
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
File: QhQkhj78b5uyGjIfvVA2YeSoo_0.mft (raw, json)
Hash identifier: mC65mBvA8ZWfPm4TVz8Yb7fuxlXGP13WRUBnaie/6JY=
Subject key identifier: 8F:3E:9B:62:54:4D:CE:FF:0E:41:2B:8E:6F:63:F4:95:02:65:2C:1D
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Certificate issuer: /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
Manifest number: 72
Signing time: Sat 03 Oct 2026 08:36:21 +0000
Manifest this update: Sat 03 Oct 2026 08:36:20 +0000
Manifest next update: Sat 10 Oct 2026 08:36:20 +0000
Files and hashes: 1: QhQkhj78b5uyGjIfvVA2YeSoo_0.crl (hash: fk0fNtlrD5NP3Ef37hTKMneRD4Ogz79NCnrRBJ7BWCA=)
2: 7E43D97816DD11F18A14954A343D8C67.roa (hash: Sh1P0Dpi0gzhoXiIUXSmjEQ8/VuarxM29H03qaSJnUA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Validity
Not Before: Oct 3 08:36:20 2026 GMT
Not After : Oct 10 08:36:20 2026 GMT
Subject: CN=6ac0be85-0eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:3b:80:75:c6:5f:48:e8:91:74:b6:4e:2b:
02:45:90:7c:8b:38:de:41:cb:04:f0:17:f8:a7:9e:
6e:c5:71:49:32:7e:fa:d5:32:75:f0:53:79:7b:77:
44:37:9b:98:ff:99:45:a6:5a:58:74:f3:f4:a4:13:
a4:da:13:57:f4:8f:b6:65:44:54:64:0d:2c:3a:08:
ca:b1:2d:27:1d:b9:13:d8:9b:a1:85:45:b8:70:3b:
46:72:8b:75:3d:c2:af:d7:9f:9d:d3:ca:9f:34:ab:
e4:2b:e6:84:1c:a9:dd:63:8f:39:19:2d:95:4e:ad:
e9:ba:cc:92:07:57:c1:8c:72:58:b2:1d:fa:de:fc:
23:60:eb:07:2b:be:4f:3e:3e:e8:5f:50:3d:d4:a6:
00:21:6c:6e:ac:7d:10:42:55:5e:9a:65:92:87:63:
98:26:ac:e1:ff:73:f9:f0:e1:40:04:00:8f:e8:f2:
18:47:c0:46:82:44:c6:9a:47:53:67:44:ee:2c:79:
21:65:3a:f0:5e:52:20:61:1b:5c:8b:de:8b:1f:bf:
2a:26:b4:ec:c0:03:eb:cf:ca:cf:e9:36:bf:c9:5f:
78:ae:d1:a7:4b:94:b7:65:c9:0b:11:28:eb:03:12:
a8:ed:11:b6:5f:dd:8a:ad:30:f8:02:58:e8:83:43:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3E:9B:62:54:4D:CE:FF:0E:41:2B:8E:6F:63:F4:95:02:65:2C:1D
X509v3 Authority Key Identifier:
keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e6:3c:39:cb:0e:78:47:a2:4d:3c:9d:b2:8b:de:ab:36:e6:
29:d5:af:d5:4d:2b:de:c6:cd:e8:f3:57:96:4c:36:0d:fa:31:
1f:f6:29:97:f6:5b:2b:99:a6:ab:c3:07:01:48:a8:8b:4c:0c:
68:82:53:db:56:89:09:23:e8:36:1e:04:1f:ff:26:09:51:5b:
c9:5a:5c:d8:93:8f:f3:5d:5b:51:a4:34:cd:1f:81:3d:a8:fa:
32:c6:f8:4f:41:93:3c:bc:30:7d:28:b8:7c:c7:3f:1e:e7:7c:
36:fe:24:66:2e:a9:ff:9d:d1:c3:c3:29:5f:24:74:49:6c:13:
a7:3e:57:37:4d:84:f2:e0:2b:07:97:c6:13:f6:38:67:53:df:
da:53:85:49:2e:78:e9:26:42:2a:49:1b:c6:79:83:16:91:e8:
2a:95:23:77:7f:e5:47:5e:6d:07:be:d1:5e:f2:ee:16:50:78:
4a:1f:20:20:90:b8:c6:9d:f4:17:5d:37:33:85:41:2e:22:d9:
8c:a0:d8:96:79:94:d5:a0:02:24:1e:7e:93:4e:9e:98:ef:23:
c0:a1:c2:79:73:3f:b1:6d:f4:1a:e8:9f:2b:6f:34:87:99:ce:
9f:ea:03:47:1c:5c:b3:86:22:1a:ba:d9:dd:a1:f3:90:b4:f4:
ad:95:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:54:38 2026 by rpki-client