
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier: ZOPId5pdHLRzmyBhqfHiTJ0qz/Vjll26ucRMrn+mfoE=
Subject key identifier: 75:E5:D4:C8:A4:4A:E1:A9:2C:E7:8D:12:1E:4F:BD:43:B7:00:90:1C
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number: C0
Signing time: Wed 23 Sep 2026 06:39:04 +0000
Manifest this update: Wed 23 Sep 2026 06:39:03 +0000
Manifest next update: Wed 30 Sep 2026 06:39:03 +0000
Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: TBCPrQt/qLwzWK4EWobIpoDihRXj6TZuP7VSETDfYwE=)
2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: +Obkn2kDVy3VtWSxRmw2o+KBF3RFJlPLni7LR/Uptdw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Validity
Not Before: Sep 23 06:39:03 2026 GMT
Not After : Sep 30 06:39:03 2026 GMT
Subject: CN=6ab37407-94a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:87:26:7d:0e:48:dd:80:29:40:92:82:08:
b8:f6:22:4b:9b:18:67:7c:36:77:a3:4f:1b:2b:77:
48:f7:c4:1f:28:48:7f:24:43:71:6a:a7:6c:a6:84:
7a:38:ba:a8:ad:e3:cd:09:1c:d3:33:84:47:6e:71:
a3:72:60:e5:a6:29:77:58:bb:22:c4:3e:40:cf:f0:
c4:96:54:8d:79:be:c0:43:d2:b4:96:2c:22:fb:00:
63:54:ce:91:e5:a2:29:5a:81:33:43:39:20:4f:56:
29:67:3e:c9:cc:1b:37:ea:50:c4:19:af:70:f2:fd:
61:b6:6c:28:e0:b4:34:bc:c1:02:9b:a7:bd:1c:68:
8f:69:db:f7:75:bb:e3:ab:52:e9:3a:f5:e0:41:7f:
de:13:02:04:56:ff:ae:14:bc:bc:30:38:07:7e:c8:
07:8a:09:3e:28:d7:9b:e9:2a:82:fa:ef:5a:b3:13:
35:de:25:5d:f2:66:90:12:36:83:98:54:8b:82:be:
a1:9b:f5:8d:4d:36:92:07:70:a5:73:e2:ba:db:35:
07:e1:91:48:a6:14:77:70:4f:be:a9:a9:fa:c2:71:
67:b6:28:c5:6e:5e:e1:d0:21:1b:76:ac:95:79:80:
bc:b7:ab:81:70:8d:d4:36:9e:a9:8b:a5:d5:c7:fc:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E5:D4:C8:A4:4A:E1:A9:2C:E7:8D:12:1E:4F:BD:43:B7:00:90:1C
X509v3 Authority Key Identifier:
keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:49:9a:de:ba:4f:e0:8f:25:6a:46:40:c5:69:0e:17:f8:25:
56:61:89:fa:1c:9b:37:b2:82:98:53:fa:22:90:e1:0c:04:06:
96:cb:db:8c:03:d8:52:aa:0c:da:4d:dc:44:b1:47:e4:04:5f:
28:a5:5d:48:68:82:b4:dd:cf:59:a3:92:30:a7:34:85:cd:ea:
d9:5a:96:d9:04:b7:8b:db:d9:d3:13:ff:75:4f:44:3c:3f:b9:
a1:b7:65:31:f0:a3:db:3b:c3:65:e6:10:6a:f5:79:2b:38:6e:
fc:82:08:8a:3c:e7:da:0d:ab:0e:65:a6:b8:bd:cb:89:f2:65:
c6:ac:55:7b:5f:86:bf:35:c9:1c:c1:3a:94:3f:7f:ba:b4:2c:
ac:ed:ab:ed:39:d8:b8:23:ba:cb:a4:9b:27:0a:b5:c8:0d:a5:
5c:f1:17:b8:45:a5:c7:9f:64:a3:c7:3f:68:25:50:7e:6f:df:
f8:23:52:0b:57:e1:58:db:7d:07:5d:e1:67:5a:48:31:36:78:
1a:02:2a:35:ae:6b:e0:8a:54:7f:85:d5:95:0f:8b:c6:ff:c3:
37:68:4c:8a:5a:e2:50:f9:be:a1:17:de:70:ad:00:39:ef:92:
9d:c6:22:ad:a3:f5:d6:c0:5e:a8:4d:65:f7:02:e8:96:d5:d7:
66:2a:2a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:36:26 2026 by rpki-client