
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json)
Hash identifier: 2y9QVpnaIWoJub1H2sKHh9ETvYeaOvfJ+wVLFJmk6K0=
Subject key identifier: 33:D6:C0:CF:A6:53:C2:8F:42:74:C5:11:19:99:7C:D1:D7:5D:F8:9B
Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Certificate serial: 0799
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
Manifest number: 077E
Signing time: Wed 22 Jul 2026 22:12:56 +0000
Manifest this update: Wed 22 Jul 2026 22:12:56 +0000
Manifest next update: Wed 29 Jul 2026 22:12:56 +0000
Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: dRRJNHnghhFg90jkFM2Ht+ZHTIo4GWw6UtXQkLHlbs8=)
2: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: TW3Yzr4nVCh6fw/bwk2DNXvw9C9/OVS9zcojLveOPlk=)
3: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: ja+InHtGIgo82Asz/+ZVF2gnztVHMmOvkEj/+OfWSAc=)
4: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: yll6EleWhluFREKT8NzETIGMZoAw4Is6iNKhftN9k0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F
Validity
Not Before: Jul 22 22:12:56 2026 GMT
Not After : Jul 29 22:12:56 2026 GMT
Subject: CN=6a614068-bb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:e8:f5:a9:ec:a4:79:d0:c2:94:75:ad:de:
f0:78:54:b9:98:a2:1c:fb:91:87:44:96:73:38:8a:
52:95:ea:1b:4b:f5:9c:15:e2:a1:e4:95:f4:dc:b1:
1c:c6:b9:5e:02:ad:b3:70:4c:3f:ab:7d:f1:38:7b:
92:42:52:02:24:02:40:d4:c3:3b:b4:71:ea:33:fc:
8d:0d:b1:45:db:f4:94:76:c4:9c:39:f3:9c:b9:d5:
c0:96:33:e3:85:fd:56:58:a3:95:d0:e8:a0:a4:1b:
1d:d9:b9:ce:be:3a:a8:09:e1:7d:0b:69:86:14:53:
c0:ef:22:8d:b9:3b:7d:b7:6a:14:7c:b8:f6:54:14:
d5:1f:3f:88:a2:5a:5c:cb:3f:a6:76:9d:6e:12:27:
9b:6e:bc:43:88:ea:67:a8:4c:7f:f0:c4:5e:4b:af:
49:ec:ee:71:d2:15:d8:d7:b9:da:59:fa:f2:3f:b0:
ea:80:88:e1:68:0e:4f:45:8b:5d:79:f7:3f:df:f3:
6e:36:72:1e:22:20:8c:8a:88:9a:7a:73:49:cf:aa:
97:64:ef:7b:7e:5a:7b:ed:31:c4:6a:85:af:4a:9c:
d7:33:58:e7:0a:85:03:3f:52:21:54:2f:b2:d1:ca:
d5:4d:98:94:d8:d2:93:29:e8:3e:39:35:83:a5:7a:
9d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D6:C0:CF:A6:53:C2:8F:42:74:C5:11:19:99:7C:D1:D7:5D:F8:9B
X509v3 Authority Key Identifier:
keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:31:4b:de:a6:ed:4e:03:15:d8:b6:70:62:b2:3a:63:30:4d:
b0:bf:98:16:02:ae:d0:96:30:a2:e6:d8:f6:66:93:ae:39:43:
ca:c7:5a:28:f8:60:78:65:8b:6a:ce:d6:38:ae:2e:5c:8c:a6:
a7:9e:35:31:f1:8d:4b:42:08:40:18:ae:c2:da:73:87:78:56:
ec:2c:bd:a1:82:aa:67:a4:da:a7:5a:58:57:69:b2:71:78:e2:
8e:f3:16:22:3c:3d:eb:e8:a5:b6:1e:1e:5e:4c:ce:c6:39:4e:
c4:19:8c:94:0f:a9:0d:1f:61:89:b0:55:70:f3:42:4a:1f:04:
5c:ea:0e:ee:ab:3c:6b:6e:de:61:1d:09:51:ed:ad:06:ef:e9:
9f:d8:a9:81:46:4a:3a:14:83:77:cf:7a:2b:5e:16:3f:35:c1:
4b:84:7e:ac:3b:53:f9:40:f6:b2:80:e9:65:e1:b9:26:82:ca:
ac:e1:72:7e:a9:1a:5d:f4:8e:a3:af:70:31:be:77:8f:81:7e:
f6:85:24:37:69:d9:c6:25:0c:2c:d1:09:3c:f6:a0:2e:76:4c:
5b:21:f6:c7:5d:9b:15:03:ff:c2:e6:4b:1d:d7:c9:9d:2b:4e:
fb:52:97:6f:2a:16:59:84:e9:68:35:bc:e4:35:b8:3e:f7:c9:
c8:ab:25:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1
MDAwQTVFMEYwHhcNMjYwNzIyMjIxMjU2WhcNMjYwNzI5MjIxMjU2WjAYMRYwFAYD
VQQDEw02YTYxNDA2OC1iYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjDo9anspHnQwpR1rd7weFS5mKIc+5GHRJZzOIpSleobS/WcFeKh5JX03LEc
xrleAq2zcEw/q33xOHuSQlICJAJA1MM7tHHqM/yNDbFF2/SUdsScOfOcudXAljPj
hf1WWKOV0OigpBsd2bnOvjqoCeF9C2mGFFPA7yKNuTt9t2oUfLj2VBTVHz+Iolpc
yz+mdp1uEiebbrxDiOpnqEx/8MReS69J7O5x0hXY17naWfryP7DqgIjhaA5PRYtd
efc/3/NuNnIeIiCMioiaenNJz6qXZO97flp77THEaoWvSpzXM1jnCoUDP1IhVC+y
0crVTZiU2NKTKeg+OTWDpXqdlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPWwM+m
U8KPQnTFERmZfNHXXfibMB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB
OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY
ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS
Vko5bTctZ1JldUZRQUtYZzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEDFL3qbtTgMV2LZwYrI6YzBNsL+YFgKu0JYwoubY9maTrjlDysdaKPhgeGWL
as7WOK4uXIymp541MfGNS0IIQBiuwtpzh3hW7Cy9oYKqZ6Tap1pYV2mycXjijvMW
Ijw96+ilth4eXkzOxjlOxBmMlA+pDR9hibBVcPNCSh8EXOoO7qs8a27eYR0JUe2t
Bu/pn9ipgUZKOhSDd896K14WPzXBS4R+rDtT+UD2soDpZeG5JoLKrOFyfqkaXfSO
o69wMb53j4F+9oUkN2nZxiUMLNEJPPagLnZMWyH2x12bFQP/wuZLHdfJnStO+1KX
byoWWYTpaDW85DW4PvfJyKslPQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:53 2026 by rpki-client