
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json)
Hash identifier: BfP36P761efmvuq+YyEjsQPSHMDFr4eohnFMsQoHm6g=
Subject key identifier: 37:31:BD:63:A6:EB:7E:92:0E:24:A0:43:F1:74:10:78:93:AE:DF:8D
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial: 0A43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
Manifest number: 1759
Signing time: Thu 08 Oct 2026 18:19:11 +0000
Manifest this update: Thu 08 Oct 2026 18:19:11 +0000
Manifest next update: Thu 15 Oct 2026 18:19:11 +0000
Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: +E8JH354d+gtb6UtaU0TRMp0TZsORxmUW1gImknO0Q0=)
2: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=)
3: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=)
4: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2627 (0xa43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Validity
Not Before: Oct 8 18:19:11 2026 GMT
Not After : Oct 15 18:19:11 2026 GMT
Subject: CN=6ac7de9f-c474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:5d:02:37:4d:ee:80:b5:8f:92:90:93:6f:
f5:20:e4:d9:71:8c:e0:b0:95:ae:91:93:a7:e8:cd:
57:aa:00:b2:7c:b7:63:7a:c7:9f:9d:ad:3e:04:54:
70:b3:0b:b1:0d:fb:2f:3d:1a:e3:0c:46:5e:83:ea:
b2:19:fc:3a:00:18:74:a5:31:a1:e3:50:ce:71:c3:
3c:a0:79:c3:77:34:09:54:43:c0:65:b8:61:c9:ff:
12:65:1c:73:34:cb:bd:f3:9b:0b:da:5f:cd:4f:42:
5b:cc:c8:81:38:06:23:6e:50:4f:0d:69:22:fd:6b:
5a:b2:91:d8:a7:97:6c:02:b3:bb:5e:70:07:f3:2b:
ce:6b:fb:a5:b5:4b:e9:9f:8c:6f:ce:60:33:21:9e:
ab:39:76:1b:1e:4a:bc:73:29:41:71:48:72:0b:5d:
d7:32:d3:33:ab:98:3f:50:81:af:21:58:72:ab:21:
72:57:34:b3:a0:2b:6a:a3:a5:64:92:a0:88:5d:da:
06:77:90:27:34:8d:f5:1c:b1:d3:8f:04:66:57:dd:
a6:5b:89:91:6c:13:e9:28:72:de:67:87:4e:7c:be:
4a:b9:1d:d4:0b:33:e0:c0:4d:62:ba:56:5f:ba:e5:
50:14:e4:b8:c4:f9:8a:a7:d0:23:7c:d2:db:c7:ce:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:31:BD:63:A6:EB:7E:92:0E:24:A0:43:F1:74:10:78:93:AE:DF:8D
X509v3 Authority Key Identifier:
keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:7b:e3:9a:eb:26:0a:3f:52:df:71:b4:b4:5c:c4:4c:63:02:
22:55:12:99:a3:5e:db:02:76:01:80:bd:1e:44:fe:c3:fd:c4:
67:e0:30:d7:54:eb:58:49:28:31:f5:c8:7f:5b:11:48:d4:d4:
e0:f9:b4:62:60:6f:50:7d:45:da:03:9f:3d:08:5c:af:8e:0f:
36:55:65:2b:c5:85:e7:01:e1:8c:d8:6a:35:95:45:f9:15:19:
45:0f:49:a7:50:69:e6:d2:f0:10:59:6d:42:1b:e8:80:2b:d7:
c7:2a:7c:bf:54:53:85:62:32:00:fe:49:16:a7:ae:a6:55:f8:
ca:d7:76:80:4a:eb:c9:23:9f:6e:a0:d9:56:3e:4b:78:00:76:
f7:3a:51:65:70:cc:1a:41:2f:0e:93:64:91:a5:12:5e:d0:e4:
ed:c5:42:d5:c4:c3:e6:bc:12:cd:30:a9:3f:c0:9f:58:cf:67:
02:6b:80:8b:8f:35:56:c0:5e:c8:c9:61:fe:62:d0:e8:7e:85:
af:a1:f7:96:87:41:65:26:93:ae:60:b2:69:78:07:44:bb:ba:
67:59:5f:54:17:ca:55:84:03:61:2a:40:16:cd:91:55:f4:e9:
33:68:84:6a:8c:9b:bf:f3:f0:75:08:31:c7:4e:61:34:f0:50:
49:a7:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:23:40 2026 by rpki-client