
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
File: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft (raw, json)
Hash identifier: +Oalb5nxqacxKl2rawJqm5+Z2Paa5rOkoVHNeR01NtA=
Subject key identifier: A4:8C:73:92:1E:F6:50:49:38:CC:0A:28:7B:A1:95:C0:8A:DB:87:43
Authority key identifier: A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7
Certificate issuer: /CN=A9196480/serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
Manifest number: 0203
Signing time: Fri 17 Apr 2026 02:49:33 +0000
Manifest this update: Fri 17 Apr 2026 02:49:32 +0000
Manifest next update: Fri 24 Apr 2026 02:49:32 +0000
Files and hashes: 1: qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl (hash: 6ZM2waEhjC9/DWMv4XvZo073YDLUjuCR1t93epOunvs=)
2: C43988E4472611EE8CB34245C4F9AE02.roa (hash: PZSS0Lk/xCF/5ioQ5ULIhRmgPu74E/AEMi2/vsULm5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl
rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196480, serialNumber=A92F4CE489CD0E97D1676043F8C34F830679D8F7
Validity
Not Before: Apr 17 02:49:32 2026 GMT
Not After : Apr 24 02:49:32 2026 GMT
Subject: CN=69e19fbc-1f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a4:93:da:5d:f1:9c:c0:d9:44:ba:be:ba:2d:
39:8c:7e:63:85:61:8e:c0:a8:d9:f1:76:2e:79:5f:
be:8c:1f:31:8c:2a:74:0d:ae:20:9c:e8:b0:0c:3a:
40:8f:9c:a7:2f:59:d4:29:3d:c8:7f:35:d8:72:e9:
21:71:c2:d9:b3:7c:c9:07:2f:1f:e0:6d:57:80:07:
4f:7f:2a:28:fe:1f:c9:d4:5d:2b:7b:12:c5:e5:3e:
df:71:c5:d6:a8:3d:fb:e9:1f:1e:df:00:1d:83:22:
28:d3:b5:6e:ab:fc:48:e3:8b:40:78:1f:01:62:78:
51:24:6a:9a:3f:cf:cf:a6:f1:c4:93:be:2b:84:87:
42:7b:57:b3:8e:b3:66:56:4e:13:04:03:33:b0:23:
63:5e:e6:a0:33:72:39:91:f8:e4:37:f5:0f:38:43:
0b:a8:bf:1a:87:4a:4b:1f:84:92:90:13:f1:bd:59:
7a:18:56:c4:22:18:83:22:2b:60:8c:bf:9e:51:0b:
15:4e:90:59:76:17:1b:c5:af:1a:e0:68:bf:e7:8d:
26:4d:ca:b4:15:96:b7:0f:c1:a3:ec:5f:99:1d:5f:
13:98:81:da:41:61:aa:79:3c:a8:c7:ed:a0:6f:89:
80:f2:ef:f5:27:d1:0f:de:9e:e2:9b:a4:fd:27:86:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:73:92:1E:F6:50:49:38:CC:0A:28:7B:A1:95:C0:8A:DB:87:43
X509v3 Authority Key Identifier:
keyid:A9:2F:4C:E4:89:CD:0E:97:D1:67:60:43:F8:C3:4F:83:06:79:D8:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196480/45DA3FE62B8011EE9FF2F576C4F9AE02/qS9M5InNDpfRZ2BD-MNPgwZ52Pc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:ac:a6:b8:14:26:8a:e8:40:83:a0:3d:c3:b1:9e:3c:cc:82:
ef:2c:45:50:9e:9a:4d:5f:de:bf:a9:8a:30:00:27:2a:8c:b4:
08:b0:e4:48:12:43:04:10:e8:75:6b:36:64:2d:cf:8f:87:be:
33:01:37:70:d5:5c:c8:6f:90:08:26:39:e6:e6:8b:01:76:78:
42:a0:eb:ed:cc:ae:22:6d:d1:aa:3e:b5:b9:bf:b0:8e:18:be:
c0:4f:70:a0:a4:b3:e9:16:21:ed:d8:32:e1:95:61:d1:c1:a5:
90:1b:6d:b5:b2:0f:a7:33:9f:8d:71:79:8b:59:c2:9e:5a:c4:
43:22:26:8d:18:8f:c9:75:be:7a:0d:8a:4c:c4:1c:bf:71:da:
c2:70:81:a8:41:f9:bc:e3:d3:64:3b:ae:a3:aa:ee:37:8d:61:
74:4a:f3:25:88:e8:28:6b:c4:59:a7:53:ec:90:88:f9:7d:33:
03:6c:79:d3:ef:78:09:78:ee:bf:82:0c:0f:da:ef:ad:60:74:
55:a1:b8:a8:46:e0:87:ff:e7:54:15:31:17:0f:6d:64:1d:d0:
b0:3c:a4:37:89:f0:74:bf:52:ce:89:6a:71:8a:4a:db:20:80:
15:74:cd:7d:26:2d:11:48:35:58:1c:17:49:7d:09:0c:c2:6b:
ff:e6:90:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:53 2026 by rpki-client