
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier: XQOfI+4gQzKJUQF6dthVsuixz3SsCDCg00Dm3exrbQo=
Subject key identifier: C4:1C:C3:A0:15:4A:0E:93:1A:6A:78:63:EB:90:7E:C8:E7:86:D1:45
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial: 085D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number: 0849
Signing time: Sat 10 Oct 2026 21:11:40 +0000
Manifest this update: Sat 10 Oct 2026 21:11:39 +0000
Manifest next update: Sat 17 Oct 2026 21:11:39 +0000
Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: 6Sov+a1CYJVIf0aE7T2d9hpP1wiOUdFgPyrGtVzb6NM=)
2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: 2gCt/x7KidgUUiic8KeZ4+Ldk+O6Z1R5WNeHf6m8yn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2141 (0x85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Validity
Not Before: Oct 10 21:11:39 2026 GMT
Not After : Oct 17 21:11:39 2026 GMT
Subject: CN=6acaaa0b-b762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:12:9f:f3:2f:ce:c0:db:20:62:a8:2c:88:
8d:ae:a8:e6:90:78:d7:26:37:11:08:e8:87:72:39:
ca:a8:fa:ed:2a:5c:24:5a:dd:15:55:6b:e0:4d:29:
68:67:a3:f6:c1:2a:9f:0e:dd:91:fd:86:ba:04:7b:
25:d6:cf:2e:07:16:f6:51:b1:cb:48:a1:4e:79:dc:
6e:b0:af:35:a2:05:4e:04:5f:b6:20:de:1b:eb:ee:
cf:d0:79:88:78:bb:23:79:76:ef:c4:10:a3:2b:e5:
cf:e8:b1:ba:0c:06:89:7b:31:15:c7:70:34:60:56:
d0:1e:af:b9:6c:2a:1f:5c:2c:99:a4:96:03:1e:ab:
07:36:d5:46:82:49:11:75:fb:8b:af:ec:94:7e:fc:
d4:f5:6f:0d:77:cf:76:aa:a1:ac:05:0d:72:f3:72:
97:e9:d2:69:6c:06:a7:99:e4:9d:28:0a:10:74:08:
e5:c6:6d:9b:0b:d1:fe:3d:ca:14:83:03:a3:c1:d9:
df:83:8b:d7:74:20:0b:c8:f8:05:a3:ec:f9:2c:fa:
97:69:a2:e9:10:06:48:4c:8a:d8:24:a7:76:40:8c:
43:21:9e:4f:4d:25:7b:30:e8:9a:96:d7:1a:19:7b:
d0:77:20:4f:2d:2f:94:dc:1a:be:b1:7a:da:45:76:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1C:C3:A0:15:4A:0E:93:1A:6A:78:63:EB:90:7E:C8:E7:86:D1:45
X509v3 Authority Key Identifier:
keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:37:6d:23:e1:1e:59:a2:5c:f0:15:36:e1:16:85:c0:ef:27:
ed:75:f1:8c:9a:0c:c7:02:8c:8b:9a:05:4b:5f:a3:0c:a7:bf:
09:9b:03:06:30:75:2e:de:4c:25:d8:8c:74:74:55:ce:ec:71:
cd:a5:8a:2a:0c:3a:6f:91:62:ba:70:d2:2d:ad:77:05:4e:3d:
2c:f5:35:6b:9d:74:57:1c:79:d5:13:bd:43:36:55:cf:6d:ed:
0e:bb:3f:22:5d:36:9e:8e:46:5b:31:c6:fa:8e:88:97:2e:8a:
b9:08:21:95:e5:07:cb:ee:75:2c:ce:33:35:c5:36:92:0a:25:
47:7d:eb:32:ee:56:97:f4:7c:2d:42:82:f8:b4:3a:4f:03:54:
41:a3:a7:b2:bf:90:fc:4f:aa:db:14:5b:17:dc:3c:f0:02:7a:
e8:92:47:48:9c:21:00:fa:8e:91:df:1d:96:63:8a:a6:01:4a:
28:23:f8:eb:a5:41:4e:ba:a6:c3:a0:c1:68:d6:3b:be:9b:c9:
e5:13:d1:e4:60:f4:17:ff:10:57:dd:d7:c5:15:6b:f6:2d:75:
ef:01:7f:7a:db:d5:e0:10:ea:51:21:64:84:01:be:3b:ed:b3:
a6:ac:48:b2:32:30:cf:cd:e1:24:c5:c5:f3:17:6a:f9:80:03:
76:40:e0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:53:17 2026 by rpki-client