
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier: K2y94mrsToH7yt3kDpwV1wzUObQkdVPX4SQqRriC0HE=
Subject key identifier: DE:32:03:AC:EB:93:E1:D0:23:E6:19:A0:42:8C:5E:9D:90:4E:10:FB
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial: 1BBB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number: 1BA2
Signing time: Wed 04 Nov 2026 15:39:42 +0000
Manifest this update: Wed 04 Nov 2026 15:39:41 +0000
Manifest next update: Wed 11 Nov 2026 15:39:41 +0000
Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: IU0R1sWBbR5UPL1MnxJGBrAde7p3AdSCQSnFQrzLeuw=)
2: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: CL5Weu+KTdYEl5dHTtwjhOsL3bmgjnwV/p+SfqCmaYk=)
3: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: cMs/v/u29PIVw32nwoFvyx0zngw6/OTTFqGeidGgPpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 15:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7099 (0x1bbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Validity
Not Before: Nov 4 15:39:41 2026 GMT
Not After : Nov 11 15:39:41 2026 GMT
Subject: CN=6aeb51be-b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:ae:13:d7:25:f2:47:da:76:f5:dc:2e:c5:
f3:1b:cc:26:30:96:38:e5:c4:04:30:62:1b:2e:5e:
d3:d4:1d:ec:86:2b:36:78:93:b7:1c:7c:2d:98:16:
07:77:d4:d6:08:76:df:25:bb:77:25:50:50:01:c1:
74:bd:57:f2:16:90:42:ca:3d:ef:44:0b:96:02:b5:
fc:4a:56:18:c5:6c:70:be:f9:fe:45:fa:b5:78:58:
c2:af:af:fd:9a:a1:dc:f3:e8:8b:de:d5:b2:31:c5:
71:30:ea:a8:37:b7:68:45:bb:cc:6d:df:fb:ef:6b:
97:eb:e9:ab:7d:f3:68:4d:e9:0b:c5:7d:63:0c:40:
26:7e:ca:0a:b8:9c:7f:11:9f:64:1f:12:1a:5d:36:
58:46:d1:b9:88:91:35:3e:4a:08:ab:e0:b0:8a:7e:
e3:90:2d:a9:de:0d:9f:9c:4c:b2:52:77:55:bf:d6:
40:c6:13:f1:98:23:11:7f:b7:e7:78:f9:52:e3:6b:
67:95:4a:be:f5:c5:36:f5:e5:39:3d:c6:30:01:39:
cd:57:83:ee:95:9c:da:be:26:8a:92:de:cb:07:cc:
ea:b5:e0:2f:05:2c:6c:ed:8f:34:a8:9d:33:b9:1f:
c2:ac:a5:bd:cd:45:17:22:69:b4:0c:58:06:4c:26:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:32:03:AC:EB:93:E1:D0:23:E6:19:A0:42:8C:5E:9D:90:4E:10:FB
X509v3 Authority Key Identifier:
keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:fd:05:96:32:d8:77:1a:a6:14:b0:61:ec:3f:bf:ff:ec:b1:
0e:44:f5:b5:7e:28:a1:0d:9b:8d:15:34:bb:2e:25:95:53:7c:
6a:f4:ba:fe:a7:51:3f:75:e9:a0:92:73:eb:5f:73:9c:30:61:
0d:dc:7c:6c:ed:22:5a:93:aa:c4:ee:c9:b9:9a:a8:94:e5:ea:
25:a8:69:fc:f1:a2:d8:5a:4c:5b:32:a5:5e:88:d1:f4:75:95:
e6:46:17:13:cb:a9:d2:02:6b:ef:2e:94:96:e8:0e:9a:c0:ee:
85:59:59:1f:10:e0:91:22:85:75:41:74:d8:5a:62:38:46:64:
81:85:87:64:dc:8e:0f:44:69:ba:dc:e6:64:61:c0:89:6f:5f:
fb:40:4e:52:a9:9a:28:bd:fd:b0:71:bd:c2:94:ef:bd:e9:b1:
15:3e:b7:cc:d0:22:6b:2e:05:52:2d:81:0f:3b:9c:52:e8:a3:
de:80:fc:92:e2:26:08:43:29:1d:8d:9e:03:69:ac:f5:b2:79:
6c:4a:08:9d:6f:cc:c3:8e:07:4c:eb:4c:70:fc:cd:9b:5f:5e:
1a:da:c8:2d:67:79:1e:89:b6:31:25:41:c9:4b:5e:70:ef:be:
8e:75:78:60:c2:5e:25:5e:c5:2a:f2:78:f7:58:7e:90:91:54:
29:4b:62:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:19:57 2026 by rpki-client