:29:c2:46:ce:
0e:50:b5:7b:2c:5c:cc:af:7f:80:06:34:68:79:1e:
f9:a1:35:81:86:85:ec:b8:0c:08:5e:ec:d2:c7:53:
59:ab:8e:72:d7:01:2e:88:04:c9:b1:59:ee:57:f0:
2b:bb:14:f0:05:d6:57:f7:e5:a3:70:58:48:7f:77:
71:17:0a:78:2f:a2:1a:39:a8:7b:98:d7:f1:6c:de:
fb:80:1d:8b:a6:1f:40:12:f5:85:08:5c:23:9e:e6:
a6:1b:af:ec:3b:42:af:5c:7b:96:39:7d:47:bd:cb:
aa:e7:5d:ec:dd:28:14:d7:cb:ee:84:65:d2:87:3f:
25:45:d9:05:1d:63:ae:ab:ac:b4:6f:97:f1:ae:ae:
cc:96:ae:c4:54:c3:f6:4e:5f:50:49:94:87:82:a6:
0e:7e:01:1a:7f:06:27:b9:cf:2d:de:fb:1d:e8:58:
8e:8c:dc:d1:a7:00:e9:33:3f:f9:12:cc:6b:fd:91:
df:d3:34:83:28:4d:f2:0c:f7:9f:31:46:87:14:b3:
e9:12:f2:fe:b5:fe:b7:2e:8e:60:d5:1f:96:4c:d9:
a8:61:ee:ec:98:ce:27:0f:87:3a:5b:24:8c:2b:85:
1e:ea:d3:9a:5f:7d:f1:f1:34:56:80:50:a1:0a:d9:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:F7:E1:FD:C3:46:0E:F0:3D:63:5E:D5:65:E5:69:34:96:3A:03
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:36:0d:cc:4e:92:a6:7b:7f:64:86:e5:82:06:ad:40:6c:41:
1d:de:27:13:65:d1:4c:97:40:cf:13:d0:2b:74:f6:fd:aa:a2:
6c:f8:71:31:5b:d0:36:00:32:b4:84:70:e0:92:1d:4b:c2:f7:
45:94:96:84:75:40:80:fd:e1:54:a0:91:c7:9b:db:30:d9:d9:
12:19:db:3d:2c:ce:71:74:2b:03:5d:a9:6e:79:3c:34:44:1e:
8e:7d:6d:11:94:f6:48:48:fb:82:b9:30:27:c7:38:98:5b:c0:
9e:a1:01:bb:a6:8c:4e:07:c5:dc:b4:fc:84:e9:be:65:05:04:
f9:1c:8c:f1:9e:11:ee:ee:cb:de:2c:25:27:1f:2a:0b:8d:e8:
cf:6f:38:11:2d:c2:2a:8d:16:9c:b3:7f:06:29:f0:75:14:26:
5f:e6:93:d0:c5:c1:1d:54:bd:c0:dc:08:bf:f2:ce:c5:b6:cf:
ae:ed:29:23:c3:20:0c:9d:45:d4:67:e5:75:8f:f5:aa:39:4f:
18:45:08:95:b3:26:68:dd:f8:b7:8d:4f:ba:5e:3c:b6:7e:bc:
88:1f:80:67:35:75:de:9b:ff:56:0c:50:8d:3c:34:d2:70:57:
44:d0:40:51:fa:ec:fd:8e:93:86:96:1e:4b:5c:4d:b0:11:a8:
45:07:57:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:29 2026 by rpki-client