
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
File: AS8QgccGdx-n-iNDsinDDgorY3A.mft (raw, json)
Hash identifier: tj8k+0nApR99J7D7uSHWlWpdcoFc8ZkJHLNYG8MriK0=
Subject key identifier: 04:36:EC:5B:C7:01:C1:CF:82:15:7E:24:04:3A:3D:DB:5D:7D:4C:D4
Authority key identifier: 01:2F:10:81:C7:06:77:1F:A7:FA:23:43:B2:29:C3:0E:0A:2B:63:70
Certificate issuer: /CN=A91F77AD/serialNumber=012F1081C706771FA7FA2343B229C30E0A2B6370
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AS8QgccGdx-n-iNDsinDDgorY3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
Manifest number: 025E
Signing time: Thu 23 Jul 2026 03:46:11 +0000
Manifest this update: Thu 23 Jul 2026 03:46:10 +0000
Manifest next update: Thu 30 Jul 2026 03:46:10 +0000
Files and hashes: 1: AS8QgccGdx-n-iNDsinDDgorY3A.crl (hash: KZ9PfOacL5dqtFrYTWPyZEpNifKPB8gp3U0USQ8MFLs=)
2: 8AF7D7C06B6D11F1AFFFF7B39E47A888.roa (hash: QbzGMD98dsrnTN2MJM6slR+UOkvXLh7rdc5w/gswTvs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.crl
rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AS8QgccGdx-n-iNDsinDDgorY3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F77AD, serialNumber=012F1081C706771FA7FA2343B229C30E0A2B6370
Validity
Not Before: Jul 23 03:46:10 2026 GMT
Not After : Jul 30 03:46:10 2026 GMT
Subject: CN=6a618e83-aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d0:8e:41:29:7d:5c:ca:01:66:9a:50:59:57:
90:b5:c2:07:3b:92:02:c3:04:c3:5c:87:f6:8f:fb:
ab:87:9d:69:a3:a1:54:81:66:b6:81:51:a1:b3:fc:
e1:91:2f:52:71:dd:82:45:ee:0b:0e:af:f9:02:ff:
c3:71:ea:1b:20:5f:9f:0c:b1:4f:4e:c3:36:28:6b:
8c:5c:72:71:92:1b:bf:21:a6:89:b4:9d:4f:dc:93:
50:91:21:20:17:42:7f:9a:a2:48:86:7d:ac:55:8e:
a0:61:46:e1:a7:85:9b:88:52:07:f5:d8:3d:0a:30:
b0:53:81:8e:32:d4:e6:2d:70:99:29:ca:bb:40:18:
1b:d2:c1:0d:f2:17:dc:8d:1c:e9:5b:75:09:1f:be:
00:7d:42:e5:17:6d:e1:e8:83:4c:27:0b:b8:1b:37:
4c:01:5f:25:ab:64:64:77:6b:e2:59:7d:63:53:f3:
45:5a:c1:1b:48:60:37:72:90:d6:69:6c:be:4f:da:
f4:e1:fd:06:6e:a5:c9:86:f8:65:74:98:5a:88:fc:
e7:58:66:40:9f:75:fd:08:45:d7:da:23:30:e6:13:
65:be:4a:f6:ce:a5:64:3e:46:e3:b6:03:52:31:a8:
a8:1e:3b:5d:5f:a4:37:8b:1e:fe:b0:b7:19:a7:a6:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:EC:5B:C7:01:C1:CF:82:15:7E:24:04:3A:3D:DB:5D:7D:4C:D4
X509v3 Authority Key Identifier:
keyid:01:2F:10:81:C7:06:77:1F:A7:FA:23:43:B2:29:C3:0E:0A:2B:63:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AS8QgccGdx-n-iNDsinDDgorY3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/AS8QgccGdx-n-iNDsinDDgorY3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:5c:4a:aa:3a:30:34:1c:01:fe:c5:30:2a:70:67:9a:e1:d3:
1f:d2:e0:75:35:82:8d:aa:98:e7:15:fa:17:a9:31:85:c6:c0:
54:6d:1b:82:59:a6:c9:0d:bb:dd:46:d3:fa:18:ca:cf:4c:2e:
0f:23:12:e3:bb:69:c3:a3:53:98:0d:7b:64:b0:8d:a7:5a:75:
eb:18:5d:42:34:ed:3c:fa:d2:26:bc:50:51:ed:91:f8:66:89:
06:97:a2:16:e8:a3:69:05:d2:fa:86:33:42:c8:8f:32:d6:61:
c7:cf:bd:01:f6:3c:02:7d:ac:2b:28:80:b1:fd:9e:aa:d0:b8:
b1:74:7a:7c:38:c0:c2:9b:9e:87:82:92:b4:d0:84:a4:6a:ed:
72:ed:d7:a7:47:bb:b0:16:b5:18:1d:6b:15:2f:f1:21:5a:6d:
34:cf:2e:3d:53:01:b3:e3:e3:dd:ae:74:e0:96:7d:0f:a0:c8:
0c:98:26:2c:16:cb:f3:b8:64:68:50:78:b5:ae:25:79:6a:9e:
ad:6e:84:18:a1:2f:02:3d:5e:c9:84:2e:67:58:24:40:9a:c5:
2c:30:bd:5b:be:3c:46:bd:f7:e3:97:13:78:73:c0:15:7d:b5:
6c:5e:99:67:e0:cc:df:b6:06:d8:38:9e:de:c6:a3:98:d6:f1:
cb:30:46:5f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NzdBRDExMC8GA1UEBRMoMDEyRjEwODFDNzA2NzcxRkE3RkEyMzQzQjIyOUMzMEUw
QTJCNjM3MDAeFw0yNjA3MjMwMzQ2MTBaFw0yNjA3MzAwMzQ2MTBaMBgxFjAUBgNV
BAMTDTZhNjE4ZTgzLWFhZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCa0I5BKX1cygFmmlBZV5C1wgc7kgLDBMNch/aP+6uHnWmjoVSBZraBUaGz/OGR
L1Jx3YJF7gsOr/kC/8Nx6hsgX58MsU9OwzYoa4xccnGSG78hpom0nU/ck1CRISAX
Qn+aokiGfaxVjqBhRuGnhZuIUgf12D0KMLBTgY4y1OYtcJkpyrtAGBvSwQ3yF9yN
HOlbdQkfvgB9QuUXbeHog0wnC7gbN0wBXyWrZGR3a+JZfWNT80VawRtIYDdykNZp
bL5P2vTh/QZupcmG+GV0mFqI/OdYZkCfdf0IRdfaIzDmE2W+SvbOpWQ+RuO2A1Ix
qKgeO11fpDeLHv6wtxmnpqK7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBDbsW8cB
wc+CFX4kBDo92119TNQwHwYDVR0jBBgwFoAUAS8QgccGdx+n+iNDsinDDgorY3Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3N0FEL0NFNkMyMzdBMjBB
ODExRUU5ODYzN0YyM0M0RjlBRTAyL0FTOFFnY2NHZHgtbi1pTkRzaW5ERGdvclkz
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQVM4UWdjY0dkeC1uLWlORHNpbkREZ29yWTNBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3
N0FEL0NFNkMyMzdBMjBBODExRUU5ODYzN0YyM0M0RjlBRTAyL0FTOFFnY2NHZHgt
bi1pTkRzaW5ERGdvclkzQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAmXEqqOjA0HAH+xTAqcGea4dMf0uB1NYKNqpjnFfoXqTGFxsBUbRuCWabJDbvd
RtP6GMrPTC4PIxLju2nDo1OYDXtksI2nWnXrGF1CNO08+tImvFBR7ZH4ZokGl6IW
6KNpBdL6hjNCyI8y1mHHz70B9jwCfawrKICx/Z6q0LixdHp8OMDCm56HgpK00ISk
au1y7denR7uwFrUYHWsVL/EhWm00zy49UwGz4+PdrnTgln0PoMgMmCYsFsvzuGRo
UHi1riV5ap6tboQYoS8CPV7JhC5nWCRAmsUsML1bvjxGvffjlxN4c8AVfbVsXpln
4MzftgbYOJ7exqOY1vHLMEZf
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:18 2026 by rpki-client