
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
File: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json)
Hash identifier: LZFjupxfG1NwK8g5EkYENFAp8nh5DOp/CAR/oB96Vcw=
Subject key identifier: CE:0A:8D:14:D7:1D:ED:3D:86:37:04:98:61:FE:DF:A1:24:07:23:4D
Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14
Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
Manifest number: 01C9
Signing time: Sun 27 Sep 2026 04:11:32 +0000
Manifest this update: Sun 27 Sep 2026 04:11:31 +0000
Manifest next update: Sun 04 Oct 2026 04:11:31 +0000
Files and hashes: 1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: 9Ou5KzfFRyowrcbBBRzoNLycHWEvgcErPHqbd2xeEQw=)
2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: pPoEiuLkBqcxNUTChYxGcgcglq9PUIXg7lfx7G9K8vY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl
rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:11:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
Validity
Not Before: Sep 27 04:11:31 2026 GMT
Not After : Oct 4 04:11:31 2026 GMT
Subject: CN=6ab89774-b399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7f:c8:d3:60:0e:04:c0:76:20:64:6d:9c:d0:
21:f0:e1:01:c9:47:99:28:de:4b:30:2c:dc:4f:74:
d2:91:b9:0a:af:13:76:3e:2f:4c:78:9f:57:a4:19:
9e:4c:2d:c6:83:f8:28:27:04:33:2c:03:a0:e3:07:
d2:80:0e:c6:2f:6c:7b:1f:48:73:a8:07:68:e8:e4:
2a:4f:66:63:ab:f1:66:3f:b1:4f:66:d9:c4:9e:52:
e8:31:d5:fe:35:5e:ea:5a:ac:46:f2:32:e2:28:36:
e2:e6:c0:45:85:a1:6a:79:64:14:e6:46:2a:1f:0e:
75:bf:33:11:db:8a:d7:f2:b2:3c:c1:f9:56:3f:55:
a6:49:01:7b:f3:6e:88:11:5d:d5:c6:1f:3d:2f:9e:
2e:a3:f6:d9:ef:ba:11:8e:7b:ff:fd:d3:4b:72:e3:
fb:7e:b9:4f:b3:e9:8d:7a:f4:f6:5b:88:75:3f:23:
d3:1f:f9:29:e9:f7:ea:71:d9:43:af:6c:70:2e:54:
fe:90:52:37:12:3f:56:6a:a6:ee:56:27:f7:e9:77:
23:3b:6a:e1:f8:40:40:39:dd:02:6d:64:01:6d:30:
ba:07:3f:7b:ec:96:ea:22:97:fa:5f:fb:32:a6:29:
28:33:1d:f1:4b:6a:4e:4d:5b:bf:8a:20:7d:26:ae:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:8D:14:D7:1D:ED:3D:86:37:04:98:61:FE:DF:A1:24:07:23:4D
X509v3 Authority Key Identifier:
keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b7:eb:48:db:7b:d9:d5:7a:99:55:a7:dd:e6:3d:04:59:5f:
c5:0a:61:d7:97:50:72:23:16:fb:45:97:b4:a2:f2:02:dc:fb:
e8:33:c7:82:88:2b:1c:81:72:16:3c:7d:cc:3f:84:f1:e5:2d:
c9:e2:c2:9c:cf:25:bf:64:04:fc:97:98:14:07:cf:69:a5:4d:
d8:9f:1d:64:9a:56:73:a2:b1:c9:e2:75:b2:92:1d:e8:fb:f0:
f9:03:81:3c:58:72:16:80:3e:b8:ba:d3:af:66:c0:10:55:24:
8d:69:15:6d:23:2d:a6:21:fe:8e:53:4d:c7:7f:65:bb:a4:48:
89:7f:5c:5a:08:23:bc:a7:ac:fb:68:a0:58:eb:69:e3:86:ca:
a6:78:af:1a:91:e3:9f:46:f1:77:7e:5c:be:91:76:6c:19:e7:
86:34:46:d4:47:f9:37:11:0c:db:8a:97:01:36:87:67:46:62:
d1:0c:9d:49:17:f0:cb:8e:49:75:b9:73:96:7f:25:f8:64:6e:
82:bc:50:e2:b2:53:7d:70:35:cb:28:5b:56:a1:c7:61:5f:c6:
49:2d:7b:40:73:4e:98:80:e8:c2:1c:d8:ac:f9:ca:02:13:44:
fb:3d:27:d0:d8:38:6e:df:ee:9c:7c:8f:50:f6:fc:d7:87:2f:
1f:91:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:19:01 2026 by rpki-client