
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: O3xF0rSCuF6jrlLa7nBvmOD7C5xgkflkGimFwALhgUk=
Subject key identifier: 44:5E:78:AC:A1:2B:18:96:F5:70:84:23:F4:6F:78:5D:81:19:A7:58
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 082D
Signing time: Sat 10 Oct 2026 21:16:07 +0000
Manifest this update: Sat 10 Oct 2026 21:16:06 +0000
Manifest next update: Sat 17 Oct 2026 21:16:06 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: wq8qbQFYVXHK+f3esdwdT+7JRMgtjgyTVbaEs1E1BeA=)
2: 56D3C71687AB11F095613811C4F9AE02.roa (hash: /iyD3hld6gjpTGLsl0+ygpbYTM+w2T0GBHJEgaI/WgU=)
3: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
4: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: Oct 10 21:16:06 2026 GMT
Not After : Oct 17 21:16:06 2026 GMT
Subject: CN=6acaab17-7596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:e4:07:e5:81:8f:d7:3f:73:a1:7a:57:c5:
5f:a9:cd:03:de:1d:c7:6b:f7:55:d4:33:47:01:fd:
03:f2:32:62:f2:26:4d:e0:11:19:de:87:b1:24:e9:
f5:5e:da:72:ba:3c:18:46:f8:3c:e9:3a:b8:63:b3:
12:ce:ca:21:32:7d:93:69:82:a0:64:27:2d:0e:24:
d7:31:b7:c4:44:92:4a:49:24:a9:cc:ed:cb:b5:ed:
2e:95:6c:0e:d4:cc:54:1f:4b:e9:56:cf:ab:f1:07:
11:52:53:3e:da:57:02:1f:02:25:f1:5c:bf:9f:93:
8f:41:58:86:3d:0e:8b:68:48:de:d4:56:d4:3a:30:
ef:da:8e:7c:d4:09:53:9f:df:ec:20:88:90:d0:29:
51:ed:c7:9c:96:94:9e:34:df:85:ff:bf:e5:ee:34:
59:54:81:4c:9f:dc:8c:a7:2b:42:b3:74:00:a4:8d:
8b:6c:30:10:d7:a0:ef:5b:3f:22:ae:36:a2:22:2a:
de:bc:24:82:14:a8:26:71:9d:2e:52:c1:f2:ab:b5:
59:db:9a:1e:2e:df:5c:1f:30:c6:4a:e6:7e:4f:0a:
b7:13:42:f9:45:1e:bf:f8:36:38:95:a0:dd:2d:dd:
53:25:6d:ea:cf:c3:20:54:be:67:79:02:32:6e:af:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5E:78:AC:A1:2B:18:96:F5:70:84:23:F4:6F:78:5D:81:19:A7:58
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:d9:64:ee:1e:1c:9f:d5:57:09:bf:73:ea:0c:dc:7f:30:48:
b6:0a:bc:09:60:52:4c:92:d8:61:f3:9f:28:39:43:97:83:28:
67:0d:a6:be:d3:43:56:48:75:80:48:0e:39:c5:13:e4:5f:88:
66:65:de:50:5f:86:27:8c:f1:24:45:39:d1:64:02:1c:bc:ac:
5a:0d:62:a2:1e:88:19:ad:9f:9a:1c:a0:76:dc:a6:bd:68:a9:
33:90:43:49:9d:f7:52:10:ed:0a:e2:18:8e:23:8f:91:8b:45:
86:5e:f4:e2:b7:50:bf:a2:06:20:09:19:8e:97:6f:38:9a:82:
80:d5:b5:24:a2:6f:78:03:be:79:b4:91:8f:91:8e:73:83:27:
f7:b7:7f:bf:9a:52:77:ec:90:98:dc:c7:9c:85:bf:85:c6:08:
5b:83:c5:c9:c7:ba:8e:ef:6d:bf:12:74:af:ca:00:60:16:ee:
b2:2c:2e:69:a2:68:84:ed:ca:23:83:32:3c:2f:b5:19:d1:9a:
36:e9:9e:bb:08:a6:95:f9:d0:71:5c:00:72:c8:bf:77:6e:9e:
27:29:50:25:c0:32:24:9f:69:1d:7c:20:5a:2e:c3:95:6d:17:
a8:7d:c6:30:5d:24:3e:63:0b:cb:77:93:d0:37:9e:e3:26:fc:
e9:e4:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:53:07 2026 by rpki-client