
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier: NDVMYqfzocdFMbK4L50BYNa698SOStvj3eQSvYAqpwE=
Subject key identifier: 89:A9:5F:15:44:A0:07:F7:BD:BF:1A:8B:02:8C:2C:94:4D:5D:06:55
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial: 1BA4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number: 1B8B
Signing time: Sun 20 Sep 2026 15:35:34 +0000
Manifest this update: Sun 20 Sep 2026 15:35:34 +0000
Manifest next update: Sun 27 Sep 2026 15:35:34 +0000
Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: 1RsEqtPu1Za/R2AwPlnB3/95EXgRzUu5ggKcCYFvPJE=)
2: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: CL5Weu+KTdYEl5dHTtwjhOsL3bmgjnwV/p+SfqCmaYk=)
3: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: cMs/v/u29PIVw32nwoFvyx0zngw6/OTTFqGeidGgPpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7076 (0x1ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Validity
Not Before: Sep 20 15:35:34 2026 GMT
Not After : Sep 27 15:35:34 2026 GMT
Subject: CN=6aaffd46-752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:a2:d1:7f:62:cc:dd:dd:cc:4d:ff:39:27:
e4:bd:bf:ce:0d:bb:c1:06:74:c2:81:3f:e7:d0:b6:
0f:6b:e2:88:2b:8a:8f:42:77:b6:92:05:69:55:1c:
f9:b7:bd:f7:6f:29:86:98:32:9e:cb:65:2c:e2:14:
e8:3a:18:6c:3c:ff:6e:35:22:d7:6f:38:31:f6:bb:
54:ff:31:44:79:6c:fb:67:d8:c4:f8:c3:79:b6:83:
79:33:12:7d:7c:b9:92:72:4e:49:78:7e:05:03:8b:
04:93:a2:02:5a:92:b6:79:f6:a5:4d:e3:9a:29:f4:
2c:74:df:e1:33:d7:00:e0:57:3a:bf:b0:97:18:5c:
59:e8:94:74:03:89:ea:a0:1a:69:b5:13:f8:8a:05:
35:a2:f3:a7:1c:79:71:2a:dc:7c:e5:69:8e:e3:5b:
20:59:f9:37:4a:82:71:7a:f4:f0:80:00:18:f3:d3:
24:60:de:e0:a3:2e:f0:ec:fc:95:17:ce:f7:2a:c4:
d8:10:7a:db:ef:b7:67:c3:0c:a4:e2:9c:67:4a:05:
4a:e7:50:d3:db:e8:f9:05:b3:ed:7b:cf:7f:59:d3:
06:17:49:2a:a1:03:8c:ec:50:d2:c0:84:3b:82:bf:
a2:38:a7:94:cb:fa:45:98:68:84:67:59:95:a4:08:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A9:5F:15:44:A0:07:F7:BD:BF:1A:8B:02:8C:2C:94:4D:5D:06:55
X509v3 Authority Key Identifier:
keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a5:8b:70:b6:26:93:03:ca:96:32:f0:31:24:1a:37:1c:3b:
cd:f4:b2:19:dd:ab:8b:e6:be:e6:14:0a:68:4e:0f:8d:8c:5a:
2c:53:f8:cf:36:3e:6e:0f:3e:81:60:26:fa:c8:6a:a4:ad:ea:
4c:d9:f6:53:a9:70:f5:f3:75:f6:a6:b2:e3:82:62:42:c8:91:
4f:3f:b7:eb:a2:71:04:4a:19:d7:88:c6:f7:ff:be:88:5e:2d:
58:0a:03:88:46:bd:8a:06:f7:1a:93:36:c0:5e:10:32:bb:fb:
34:7c:46:4f:56:36:3f:fe:e5:2a:81:2d:1a:5d:e6:d0:d6:1b:
63:e8:0c:f2:bf:fd:d4:71:bd:0d:ec:59:e4:90:2a:81:05:89:
de:63:2a:46:70:23:77:c2:12:b3:59:30:cb:21:63:fb:7f:d8:
5e:5c:ae:dc:06:3a:7c:e8:51:2a:b9:ed:88:31:6f:b5:ca:91:
fd:db:44:4a:ae:2a:9e:98:80:cc:e1:f8:08:7c:60:c0:99:6f:
b2:e1:0a:6a:ec:1c:36:c3:c8:17:38:0f:22:e4:0d:31:ef:f6:
37:64:48:b9:3d:67:d6:71:69:a9:f8:6f:b7:8a:8d:ca:ae:a6:
cf:3b:e8:ca:76:8d:f1:72:31:1a:f6:be:13:0a:f4:05:7b:e1:
4f:a0:f3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:13:33 2026 by rpki-client