
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: ePLERmHx/qUOmixp5Tl2wlDMzZHr2dYJBAypNBTcUao=
Subject key identifier: 4F:72:EF:54:DF:8D:2C:B0:DE:73:DB:5A:35:F8:5D:D5:58:3D:85:7F
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0AF4
Signing time: Tue 28 Jul 2026 19:54:16 +0000
Manifest this update: Tue 28 Jul 2026 19:54:15 +0000
Manifest next update: Tue 04 Aug 2026 19:54:15 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: xASpRZPJnMtVlx4ywMiko7bDwendOQ42LXDPvSEGPAo=)
2: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: fKLRAkWs+zCufWcV04yXK1kQ1KxM/zVG5v7JSWUHnmI=)
3: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: mxCH2vpK2XOhgq6GjWu4EDLEBsLtWayBY2NOfqL8jYM=)
4: ABF4F248555511F0A341047BC4F9AE02.roa (hash: n9QAmEJQ9kZxHlOhthQbr/AO7+Rv5gbW5CmVpfpdp1Y=)
5: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: iHRiLGk5bEvTzw6ual7pTVIN/CRRx+XVbsv/MEAp4Wk=)
6: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: KKSynpOm+ycQihs/yZsWcr8FrhVz4wSTwzAIsyVh/HE=)
7: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=)
8: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU=)
9: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2970 (0xb9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Jul 28 19:54:15 2026 GMT
Not After : Aug 4 19:54:15 2026 GMT
Subject: CN=6a6908e7-c9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:cb:30:9f:ea:79:61:12:82:fe:07:76:ef:
06:6a:13:96:17:19:a8:fa:ed:04:fd:58:73:b1:fa:
6c:84:db:eb:08:ed:21:b6:de:ce:d5:99:4f:ae:a5:
c4:c6:fa:ef:fb:17:96:ea:d7:1d:cd:7e:4c:69:8f:
be:07:1e:e2:82:15:55:d8:ee:bb:4d:49:ae:7c:40:
94:5d:02:e7:31:7a:57:36:1c:3d:4d:4f:c0:62:48:
3c:2d:fb:9e:a3:dd:f7:56:f8:df:cb:0d:d4:0e:e5:
32:43:87:31:43:3a:ed:e3:32:f5:47:bc:a7:b7:19:
67:49:89:92:ab:b2:1f:d4:00:7c:48:f9:b3:17:4b:
7a:c8:18:57:c9:05:f5:7a:74:f9:a7:3f:1e:e0:bb:
58:82:3c:d8:b7:b7:0c:6e:1e:70:67:e5:ea:48:4a:
cb:4d:fe:24:52:c4:65:87:7d:31:e3:0f:5a:27:97:
bd:01:1b:76:5b:24:02:7a:b5:30:37:50:52:78:f8:
93:ee:cb:a1:7d:e0:28:af:ae:c8:05:8f:26:58:d0:
dc:e6:05:8d:b1:4f:80:9c:47:f8:4b:11:11:e4:cd:
6f:43:e6:dd:53:eb:9d:3c:44:51:73:39:1f:ca:3d:
c3:39:7b:66:f7:24:a0:63:8a:2e:d4:19:ab:41:3f:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:72:EF:54:DF:8D:2C:B0:DE:73:DB:5A:35:F8:5D:D5:58:3D:85:7F
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:75:a0:e7:bb:fd:99:36:11:ad:8b:4f:15:ef:a3:87:b0:83:
1b:13:57:a4:42:ef:d1:45:91:b1:31:55:27:ce:8c:31:50:6b:
fb:9b:bd:6e:57:00:1c:75:da:4d:40:98:65:16:73:8e:bc:a8:
2d:c7:dc:2c:89:53:5f:a4:2a:69:69:54:5c:3b:68:61:86:52:
bf:9a:87:3e:89:6a:5d:ab:f8:2a:e6:ca:41:06:e4:c3:99:7e:
1b:3a:0e:f5:45:7b:ed:9c:a0:76:59:6f:9a:67:cc:35:16:1a:
cc:3d:34:29:b6:b4:04:f0:5d:e8:36:f2:b4:fa:cc:4d:1d:8a:
d8:4e:bf:e1:c8:c9:00:c2:47:22:f6:f4:25:4c:c8:0a:9c:66:
cc:29:a2:83:76:42:cc:a1:00:c3:14:df:0f:82:8a:7d:50:c5:
ab:7b:92:0f:ed:1b:ed:0d:3d:b5:cc:6c:a7:61:2b:b4:6c:c7:
c1:b8:45:34:70:5b:1b:fd:f5:93:9f:cd:52:e7:5d:8f:87:18:
68:8d:b2:e5:46:e1:f9:de:be:9a:21:15:da:50:a7:26:a0:48:
49:1b:a0:9f:f3:76:68:6a:60:12:83:5c:fb:10:cc:04:eb:7e:
aa:b4:35:5a:df:9c:9d:73:ca:a7:27:68:d5:1a:26:75:74:a0:
1f:9d:1f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:48:07 2026 by rpki-client