
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
File: qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json)
Hash identifier: XmTKalTHTBSHPbXlB0VBvQFbDyDIQ9478GlJfTbPFDM=
Subject key identifier: B5:92:4A:AA:06:BE:D2:72:93:20:9B:C2:12:40:59:41:F5:A1:81:C6
Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
Certificate issuer: /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
Manifest number: 9A
Signing time: Mon 21 Sep 2026 07:23:24 +0000
Manifest this update: Mon 21 Sep 2026 07:23:23 +0000
Manifest next update: Mon 28 Sep 2026 07:23:23 +0000
Files and hashes: 1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: 6kULheu7J4ePMPSyTBl5Z2t4kabfFqXvWRy5oC0OJ6w=)
2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: rthVEOzl3I+Nrh1/x+VYyq3xjzoN6lgAA50smRMa7oE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Validity
Not Before: Sep 21 07:23:23 2026 GMT
Not After : Sep 28 07:23:23 2026 GMT
Subject: CN=6ab0db6c-74cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:54:33:29:72:46:39:5c:f8:55:55:b3:e1:
e0:42:b2:bf:84:67:07:4f:b8:60:ec:5b:7f:eb:47:
a5:c0:f3:79:0e:10:ff:06:94:4e:4a:87:f9:03:10:
d9:7d:55:3b:80:c0:3c:26:bb:ff:e1:d2:e3:ab:15:
f6:dd:ac:19:1b:c7:f4:af:2c:d1:f3:5d:38:25:6a:
53:27:a6:4d:4c:4a:1d:e2:08:17:48:e2:13:b5:30:
72:08:10:2c:1b:a3:38:a9:b4:c9:3f:d8:f8:5e:d2:
fa:0d:96:5d:9c:c3:0e:93:78:8b:bb:98:6e:69:d4:
cb:c8:52:25:70:ef:bb:a5:73:05:fb:12:9b:09:cc:
a1:62:65:1c:75:eb:c9:b0:63:6e:25:46:4d:83:76:
8d:ec:d7:cc:f9:a7:9d:61:c0:4a:f8:3c:11:7a:6b:
a6:8b:fe:65:a1:d0:9f:80:8f:37:80:94:86:9e:68:
53:a0:30:90:a1:ac:fc:d6:47:3d:e5:fd:f2:53:70:
e8:77:8c:8a:00:2a:7b:73:34:b8:4a:f6:56:fc:5c:
93:70:9e:50:4b:71:a7:e3:62:ef:ca:df:f4:e3:94:
4e:5a:91:ca:21:c9:2f:d8:35:26:a7:05:ed:6e:50:
99:be:21:42:7a:1c:fd:83:85:87:67:4e:ce:8c:7e:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:92:4A:AA:06:BE:D2:72:93:20:9B:C2:12:40:59:41:F5:A1:81:C6
X509v3 Authority Key Identifier:
keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:61:a5:bd:af:f8:4f:73:40:54:a0:34:ec:d1:cb:df:a0:22:
ab:bc:a5:f5:a0:68:3a:c7:ab:6c:b5:0c:0f:a6:dd:84:f3:b1:
1f:e3:42:2e:4a:5d:44:99:5f:84:87:17:d1:1b:5e:f8:e3:0a:
e5:c9:e9:7c:b1:5e:7f:fc:b2:27:10:0c:0e:80:80:71:18:80:
3a:67:63:9d:e7:d9:e1:ed:b1:21:10:8f:71:23:9f:fa:ac:b3:
d0:06:3a:a0:66:a4:18:e5:d9:ed:33:9d:c3:c9:5d:8f:f1:01:
fa:2c:46:ee:c5:47:32:f2:90:40:74:f2:40:51:ce:56:46:f2:
28:ed:40:94:c0:9c:0f:c1:43:13:76:a7:8a:15:59:b4:8d:c6:
af:26:f3:9b:96:d4:88:9d:88:ec:6d:9a:70:d7:fd:a7:47:1d:
98:25:56:2c:cb:9c:7f:72:ed:29:1f:6c:b4:c7:f9:a1:64:1f:
8a:0a:00:bc:71:ee:38:8a:73:e8:17:6e:cd:4d:23:cd:92:92:
ef:d2:74:9c:e5:81:6b:fd:61:c7:6c:07:bb:6c:f0:a7:e6:28:
2c:22:81:02:63:22:84:c8:7d:b4:94:34:1a:c8:24:c1:e5:71:
17:69:08:ca:17:14:14:06:e7:a4:6c:3d:62:a8:64:67:90:51:
03:e4:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:40:07 2026 by rpki-client