
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
File: qqYttH8BKybdhpjizDXejylDd2E.mft (raw, json)
Hash identifier: GYMWtrTl1D6YZ1mL9bdysfFpogh1mQde/sd604qG+q8=
Subject key identifier: FC:A8:02:5C:45:C1:10:96:01:F0:F5:40:4A:BF:0F:C6:74:11:F5:30
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 08F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
Manifest number: 08CA
Signing time: Thu 16 Apr 2026 20:20:57 +0000
Manifest this update: Thu 16 Apr 2026 20:20:57 +0000
Manifest next update: Thu 23 Apr 2026 20:20:57 +0000
Files and hashes: 1: qqYttH8BKybdhpjizDXejylDd2E.crl (hash: LTCx8yFsIK/C9Snl++L+Rdn4QkhvgXmwUxloTq8q7jA=)
2: 23CDAE44F89B11EFA0888D74C4F9AE02.roa (hash: tazQVZXkAFkDAuLygNbIRhAUk4EIl5TN/X+HKanbw0o=)
3: 4A6D188450EA11EC8FF55B24C4F9AE02.roa (hash: qLlqNwlaPLdL74Mt7s2Fed23RK/fRGvf/YX6d5A2kU8=)
4: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (hash: ANvPyrpt4+aMfuxQf395OtEz75spyBRAaKqNhIGXldo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Validity
Not Before: Apr 16 20:20:57 2026 GMT
Not After : Apr 23 20:20:57 2026 GMT
Subject: CN=69e144a9-2465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:b3:39:07:42:9e:f4:43:cd:b0:8f:8f:40:
b6:c3:69:8c:f9:86:37:6d:1e:c7:6b:a1:5e:0f:65:
f5:4a:64:55:cc:0e:8d:01:cf:6f:c7:52:de:cd:6b:
36:b9:bf:a3:81:a1:d6:4a:65:9b:2c:b9:36:17:82:
32:7f:1d:75:d1:27:92:47:c7:b3:55:36:5b:11:34:
b9:15:9b:fe:f7:7d:b3:0c:ec:cc:b5:3e:b7:96:6c:
33:2a:39:b6:13:4a:c1:06:48:db:cc:ad:b0:38:b1:
af:93:f1:a6:3f:b6:32:c3:5f:1b:ef:02:67:9a:fd:
a6:6f:39:3e:b9:d4:7a:a1:03:75:41:69:16:fb:4a:
df:ee:ed:07:6d:53:9d:b2:c2:4a:54:14:c8:61:34:
5b:cd:35:d5:83:41:5c:42:90:21:d0:25:40:c7:6e:
29:a1:96:57:8e:b9:cb:70:28:58:39:36:23:ef:49:
f1:a2:41:70:5b:43:5c:c4:ec:f5:11:c9:b5:dc:46:
a9:1e:ab:cc:09:2c:d0:d7:a0:01:03:c6:32:38:c0:
10:61:a0:95:46:17:33:8c:fe:af:c4:2b:b2:b3:94:
94:5b:88:41:db:45:c8:63:7e:32:76:6c:c2:04:a9:
aa:9b:b9:c7:75:79:d3:aa:24:ef:eb:90:b7:64:5a:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A8:02:5C:45:C1:10:96:01:F0:F5:40:4A:BF:0F:C6:74:11:F5:30
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:34:5a:e1:55:b0:37:98:34:15:05:8e:2c:d5:a8:60:a8:50:
91:ce:51:f9:8b:61:59:ab:4c:d4:51:38:88:a6:9f:02:99:aa:
95:a2:bb:cc:be:81:12:ad:b3:7a:56:04:da:b8:f1:74:cd:58:
c3:c7:dd:fc:dc:af:b8:a9:3c:c2:a6:77:72:02:f0:55:e3:eb:
22:13:7d:ff:d2:6b:a5:1f:b9:a1:91:78:5b:70:d2:91:5e:bb:
3d:15:e0:20:91:8f:0e:d0:57:f8:be:71:61:c2:0c:50:18:eb:
e9:1d:7a:9b:62:95:0e:49:5a:8b:21:8a:1a:73:e0:73:f1:16:
d4:32:68:cb:8c:41:59:98:6f:8c:8a:f6:e6:21:71:3a:4e:76:
56:49:34:9a:3f:8f:02:de:b6:29:1c:1a:24:13:16:2b:f2:45:
b9:8b:9e:02:e7:f2:f3:86:be:c8:34:a4:86:b3:d7:e3:e5:e9:
d1:64:6b:67:c9:72:6c:3e:e0:73:70:b7:50:bc:ca:d5:65:df:
27:bf:60:89:de:9a:50:1e:4a:d2:1a:c2:b0:0f:2b:d3:52:7e:
02:ae:06:04:d4:60:08:51:16:34:c9:e7:28:04:44:63:41:b0:
0b:0d:94:60:4f:4d:f4:be:79:56:7e:76:16:3a:c3:a9:b8:df:
f5:c1:ba:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFQjAxMTAvBgNVBAUTKEFBQTYyREI0N0YwMTJCMjZERDg2OThFMkNDMzVERThG
Mjk0Mzc3NjEwHhcNMjYwNDE2MjAyMDU3WhcNMjYwNDIzMjAyMDU3WjAYMRYwFAYD
VQQDEw02OWUxNDRhOS0yNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jCzOQdCnvRDzbCPj0C2w2mM+YY3bR7Ha6FeD2X1SmRVzA6NAc9vx1LezWs2
ub+jgaHWSmWbLLk2F4Iyfx110SeSR8ezVTZbETS5FZv+932zDOzMtT63lmwzKjm2
E0rBBkjbzK2wOLGvk/GmP7Yyw18b7wJnmv2mbzk+udR6oQN1QWkW+0rf7u0HbVOd
ssJKVBTIYTRbzTXVg0FcQpAh0CVAx24poZZXjrnLcChYOTYj70nxokFwW0NcxOz1
Ecm13EapHqvMCSzQ16ABA8YyOMAQYaCVRhczjP6vxCuys5SUW4hB20XIY34ydmzC
BKmqm7nHdXnTqiTv65C3ZFpOWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyoAlxF
wRCWAfD1QEq/D8Z0EfUwMB8GA1UdIwQYMBaAFKqmLbR/ASsm3YaY4sw13o8pQ3dh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC82NUQxREIyQ0RB
RUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5YmRocGppekRYZWp5bERk
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FxWXR0SDhCS3liZGhwaml6RFhlanlsRGQyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OEVCMC82NUQxREIyQ0RBRUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5
YmRocGppekRYZWp5bERkMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtTRa4VWwN5g0FQWOLNWoYKhQkc5R+YthWatM1FE4iKafApmqlaK7zL6BEq2z
elYE2rjxdM1Yw8fd/NyvuKk8wqZ3cgLwVePrIhN9/9JrpR+5oZF4W3DSkV67PRXg
IJGPDtBX+L5xYcIMUBjr6R16m2KVDklaiyGKGnPgc/EW1DJoy4xBWZhvjIr25iFx
Ok52Vkk0mj+PAt62KRwaJBMWK/JFuYueAufy84a+yDSkhrPX4+Xp0WRrZ8lybD7g
c3C3ULzK1WXfJ79gid6aUB5K0hrCsA8r01J+Aq4GBNRgCFEWNMnnKAREY0GwCw2U
YE9N9L55Vn52FjrDqbjf9cG6ug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:21 2026 by rpki-client