
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: vbnUxRtPxjkg5ZXyC3TBbtUxBcJHSq/iG4V+TzKPJwY=
Subject key identifier: 77:20:37:86:71:F0:30:5F:D0:54:D2:45:BA:C5:DB:4D:47:45:29:B5
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 07D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 07B9
Signing time: Sun 01 Mar 2026 23:03:50 +0000
Manifest this update: Sun 01 Mar 2026 23:03:49 +0000
Manifest next update: Sun 08 Mar 2026 23:03:49 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: ySeDCsvKLXNDiVwGsojPyxxAwOY9C/0a98IG58aL1tk=)
2: 56D3C71687AB11F095613811C4F9AE02.roa (hash: 0iBnup8wptUHFtoJ6sIo1Mi6U0z/k64gTDUxYk5oZKg=)
3: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
4: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: Mar 1 23:03:49 2026 GMT
Not After : Mar 8 23:03:49 2026 GMT
Subject: CN=69a4c5d5-83f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:72:eb:7b:f6:b1:8f:46:0c:bc:7d:9c:43:
4f:c0:90:3e:f7:9e:66:1b:f1:8f:f0:16:d0:1d:12:
de:e2:ae:72:47:9c:69:ff:bb:d7:01:56:6e:4e:09:
f7:45:44:66:27:11:90:52:e2:be:2c:94:fd:38:8d:
58:c2:fc:ed:23:cb:36:ac:8b:ed:7d:d2:59:50:a8:
d1:1b:d6:80:53:4c:d9:c1:3c:98:64:bc:63:71:a3:
a7:b3:f0:c7:b9:96:aa:0d:88:c2:3b:3c:6f:4c:43:
ad:08:8d:7f:98:e0:bb:d6:a7:06:fe:23:de:4b:af:
96:62:30:00:86:94:ad:57:80:ac:b1:da:7c:33:5b:
d4:59:f8:20:26:b5:bb:c1:3c:c7:9f:b5:6d:a6:0e:
94:50:98:b4:5a:24:3d:0d:6c:89:2d:0e:de:87:92:
ea:36:46:87:4f:06:1d:d0:57:67:cd:19:25:9d:c0:
f2:45:d7:33:99:b7:88:ed:b9:7c:5d:48:c9:df:89:
0c:87:e0:4c:f8:f3:58:b7:51:59:51:05:89:25:17:
8e:82:45:3e:cd:68:1d:97:e5:9c:a7:f7:5d:fa:8a:
67:a7:92:be:90:8d:a8:a6:16:3d:9d:56:1e:eb:3f:
ce:fb:16:06:cd:9f:72:50:bc:13:bf:a2:6f:94:51:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:20:37:86:71:F0:30:5F:D0:54:D2:45:BA:C5:DB:4D:47:45:29:B5
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ac:a5:36:c7:ba:1a:06:f1:79:cc:23:3d:6a:db:50:bb:88:
f7:17:b7:8e:04:f3:da:e3:2a:e9:66:2b:2d:67:d0:5d:1b:5c:
af:2c:b7:a7:84:2f:47:e8:b6:14:5f:ac:9b:9c:84:a4:0a:bc:
f4:2e:de:4e:f1:a8:b3:17:61:f1:7b:0a:c2:71:94:36:c0:c5:
0e:24:30:4d:e3:a1:2f:ff:85:bd:a6:29:ca:e8:44:cc:b1:51:
55:2f:8e:99:d7:2f:14:2b:98:b2:5a:5b:c2:95:ec:61:5f:dd:
a0:f7:b5:4e:8e:00:96:c7:b2:b0:de:12:3b:28:a4:16:3c:4d:
e3:de:40:ee:16:57:a2:76:c1:65:d1:f3:1d:ac:fe:8f:8c:99:
8b:ba:c1:84:0a:81:64:5f:30:c0:35:c7:a5:b8:eb:e8:47:40:
2c:fa:e9:58:28:5d:51:e7:64:b5:c8:c4:f4:10:04:aa:31:a4:
2d:3f:34:4e:e4:49:0f:9b:8a:f8:13:74:e1:61:1f:69:6f:2c:
49:34:86:ec:2d:eb:61:0a:0d:35:9c:b0:8d:cd:cd:e0:09:5b:
c6:81:e4:d7:0f:2a:8d:f4:32:88:33:90:c5:72:4e:a2:fd:e5:
46:19:1c:d3:71:be:76:20:37:50:e5:cf:bb:f8:c6:0f:57:5d:
30:01:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:46 2026 by rpki-client