
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json)
Hash identifier: bNX8r39xmkLoXCfpCUx5Ue9qvjuNOa4s+mtSpa0cvSg=
Subject key identifier: F9:84:2D:19:A5:A3:A8:BF:B8:8A:16:8C:E2:C7:01:F5:E3:4F:41:0C
Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Certificate serial: 8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
Manifest number: 8B
Signing time: Fri 25 Sep 2026 07:40:46 +0000
Manifest this update: Fri 25 Sep 2026 07:40:45 +0000
Manifest next update: Fri 02 Oct 2026 07:40:45 +0000
Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: rLSI115zGP5Nbg7Ot8dznO7CyjexUwofrmoucxVaEJE=)
2: BBB1B36C387911F18844C9F1B7833773.roa (hash: sySn8z7CtimAbBeWbFVeZLj6Bb/UV3HDRIyOYd+GVX0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F
Validity
Not Before: Sep 25 07:40:45 2026 GMT
Not After : Oct 2 07:40:45 2026 GMT
Subject: CN=6ab6257e-a457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ab:f3:86:db:d8:5c:6c:91:b4:ce:27:6f:78:
a4:50:5e:3c:23:cb:5c:d6:bc:3a:4e:81:96:12:05:
ba:90:ab:1c:d2:76:ab:58:a1:14:44:1d:e7:79:c7:
1b:6f:4e:00:f8:24:f9:b9:b0:77:2c:eb:82:c8:87:
3d:18:e5:53:69:83:00:17:70:00:93:63:98:24:c3:
f0:33:93:c0:3a:96:c9:a3:b9:9c:de:95:73:1c:3e:
42:4d:70:b3:e3:04:cf:e6:9c:61:fa:91:da:9f:75:
79:8d:27:03:ca:02:02:c1:cd:67:96:e8:b8:80:64:
74:fa:76:b8:f7:4b:e6:77:37:5a:42:2c:95:7c:66:
e0:bb:a8:08:31:a1:2e:18:0f:1c:ad:bb:d5:26:b6:
81:4c:0b:c1:4e:12:df:5d:7b:a6:ae:42:c5:ea:1c:
43:93:96:07:52:ee:ee:c2:45:1a:c2:ca:59:11:2e:
18:65:e0:09:b5:c2:0f:f9:aa:7c:f7:bb:28:37:bb:
f5:e0:12:cb:c9:db:16:bd:e7:5e:69:16:97:72:c7:
36:f9:3e:4f:fb:ff:8f:63:14:c1:ff:bd:36:dc:64:
c4:28:f2:29:35:7e:03:35:5f:77:24:a2:33:8b:c4:
78:83:c8:c2:68:3e:59:74:58:41:73:54:4e:68:26:
d2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:2D:19:A5:A3:A8:BF:B8:8A:16:8C:E2:C7:01:F5:E3:4F:41:0C
X509v3 Authority Key Identifier:
keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:c8:cb:ba:94:7a:7f:7b:bf:84:4a:cd:91:6a:db:5b:b7:
3e:7a:3a:ed:58:0d:8b:71:f4:a9:5d:b9:15:a4:d4:7d:14:89:
7c:af:af:79:36:4a:29:47:9f:77:11:87:29:4b:9f:85:e6:92:
8b:53:99:30:93:20:63:49:1e:a0:38:88:31:63:06:7b:ea:b0:
4c:55:80:91:a5:59:62:8d:7a:53:eb:ea:37:17:6d:02:10:1c:
96:4f:5b:0f:29:85:30:30:98:7a:08:4a:2a:21:77:51:6b:42:
fe:08:76:6a:db:4a:d2:13:02:69:c2:e9:f7:ad:61:f1:ea:35:
3a:b5:45:a3:8b:e4:41:9f:90:35:9d:87:60:1b:f8:13:db:87:
a0:ca:1e:20:77:bf:3a:47:ef:c2:d5:b2:3b:0e:d7:2a:45:15:
fd:4f:8c:4a:ac:f1:bb:6b:37:31:25:85:f6:6b:c0:4c:a9:be:
87:f0:c0:1b:79:04:ad:46:3b:2a:da:fb:98:ba:48:d5:ff:ed:
a0:68:31:ee:95:0c:b5:78:34:1b:4c:69:d8:0f:a4:87:08:50:
75:81:19:61:aa:72:2a:3f:46:14:bf:83:2d:d6:64:9b:1b:50:
c8:66:d4:5c:71:80:aa:e5:23:d8:79:7d:fc:b8:62:b8:44:21:
e9:c1:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:56:13 2026 by rpki-client