
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
File: Q2XRedW3PoqX7eBQXynvAMLWPvk.mft (raw, json)
Hash identifier: 6who4QMHm/g9H8v0x/YuoKD76lEi9BOQHKaXascjQo4=
Subject key identifier: C6:D8:D5:00:E8:86:F9:F2:D5:32:79:23:CF:BD:60:82:C9:B2:8B:BF
Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
Certificate issuer: /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Certificate serial: 039E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
Manifest number: 0393
Signing time: Sat 19 Sep 2026 00:35:40 +0000
Manifest this update: Sat 19 Sep 2026 00:35:39 +0000
Manifest next update: Sat 26 Sep 2026 00:35:39 +0000
Files and hashes: 1: Q2XRedW3PoqX7eBQXynvAMLWPvk.crl (hash: ISp7Ot9zR/Wu3k7Pb/fMy5JMvcIOVgp4FdnRfjj6Ino=)
2: E9A9531644D611F0ABB89277C4F9AE02.roa (hash: Tyhx7c0DVAEQgGmo4FKMzM1+jmt5Mt3Gn4Kf+51OmGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 926 (0x39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139555, serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Validity
Not Before: Sep 19 00:35:39 2026 GMT
Not After : Sep 26 00:35:39 2026 GMT
Subject: CN=6aadd8dc-cf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c0:85:97:fd:b5:c5:2f:05:9e:4f:6f:05:9c:
24:7d:e4:c9:86:7b:8a:f5:a2:82:9c:52:e1:d7:f7:
a5:b6:6b:26:25:74:b2:df:4e:f7:51:47:02:0c:fc:
00:9b:a9:19:16:d5:a6:64:bc:7c:d5:78:f5:32:69:
af:ae:2d:18:4f:71:ea:02:4e:55:9a:50:a7:42:be:
44:2c:eb:d8:62:e0:73:05:7f:9c:31:8d:99:79:16:
d8:9f:b2:20:e9:a3:56:66:80:6f:8a:59:46:56:42:
d8:3b:f1:6a:ac:b2:56:59:e7:91:4b:d7:4b:2b:4a:
37:5e:08:f1:e8:37:82:76:2a:72:07:52:12:6a:68:
7c:4d:64:d9:ea:88:2c:c7:89:82:d8:8b:d6:03:19:
12:0c:20:d9:12:4e:9c:a3:66:e3:83:05:4e:ea:11:
54:4a:b2:56:6b:c0:67:f1:e4:27:59:dd:08:94:54:
5a:5e:35:95:02:a3:12:b8:0d:1b:fc:98:ed:5e:38:
45:2e:e8:a9:4b:01:0f:d9:d4:6b:7e:9b:f5:00:e5:
2e:97:62:6b:7e:61:32:53:9c:af:8b:b1:c3:75:9e:
88:fb:b6:4c:b8:e8:2d:9f:43:3f:32:e2:4e:14:48:
4b:9c:40:1c:b4:ee:f2:e3:c6:1b:be:d6:82:5c:ab:
9f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D8:D5:00:E8:86:F9:F2:D5:32:79:23:CF:BD:60:82:C9:B2:8B:BF
X509v3 Authority Key Identifier:
keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:77:72:2c:72:ed:56:32:b1:51:26:e0:d1:31:3d:90:2f:ba:
33:92:89:39:35:3b:55:7c:36:8e:47:19:9d:7b:e6:1a:a3:43:
fd:18:1a:88:04:55:e8:f1:e1:90:da:20:e0:f5:9a:e6:88:fe:
89:a5:53:ed:de:bf:8d:26:b9:65:e7:bd:fb:91:1f:b5:69:74:
c7:cb:42:68:4e:79:09:35:71:37:f7:cb:b5:c8:37:45:f0:ff:
11:0b:28:23:0b:5f:01:55:f8:2b:ea:be:91:10:a1:8e:96:d8:
c5:97:b2:3f:86:28:b3:ac:89:ab:69:5f:cf:58:38:65:e0:33:
51:f4:37:65:ea:41:57:9e:02:0d:24:a0:0f:7f:23:7e:35:d8:
c5:2a:f6:91:fd:12:30:26:57:03:a7:bd:c5:49:14:bb:ec:12:
1a:71:a6:a2:96:fe:3f:0a:3c:e4:ce:9c:ab:d5:5e:28:9b:cb:
ca:3f:48:05:17:d6:bb:bc:f1:0b:c9:cb:73:40:d7:c1:44:9a:
ea:e6:bf:58:36:4c:ef:e5:98:0a:73:0f:93:aa:45:51:b8:d3:
a1:41:4e:ea:77:0f:37:23:9a:2f:f9:18:20:7a:ce:14:54:9b:
d0:e3:e9:c8:3e:1a:55:2e:36:f5:50:e3:fc:58:34:e7:98:92:
b6:19:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:23:11 2026 by rpki-client