
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File: qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier: mvmORhhQVpe6rWx7WSNo1DEFFreiYuLM9SpTKkjYrj4=
Subject key identifier: 19:81:BF:57:D4:06:63:59:09:8D:58:85:5F:85:B5:B4:7F:EE:6A:E1
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 097A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number: 0943
Signing time: Sat 14 Nov 2026 20:05:27 +0000
Manifest this update: Sat 14 Nov 2026 20:05:26 +0000
Manifest next update: Sat 21 Nov 2026 20:05:26 +0000
Files and hashes: 1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: tzgk8ZG3YQe6LjyYhnK6MhxHBwJUr2A7b4URX6it+mE=)
2: 4CE392F2C14511F1972FD06E4D11F970.roa (hash: TazzGsstWHLlIBaJwURZcNELCOCiN8bjbuBjX+p4Nvo=)
3: 82F98D926DE911F1BE416AB35CA30FBC.roa (hash: JsW+CAaBnE5R9k4pb5HSw7eUPDMX6zRJXzW5WoiPdMY=)
4: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: u+OE92KeExG7I6GhxPypiPeStuTv8Vqe48CTLfDMRps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 20:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426 (0x97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Validity
Not Before: Nov 14 20:05:26 2026 GMT
Not After : Nov 21 20:05:26 2026 GMT
Subject: CN=6af8bf07-091f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:cb:13:ea:c3:38:fd:0e:9b:60:42:c8:aa:
bb:7e:72:62:ae:79:9c:19:e8:25:d5:fd:2c:25:a9:
63:04:5e:20:a4:ca:7b:0c:8d:b4:cb:68:b0:f0:be:
59:51:28:42:79:83:0f:b7:23:58:f8:01:f4:01:6f:
bd:ac:0d:27:18:1a:43:b8:e6:4c:2a:f7:59:0c:75:
85:8d:87:ac:d2:1d:98:af:79:6c:cc:88:fa:b9:01:
37:10:f3:f7:60:7d:ce:24:89:dc:81:1f:0b:c5:45:
de:bb:82:43:d9:62:17:1e:bb:27:ff:b8:87:b3:a5:
14:3e:9d:70:65:c0:e8:7b:f8:38:fa:54:db:e7:b1:
31:3d:60:a3:9b:cb:01:43:e0:62:a8:fd:f1:79:9a:
c1:a0:27:e2:b8:66:4d:44:1e:58:d4:7b:4d:cd:6e:
88:c6:ca:f2:f8:06:61:06:6c:6d:6c:53:8e:fc:a5:
7c:8a:a8:1e:20:34:7f:18:a8:1c:d9:4e:4c:ff:e9:
14:f7:41:ad:df:63:d0:65:ee:eb:08:76:06:f7:cd:
50:ae:59:27:5b:1f:ae:df:f1:b7:33:76:6b:8c:4b:
ef:d1:8d:a3:41:09:98:12:98:49:25:cb:cd:1d:cb:
a5:8b:8a:be:ba:0f:a0:7e:30:d5:92:f1:bf:76:a3:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:BF:57:D4:06:63:59:09:8D:58:85:5F:85:B5:B4:7F:EE:6A:E1
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:a9:d8:77:00:1a:6d:4b:0f:1a:25:71:b8:f6:77:07:3b:
36:cc:ad:32:b6:16:88:c6:da:3f:ad:4b:7f:82:87:0a:bf:84:
4f:c4:47:43:73:b1:0b:35:cf:db:d1:db:cf:b4:a1:0b:b6:3e:
16:98:54:bf:68:0a:e3:2a:3d:5f:d2:58:cb:78:e4:72:19:f3:
e8:fe:b8:b4:57:a7:44:a2:a4:dc:90:1a:34:64:c2:66:78:8d:
15:1e:cb:cd:8b:a5:40:1c:ea:cc:3e:4a:fb:aa:76:2c:55:b4:
dd:d0:9e:99:09:4a:b8:3b:7c:78:9b:a3:f7:ed:a7:b4:42:50:
04:78:d7:6f:ed:3c:67:97:f8:b4:32:39:f5:8e:19:a5:c3:c2:
ad:67:73:ab:48:a9:12:94:a8:61:a3:09:90:fd:8f:30:ff:6f:
03:38:be:95:f9:5a:28:32:71:ab:ca:bf:1d:2e:9f:f2:68:51:
81:a1:9c:d5:bc:9a:7b:c7:5b:74:50:98:3b:22:b2:77:e4:fb:
cd:b2:dc:30:47:95:5f:e1:ec:a3:21:d9:e0:b5:87:4e:db:c8:
b5:0d:c8:02:20:2c:6e:05:15:74:2d:50:d6:6a:db:f0:fe:00:
f0:e7:7e:de:4f:43:63:34:c8:4b:8f:eb:48:c5:7e:cc:24:1b:
c2:be:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:57:05 2026 by rpki-client