
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
File: x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft (raw, json)
Hash identifier: kqAcv9H2VaW68fPe/g+YMMyi/JigN3UtMhR8wi+aDos=
Subject key identifier: BB:96:CF:D9:ED:93:E3:83:3F:78:C1:D6:6C:91:4C:52:A2:AD:AF:19
Authority key identifier: C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
Certificate issuer: /CN=A9158131/serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Certificate serial: 0C30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
Manifest number: 0C01
Signing time: Mon 28 Sep 2026 19:05:14 +0000
Manifest this update: Mon 28 Sep 2026 19:05:14 +0000
Manifest next update: Mon 05 Oct 2026 19:05:14 +0000
Files and hashes: 1: x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl (hash: gJfYrP2T34lO/UVbIf3IW8gZ8lKvbDuRiIJ2lWhOH5U=)
2: 208C60E46C7211F1AC9395217347A888.roa (hash: 5ObUZNUlNvXq+GBQnJ8kShAGXJHUdNizRWalI/RNNvQ=)
3: FC4FFE066C7211F18CC7D03C7347A888.roa (hash: dyeQGA/UBOIAhbkggjSvDhu8jNmpC8DjUcg5u7Epdgc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 19:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158131, serialNumber=C79BBEAA66241EECF01C30335DB18EF2B3F56026
Validity
Not Before: Sep 28 19:05:14 2026 GMT
Not After : Oct 5 19:05:14 2026 GMT
Subject: CN=6ababa6a-8668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:70:25:2a:13:a0:57:10:3a:59:ed:6b:cb:
b2:5b:77:aa:4b:6a:bd:a0:99:20:f0:41:89:5e:1c:
a8:ef:e8:cf:51:d5:fa:4e:6c:8c:2c:3e:ef:50:63:
17:0a:28:98:5e:f2:91:ca:99:00:8e:66:8d:b1:20:
d1:de:cc:c5:b5:f1:5b:41:08:21:84:fa:a0:53:e3:
61:88:45:3e:09:6d:a4:ae:54:c5:7e:ea:97:72:77:
ef:2b:92:90:ec:af:74:c1:04:22:34:5d:7f:a3:28:
79:5b:78:f0:46:db:b5:1a:de:3d:88:ab:12:15:69:
87:1a:b9:43:43:15:a6:67:3d:e8:a2:c0:52:81:21:
b2:42:c0:b6:61:be:b1:f8:54:b8:35:04:31:5e:f2:
d1:31:ef:69:53:c0:a1:53:aa:f4:ed:30:13:f3:c5:
6c:e4:86:4a:ee:8b:a1:b9:36:4e:80:59:d7:9b:e9:
cc:ba:d0:4a:e6:68:46:67:16:f1:bb:09:40:71:7d:
15:d6:24:2b:09:ff:69:08:20:7c:27:79:8b:59:84:
db:21:73:79:b8:9d:e9:01:a1:36:b4:73:fb:67:b4:
12:8e:55:24:a6:a8:48:e9:85:7f:7a:2e:8a:fd:cc:
59:b5:1f:c6:4c:6f:52:eb:e7:40:b9:fd:95:6b:d5:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:CF:D9:ED:93:E3:83:3F:78:C1:D6:6C:91:4C:52:A2:AD:AF:19
X509v3 Authority Key Identifier:
keyid:C7:9B:BE:AA:66:24:1E:EC:F0:1C:30:33:5D:B1:8E:F2:B3:F5:60:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5u-qmYkHuzwHDAzXbGO8rP1YCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158131/982AB6E648B111EA96A06C7EC4F9AE02/x5u-qmYkHuzwHDAzXbGO8rP1YCY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:1b:37:9c:df:53:64:08:ee:1d:0e:a8:6c:26:bf:55:b8:2e:
46:34:b0:52:7a:96:06:55:b9:43:19:ee:a9:06:6b:86:db:d1:
af:be:72:6e:e3:6b:87:b0:aa:8a:a6:2f:ea:e9:1c:1c:7e:34:
a4:5e:7f:20:00:e1:a9:06:20:c7:64:2c:2c:e0:16:85:c4:4c:
be:7b:af:ee:19:fa:2d:34:17:02:02:37:7f:0e:a0:9a:66:44:
9a:13:dd:12:1c:6b:82:85:11:e5:61:93:8a:87:a1:c1:66:13:
15:4b:21:b9:2c:f6:f9:de:82:f0:4f:76:f2:b1:49:82:34:4a:
da:02:f4:05:c5:de:fb:ea:7c:79:8f:ad:5c:05:72:51:59:bf:
12:01:41:bf:dc:1e:0c:82:ed:89:9b:98:50:91:31:6d:0d:3c:
b5:8f:14:c6:5a:86:bc:7f:5a:cc:53:c3:00:d3:5d:c5:f1:f6:
f4:75:b6:d2:63:b6:08:25:b2:a2:ff:7f:f1:16:32:29:bf:6c:
0a:a7:9e:3d:b5:a6:d1:44:1a:ab:61:3a:13:30:ed:f5:e9:77:
fd:dc:79:e2:b9:09:36:98:f9:42:7b:2e:c3:34:23:60:3e:6c:
ae:fa:b7:54:4d:b9:7e:a4:1a:97:ad:ac:9c:ca:a9:54:bc:f1:
a9:ca:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:45:42 2026 by rpki-client