
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier: MQEWAFO0Dm2bR5VH9CzkomGQD3vB7alcn/gHZLyIvv4=
Subject key identifier: 78:B4:71:F7:23:22:9D:C2:6F:1D:8A:93:86:2C:B4:CE:9E:56:6B:83
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number: 010B
Signing time: Wed 13 May 2026 06:10:04 +0000
Manifest this update: Wed 13 May 2026 06:10:03 +0000
Manifest next update: Wed 20 May 2026 06:10:03 +0000
Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: VG2C/331KQOVE7ZcnvClPMYab9D9vYQYJaji3+OI3t0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:10:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Validity
Not Before: May 13 06:10:03 2026 GMT
Not After : May 20 06:10:03 2026 GMT
Subject: CN=6a0415bb-0cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:7c:38:ca:50:de:c9:c0:35:38:0e:04:27:
f9:a8:b9:56:3a:7e:05:e0:40:8d:c0:8f:aa:bb:f5:
12:84:2e:99:99:b7:8e:b4:10:48:2c:af:cf:23:f8:
e6:49:e8:ec:f6:68:05:59:cd:29:95:92:53:7c:fe:
d4:5e:82:bc:da:21:ea:e3:e9:52:f4:bd:2b:10:42:
69:ae:a4:76:2b:69:c1:de:eb:61:36:55:d4:20:0f:
47:05:60:b7:4b:1d:bd:de:32:df:42:22:cf:73:f4:
67:e7:97:dc:02:75:93:5f:9a:99:29:24:02:bb:b1:
35:0a:8f:ef:75:0d:8c:35:e9:36:fa:2c:05:6c:f2:
3b:1d:16:82:e6:c6:c8:b7:23:2a:64:fe:6f:17:5f:
dc:58:8d:3f:55:d9:35:5c:14:96:4b:d6:f8:7c:a0:
5f:76:a2:4a:32:b3:1f:c1:9b:b8:97:4d:e4:d7:a8:
0c:ba:73:dd:6a:a9:2a:4c:d9:df:30:64:e7:22:39:
6f:59:9e:e5:76:f4:0d:2c:13:e1:06:a7:2f:d9:16:
53:1c:9c:b4:c0:5e:61:e2:19:42:4c:2c:19:d7:0d:
a6:6f:5a:9d:d3:44:11:d8:d9:19:cb:7f:91:29:d7:
29:6b:c2:7b:a7:83:80:ba:a2:5a:09:27:6d:d7:2c:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B4:71:F7:23:22:9D:C2:6F:1D:8A:93:86:2C:B4:CE:9E:56:6B:83
X509v3 Authority Key Identifier:
keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cb:4a:fb:f1:7d:78:08:49:40:66:66:e8:15:08:c3:7c:46:
03:cf:af:37:ce:1b:da:10:61:83:c2:a5:06:b5:69:41:6a:01:
5e:ac:24:2d:77:06:ca:c6:19:6d:d6:71:e3:62:51:0e:42:73:
4b:1f:ee:51:e7:86:4f:41:f8:1f:07:37:05:87:95:70:06:11:
6f:03:ab:ca:c9:9b:1f:91:ed:5a:4d:2e:53:5e:eb:4f:6e:54:
be:b1:82:86:42:b1:7d:5f:46:9c:9e:94:85:92:d6:f4:b8:bf:
b7:6c:c1:d9:c7:e5:5b:34:e4:20:4c:f8:0d:9d:f7:78:a4:e5:
23:52:62:05:91:c2:2a:55:5e:34:bd:c0:55:20:60:84:41:db:
46:42:90:4d:ec:3a:b7:e7:a3:30:34:fc:e2:d2:c6:14:77:57:
94:e1:b8:18:62:f1:51:64:b8:cd:08:a3:f0:b9:61:89:ff:84:
2f:59:78:21:4e:90:f4:a9:3a:03:b2:51:0a:36:76:a8:c8:a3:
bc:2a:84:50:c5:aa:28:97:0c:54:ba:9d:94:8d:00:cf:97:3b:
24:ff:0e:41:17:4d:30:1a:2b:32:be:46:13:55:71:f4:e0:3d:
5d:b0:0c:b7:9e:99:91:8d:84:9d:c4:1f:fd:cd:75:49:3b:9b:
eb:56:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:13 2026 by rpki-client