
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json)
Hash identifier: xEfDeEgmzqMtFcyzLUXmNbGB2Es0vQzesn0Urf0Jo7s=
Subject key identifier: C5:7E:D5:DB:E6:84:11:15:E2:A0:5E:2A:01:27:09:2D:51:65:4C:2C
Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
Manifest number: 017C
Signing time: Mon 21 Sep 2026 04:43:53 +0000
Manifest this update: Mon 21 Sep 2026 04:43:52 +0000
Manifest next update: Mon 28 Sep 2026 04:43:52 +0000
Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: vBq/yUjYc7JnGXz2R8yJ9ulws9OjVYYan2BUopXAYfQ=)
2: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=)
3: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=)
4: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:43:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Validity
Not Before: Sep 21 04:43:52 2026 GMT
Not After : Sep 28 04:43:52 2026 GMT
Subject: CN=6ab0b609-a8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:3b:cf:ba:45:57:51:ba:0b:b1:a1:3b:15:
78:77:c6:8c:f8:7b:6f:b5:e9:34:93:aa:bb:e5:3c:
2c:f3:b1:f3:47:4f:68:14:0c:a2:41:72:64:be:3f:
f8:d4:91:b8:d9:a6:cc:e6:39:f9:5d:91:dd:7b:cb:
f2:ee:d6:d9:0b:a9:c2:59:c6:5e:84:8e:11:ec:8a:
1c:06:f7:d3:10:9c:e8:15:63:d1:64:48:f2:35:e9:
39:e6:a4:3b:a2:1c:f5:b0:62:93:10:87:d2:3b:b6:
f3:58:32:af:ca:05:3d:0e:fa:ba:07:51:62:4b:c6:
df:e7:18:31:75:de:fe:8b:35:b5:46:a9:80:a5:2d:
34:ef:ea:e3:39:8a:ed:68:1f:a3:0d:be:1a:fc:e3:
49:62:21:a5:9b:76:8e:a9:2b:33:8d:85:07:1f:d3:
fd:83:90:bf:2b:f1:cc:3c:57:36:c5:2e:b6:ac:cb:
17:69:60:20:65:14:ed:98:ec:7b:8c:ff:1d:7f:e0:
57:c2:45:4f:fa:fc:ce:f4:2c:77:e8:56:8e:b5:05:
ea:4d:76:1e:76:e7:ce:e8:42:33:0d:ee:96:ef:6d:
b7:7b:49:c0:01:f5:22:af:0c:22:d6:60:43:07:eb:
b1:71:d6:c1:07:dd:a4:72:71:40:80:01:3e:13:d8:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7E:D5:DB:E6:84:11:15:E2:A0:5E:2A:01:27:09:2D:51:65:4C:2C
X509v3 Authority Key Identifier:
keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5c:18:48:b9:a5:29:63:6a:05:ac:a9:7b:48:ec:17:68:ee:
87:29:23:8a:a8:05:a8:bf:04:7a:2b:2b:eb:0e:fa:3f:7b:da:
91:41:01:6d:74:23:5e:3b:49:f3:92:65:30:d0:e7:a5:d9:6b:
93:80:d4:08:77:41:e9:66:2b:5f:a7:a3:6a:8e:77:45:a6:08:
af:dd:f4:4c:f5:29:47:94:de:cf:35:4b:95:b8:9c:16:63:43:
b1:cf:c8:17:b1:b1:f0:c5:cd:f7:af:18:34:94:9c:1f:1d:cf:
9e:ed:09:5b:b3:54:7a:e1:20:be:c1:1a:6f:25:4a:f6:8d:ca:
ce:5d:ed:d4:0e:8a:36:8f:69:76:6b:d4:3f:b1:0a:c0:64:16:
3d:9d:af:5c:49:27:c1:e4:c9:5c:6f:9b:e9:13:f4:6e:a3:6d:
55:eb:2b:65:92:46:8d:79:7c:0e:77:66:bb:f5:a9:2c:8a:8d:
b8:39:2b:6a:46:da:01:49:35:ad:31:1a:d3:c0:0c:42:bd:18:
59:a2:ea:1e:10:1b:10:9e:d5:a1:5b:82:d9:50:8b:40:3f:68:
6c:7f:a0:dd:73:e1:4f:80:0d:f3:93:91:98:2d:9d:4d:10:85:
0b:8b:5e:31:6e:ed:26:a3:3b:1d:32:32:62:ce:e6:14:f5:2f:
1f:1d:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:43:37 2026 by rpki-client