
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: IS8510qB6PDEmpDngdj0SCiv6qCqx4R2l+gbjy5M/mQ=
Subject key identifier: 2F:5B:F5:5A:C0:42:DD:54:51:10:01:CE:27:26:0B:EB:63:6C:80:94
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0ABE
Signing time: Thu 16 Apr 2026 19:36:14 +0000
Manifest this update: Thu 16 Apr 2026 19:36:14 +0000
Manifest next update: Thu 23 Apr 2026 19:36:14 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: ib9Lvk+rO4ndaUSVX75Wi1cUSazo6kjjUwqSKNmGh7A=)
2: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: npxDOaYlzq4v0D7ZqGwAs2+cX+X00ZFlXzEs2lS/E/g=)
3: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: K5LzMbNtKqH25iKtWdvWZe2aJGrqN5SOd0zyr400Qxc=)
4: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: VyFPTCs08W6m53CM1t6yDsUT0ET2zwscs652Zwcp3P8=)
5: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: W+v47olv9hi+vpg+AhoU4zpy1f8xz0X0Hoo6FgJgCAc=)
6: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: wlIurFaBpaXYDDean85NO67hD8yyKAoACdepsfWqkkM=)
7: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ly8SSkcgskhGQRoPTJo3pO2wtWF8MHFHJUjxu+Q5Vgk=)
8: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: aeJLAovFP6DXjYFrG69v6mvG7/KwF4hFCypD2VryA+k=)
9: ABF4F248555511F0A341047BC4F9AE02.roa (hash: w3FZYA8pQMfaRKp1mIPedAuxP7NKNsznrdKgzqYMe2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2908 (0xb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Apr 16 19:36:14 2026 GMT
Not After : Apr 23 19:36:14 2026 GMT
Subject: CN=69e13a2e-0696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:5c:0f:ab:8f:af:4f:d9:1f:23:fc:fd:a9:
d5:cc:d3:c0:60:75:60:01:23:5a:28:01:b5:38:e7:
bd:fd:dc:02:de:02:cd:11:b1:a0:6c:76:9f:7c:d0:
f2:d0:c4:45:39:cf:09:81:2e:0a:1f:98:9d:21:00:
f0:c1:27:68:7d:4c:e0:77:7f:ba:21:26:3e:1a:07:
5b:03:82:77:d2:56:56:9c:8a:1b:0b:05:c5:1a:43:
ae:b4:c1:09:62:96:4f:e7:12:77:31:e0:28:25:5d:
45:09:e2:d4:06:1d:95:75:57:ef:69:87:72:da:87:
14:d2:43:24:6f:90:9c:41:00:7c:f6:98:80:7b:99:
ef:5b:81:27:55:47:95:28:83:c0:8c:40:e9:66:b0:
96:77:34:ba:fa:23:99:94:ca:67:24:14:fc:01:b4:
18:15:d9:17:0c:2a:69:9e:af:4f:25:35:85:f9:42:
14:c0:5c:e7:b0:38:9d:23:42:e8:2e:a7:b4:70:ab:
93:cd:ec:95:41:98:ee:ec:f9:dc:87:02:77:82:87:
b8:03:a8:39:93:f3:e1:ff:83:54:db:15:20:38:9c:
03:1c:d4:73:c1:a0:d9:3f:6a:a3:43:b2:bf:50:b5:
8c:71:00:5d:91:8e:1a:31:94:87:fc:1c:60:76:00:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5B:F5:5A:C0:42:DD:54:51:10:01:CE:27:26:0B:EB:63:6C:80:94
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:10:a7:a1:d2:d6:59:56:e5:87:9e:c4:f4:8d:ab:54:2f:e3:
07:5d:8c:54:75:c4:70:96:2c:36:ac:58:a7:79:fb:ab:f4:aa:
f4:08:ab:e4:37:0e:4a:15:5f:6a:7a:7f:73:82:10:ef:be:c3:
02:d2:b3:84:2b:91:fe:4c:30:20:cd:b5:a6:78:f1:8c:b7:e4:
dc:13:1f:76:bc:de:ea:66:63:2c:fa:f3:71:51:94:c8:9b:1c:
31:5f:be:a9:d4:d6:a4:6c:8e:6a:f5:9c:76:11:1a:4d:19:29:
9d:df:ec:aa:dd:91:ef:81:d3:25:01:72:72:4a:a7:32:c4:f4:
8b:80:81:69:f3:1e:54:ea:08:26:d0:c0:2c:7b:30:bb:e8:39:
1e:bf:c3:d4:02:7f:09:45:b2:15:25:0a:fc:44:40:6c:b1:9a:
10:d5:dd:3d:3b:05:19:82:7e:9d:8b:31:8d:a7:5d:4b:46:1f:
d1:41:ea:0f:45:85:6d:0d:a4:81:f6:9e:27:17:f5:3c:12:b9:
81:af:8c:31:b6:95:ac:8b:7d:05:7c:29:2f:4b:36:d7:f1:2b:
71:d3:b7:6b:a9:7e:0b:72:a9:9d:4f:ac:f6:e0:ae:41:c7:61:
3d:71:9f:3f:46:cb:97:1e:fc:32:98:1c:82:51:68:00:eb:c2:
ed:82:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:53:04 2026 by rpki-client