
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier: gLUkVynl0desZhD67Zmu1h3xD8zrPbacWX1yVn3seto=
Subject key identifier: 3C:C3:01:E2:E3:6B:A7:B8:14:82:8A:3E:BD:9B:EF:47:9F:1B:52:78
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial: 0D4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number: 0D22
Signing time: Wed 22 Jul 2026 18:38:16 +0000
Manifest this update: Wed 22 Jul 2026 18:38:15 +0000
Manifest next update: Wed 29 Jul 2026 18:38:15 +0000
Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: lilM2WpTpR4Zbr6A8hITRkdbVBmVjsEkLV+YwYZHGV8=)
2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: fs8vNdHPTeEjIkaHFCo8i9QI5xttWL2wCiA1UOJja1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3405 (0xd4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Validity
Not Before: Jul 22 18:38:15 2026 GMT
Not After : Jul 29 18:38:15 2026 GMT
Subject: CN=6a610e18-5143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:83:eb:59:3e:30:a5:ff:ad:ed:b2:d2:e7:
15:88:de:97:7d:85:09:17:7d:c9:c9:60:f6:3e:21:
96:9f:56:b0:26:1f:61:13:a2:58:32:fe:5a:a7:d1:
45:d0:e8:ec:66:98:9f:27:f1:7c:31:f6:2a:ab:4b:
4d:15:6a:72:5e:88:32:00:9b:6e:e5:17:c5:d1:fe:
52:fa:17:84:34:be:2f:c9:c5:05:d9:99:cc:98:29:
80:8b:06:d7:8a:9c:a5:12:8d:8d:c5:71:51:ff:69:
16:8b:ed:df:ce:17:96:d2:ac:31:51:a4:ca:03:6f:
44:db:3a:cc:0b:45:eb:ca:6a:1d:f3:5a:95:35:34:
d5:f8:b6:73:18:e8:37:a5:e5:83:79:0b:6c:f2:c6:
18:59:03:32:17:ca:66:6e:18:07:de:6d:49:fb:f3:
c5:b9:c8:ba:48:b2:c2:1f:8e:27:1c:3a:6f:52:69:
2a:92:d8:bc:b5:96:db:bf:ba:a8:1c:8f:1c:ea:b2:
03:53:b7:61:13:d0:8a:c4:51:30:d8:3a:50:ad:63:
c3:b5:72:1d:eb:f4:35:89:77:31:04:6e:34:5b:0e:
8b:98:cb:d8:ad:ec:c9:7c:4c:92:82:18:dc:e1:a4:
30:4c:c7:d0:02:90:e5:a0:dc:d5:30:de:75:9d:06:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C3:01:E2:E3:6B:A7:B8:14:82:8A:3E:BD:9B:EF:47:9F:1B:52:78
X509v3 Authority Key Identifier:
keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:4f:ae:c4:03:63:d6:80:7c:18:e3:c6:6e:4d:fe:f9:45:60:
c5:c2:2a:06:71:3a:22:65:cd:64:9d:39:7a:a9:be:29:ac:98:
4c:5c:6c:29:77:96:8c:00:c2:8f:cd:65:fb:0f:50:ad:80:ef:
6f:93:ed:79:12:40:e1:5d:a4:9e:70:b1:e5:58:c7:f0:9b:e9:
5d:1c:7c:85:84:0e:dd:a4:06:14:2d:b8:0c:7b:9d:24:6f:d2:
de:b2:cd:b3:bd:dc:6b:4c:8d:93:b1:25:18:03:68:e0:58:e8:
ff:84:41:df:50:6b:94:66:5d:e5:59:ed:dd:69:21:72:75:14:
93:94:9f:3f:9e:46:f1:cc:72:6b:7a:c0:2b:03:00:75:3d:bf:
84:ac:03:1c:a3:bd:1f:17:10:ea:9d:21:23:cc:ba:55:9b:5a:
0b:82:05:2d:dc:c8:e4:ae:75:56:16:de:90:09:e5:45:81:d9:
cc:2c:0c:10:b3:2d:e4:16:11:2a:5e:03:00:72:e6:cf:b9:2e:
25:7a:f6:e5:2a:fd:3f:e1:1f:24:48:85:d3:c7:5c:8a:85:a5:
36:66:6a:1d:ce:44:b0:f8:fd:3f:6d:34:db:ae:a7:d9:c3:da:
da:20:20:e7:63:f5:b3:9e:7f:ab:6f:2b:58:49:99:ef:97:84:
be:fb:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:31 2026 by rpki-client