
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier: 8YiUueJZ227xJo5DUNXzAg+c0eK/ElNfwo1UZ9wIVvk=
Subject key identifier: D8:DA:D8:C1:E8:83:D7:B7:0A:6C:C1:39:FC:E0:E5:B4:11:12:9A:8D
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number: EE
Signing time: Fri 17 Apr 2026 06:11:02 +0000
Manifest this update: Fri 17 Apr 2026 06:11:01 +0000
Manifest next update: Fri 24 Apr 2026 06:11:01 +0000
Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: vtfesDoqYsbPp3KKHYUAZrN7iUAsCI1YBgbLKO/Akcg=)
2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: 0yX4Y6lkYKfE7kCaCRC2l6z7yMFuM+BBuRGLdbMCpNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Validity
Not Before: Apr 17 06:11:01 2026 GMT
Not After : Apr 24 06:11:01 2026 GMT
Subject: CN=69e1cef5-c0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:7b:39:c6:74:ca:e6:04:0d:5d:a2:1a:7e:
38:35:9f:00:64:65:e0:28:5b:c3:c8:ec:ad:bf:58:
94:79:11:33:5d:0c:44:0b:3c:4f:90:68:60:b9:d6:
1c:5e:d1:f4:c0:0b:a1:8f:2e:4d:9a:70:cc:73:82:
48:d2:40:2b:f0:04:5e:7e:27:8e:29:1d:b8:ab:e9:
d0:8a:79:c9:aa:80:59:2a:47:df:49:bd:3e:eb:ce:
27:87:43:65:73:db:e8:cf:dc:59:2f:eb:69:47:62:
e9:dc:a9:ab:20:1b:da:4a:aa:3f:93:87:5b:39:b2:
41:3b:c5:ec:5e:74:3e:8e:2d:03:4e:b3:d4:61:a5:
5e:b7:50:50:02:8b:f6:12:e9:76:dd:6f:4f:5f:db:
39:e8:79:01:a8:68:68:f9:67:e9:96:36:bc:ee:de:
8b:7b:92:5d:20:71:23:30:54:b2:74:91:72:33:83:
2c:6e:9d:e5:bd:97:c9:76:ca:6f:7f:76:56:18:ce:
29:f7:52:a5:90:38:6b:86:41:be:ef:fd:ab:58:50:
91:12:6e:cc:72:db:48:bc:59:23:a3:6f:e4:19:3b:
f2:3f:e7:f7:3e:f7:62:7a:07:c0:cf:a4:8a:23:d7:
69:28:ff:f3:e9:3e:4d:28:ce:15:06:87:7e:a1:a7:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DA:D8:C1:E8:83:D7:B7:0A:6C:C1:39:FC:E0:E5:B4:11:12:9A:8D
X509v3 Authority Key Identifier:
keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:84:b8:2b:b2:e0:45:b1:a1:5c:98:7e:43:88:a2:03:7e:42:
fb:c0:1c:5f:e4:60:63:a8:ac:34:f9:04:ea:93:ac:75:96:29:
e8:cd:6b:34:4b:8d:24:dd:3b:45:d9:68:49:6d:e2:c1:90:22:
62:8f:46:7e:1b:8c:74:7e:b9:fb:7c:3c:0e:03:37:51:31:91:
ac:23:f2:17:80:18:2e:7d:c2:48:06:02:62:da:8a:37:9b:49:
ff:25:92:3b:85:64:aa:67:1e:26:27:45:49:66:2e:6c:61:50:
da:71:ae:42:e5:ad:0f:25:a3:22:34:ab:e9:a3:d7:ea:d9:47:
cf:f9:3f:f1:00:fa:a6:cd:55:ae:5d:02:df:b5:d5:b2:a4:9a:
8f:c7:18:87:96:d7:56:f3:b1:08:0e:d8:93:86:4e:39:2a:1b:
c6:a7:4a:05:51:44:f5:e1:0e:c4:0a:0c:16:fe:27:56:0e:06:
92:f2:f9:1b:f6:70:89:ea:89:e9:c3:60:57:77:9e:13:3d:29:
08:25:6e:c8:89:92:96:21:aa:b3:2b:bc:e1:97:b9:9f:85:4e:
a5:33:9f:ba:a6:33:68:2e:55:f6:70:39:ed:0e:5b:aa:50:3f:
34:15:8c:f0:e3:04:1e:0f:08:eb:b7:51:98:9b:01:9a:4f:e0:
7a:fe:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:16:57 2026 by rpki-client