
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File: Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier: nsqp2XlFVtCV0jtEeB6sqicaD1aDXFWhcvL/h3azkRk=
Subject key identifier: 53:41:6F:B0:A2:50:8C:6F:7C:55:EB:B5:10:3A:30:8B:F5:21:6E:E7
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer: /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial: 01E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number: 01D1
Signing time: Mon 21 Sep 2026 03:45:36 +0000
Manifest this update: Mon 21 Sep 2026 03:45:36 +0000
Manifest next update: Mon 28 Sep 2026 03:45:36 +0000
Files and hashes: 1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: hO5MCmnGB7Mgg0Lsv7GA24qCIuhkQyXkH7Zq0ub0vm4=)
2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: nYnXJrMx5rwsXTA1xnnJC1/3s3T1ED1G/pF6DskFLOs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Validity
Not Before: Sep 21 03:45:36 2026 GMT
Not After : Sep 28 03:45:36 2026 GMT
Subject: CN=6ab0a860-a0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:99:2a:60:f1:ca:9a:c2:b3:28:db:21:24:14:
aa:d9:99:5a:6c:5c:0e:fa:c3:ef:b7:ab:3b:71:9d:
95:d0:cf:81:03:5c:49:c6:25:28:60:59:80:a0:b7:
75:b4:36:2c:de:45:17:ba:a8:69:84:ab:02:24:f2:
b3:86:94:11:c5:e2:0c:90:21:6c:23:ab:28:81:89:
33:85:e3:a7:c6:dd:7a:6b:2b:ee:a9:a1:de:98:1d:
18:cf:ec:82:6b:27:c3:ec:94:91:60:13:cd:c5:7f:
9d:2b:a3:76:31:98:a4:81:80:14:34:4e:a6:4f:de:
66:8e:d6:ca:18:fc:d2:fb:5a:19:36:4b:0f:ef:5b:
e7:b1:ec:ac:d9:94:9e:e0:07:22:cd:d3:ba:41:5b:
59:ec:21:98:95:3b:2d:d0:0b:46:d6:16:ea:8d:bd:
91:bf:93:8c:03:a8:74:82:76:bc:60:69:73:b6:20:
1f:35:fa:07:fe:c6:5f:e6:b4:aa:20:8d:da:da:49:
f7:6c:7b:d4:fe:6c:10:0c:b6:f9:16:ce:f2:75:c1:
74:91:d0:82:9d:54:2e:a4:a3:7d:a2:1b:b7:05:9d:
d4:42:b6:18:e6:1c:e3:22:a4:42:14:69:e7:5a:9d:
ca:fd:99:cc:9f:8f:87:ad:49:3c:a5:8c:3f:7a:29:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:6F:B0:A2:50:8C:6F:7C:55:EB:B5:10:3A:30:8B:F5:21:6E:E7
X509v3 Authority Key Identifier:
keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bc:92:7a:ac:6b:0d:8c:0d:65:e3:25:5b:d9:f5:ff:f5:44:
c4:0d:7b:f5:82:b5:38:51:2b:43:07:69:f9:2c:23:8f:0a:48:
f7:cd:c9:7c:8c:68:b8:42:3a:3f:84:c5:47:e9:6f:1c:72:71:
d7:56:db:62:cb:74:81:a2:82:2b:d4:77:cc:11:7d:01:5f:65:
b0:13:38:19:6f:1d:60:65:e1:ea:ab:f3:fc:a9:8a:3b:66:b9:
7f:2c:f8:f8:0b:0a:65:61:04:e7:34:2e:e0:02:ce:63:e9:87:
3b:51:7e:0b:76:e1:e5:39:f3:e5:0a:a5:c5:00:39:d5:8f:0a:
ae:3d:e2:5c:aa:ed:d8:db:39:b4:bf:59:2f:d9:e0:ae:d4:81:
fb:85:ad:4a:ea:33:53:fa:ef:a5:7e:5a:47:1a:f3:2c:12:46:
5d:84:d8:aa:c9:b6:2a:c6:8a:c6:1d:60:e3:c3:1c:5f:0c:82:
9c:b1:8f:94:02:21:9d:03:91:c2:e7:36:2d:f7:1b:2e:05:2b:
dd:b9:12:7e:1c:c0:cf:0b:44:35:96:d5:74:79:f0:5e:00:59:
71:ab:5b:d9:7d:3f:2e:66:88:6e:4b:19:a7:0e:aa:19:0e:d0:
49:90:3a:cd:70:9b:24:0c:25:d3:c8:33:4e:6b:82:42:68:2a:
08:45:5b:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUyNEIxMTAvBgNVBAUTKDQyNzkyQ0Y0M0RGREI0ODZBRDdBMDdCMTIzQ0IyQTYx
QTMzRTIzRTMwHhcNMjYwOTIxMDM0NTM2WhcNMjYwOTI4MDM0NTM2WjAYMRYwFAYD
VQQDEw02YWIwYTg2MC1hMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpkqYPHKmsKzKNshJBSq2ZlabFwO+sPvt6s7cZ2V0M+BA1xJxiUoYFmAoLd1
tDYs3kUXuqhphKsCJPKzhpQRxeIMkCFsI6sogYkzheOnxt16ayvuqaHemB0Yz+yC
ayfD7JSRYBPNxX+dK6N2MZikgYAUNE6mT95mjtbKGPzS+1oZNksP71vnseys2ZSe
4AcizdO6QVtZ7CGYlTst0AtG1hbqjb2Rv5OMA6h0gna8YGlztiAfNfoH/sZf5rSq
II3a2kn3bHvU/mwQDLb5Fs7ydcF0kdCCnVQupKN9ohu3BZ3UQrYY5hzjIqRCFGnn
Wp3K/ZnMn4+HrUk8pYw/eimDMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNBb7Ci
UIxvfFXrtRA6MIv1IW7nMB8GA1UdIwQYMBaAFEJ5LPQ9/bSGrXoHsSPLKmGjPiPj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI0Qi9CNTEwMjJENkY4
OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJYXRlZ2V4SThzcVlhTS1J
LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Fua3M5RDM5dElhdGVnZXhJOHNxWWFNLUktTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTI0Qi9CNTEwMjJENkY4OEYxMUVFOTc2QzFFMkFDNEY5QUUwMi9RbmtzOUQzOXRJ
YXRlZ2V4SThzcVlhTS1JLU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAubySeqxrDYwNZeMlW9n1//VExA179YK1OFErQwdp+SwjjwpI983JfIxouEI6
P4TFR+lvHHJx11bbYst0gaKCK9R3zBF9AV9lsBM4GW8dYGXh6qvz/KmKO2a5fyz4
+AsKZWEE5zQu4ALOY+mHO1F+C3bh5Tnz5QqlxQA51Y8Krj3iXKrt2Ns5tL9ZL9ng
rtSB+4WtSuozU/rvpX5aRxrzLBJGXYTYqsm2KsaKxh1g48McXwyCnLGPlAIhnQOR
wuc2LfcbLgUr3bkSfhzAzwtENZbVdHnwXgBZcatb2X0/LmaIbksZpw6qGQ7QSZA6
zXCbJAwl08gzTmuCQmgqCEVb5w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:50:33 2026 by rpki-client