
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier: vimIsdnLZxH7ecjK4IF3Upj6ittaSbYlfy57Tpa3aGY=
Subject key identifier: 65:B6:62:56:B5:B5:C6:9C:4C:E5:98:88:E7:CF:63:2D:96:15:67:44
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial: 1831
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number: 1825
Signing time: Thu 24 Sep 2026 16:29:56 +0000
Manifest this update: Thu 24 Sep 2026 16:29:55 +0000
Manifest next update: Thu 01 Oct 2026 16:29:55 +0000
Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: Nd9+c6pCiCXyRp1rF5dX9ZsAvzNJOujbjeKZOxDjJWE=)
2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: R19qxLrIh1c+/g96rJpVUSyzG1wIPKCyqhlsnSxYpaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6193 (0x1831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Validity
Not Before: Sep 24 16:29:55 2026 GMT
Not After : Oct 1 16:29:55 2026 GMT
Subject: CN=6ab55004-14d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:27:02:2f:6b:d4:18:a1:29:a7:6d:f1:ca:
95:89:30:15:49:58:88:7f:8e:00:8a:23:9f:98:ec:
e0:6d:88:a3:c8:7b:73:a4:9b:a4:c3:50:e4:43:91:
6e:b9:14:34:6b:da:a7:52:9d:ce:90:2e:da:cb:87:
c0:ef:ca:d3:99:4b:b9:d5:1d:8b:22:5d:97:6b:9c:
b8:98:2e:a2:ec:1c:47:d5:6e:64:1f:af:89:51:0d:
7c:5f:64:cd:2e:b0:97:6a:d5:5c:9e:f1:80:b8:0d:
a4:28:f9:d7:4f:4b:70:42:92:ed:e1:87:25:11:ad:
b6:b1:05:6f:8a:e4:fa:f6:16:71:1a:0f:cf:bd:2b:
98:90:5e:3b:30:e1:b7:9c:fb:58:ef:13:d9:a1:96:
88:85:d2:26:8f:43:db:2b:a5:f1:5c:10:a0:22:8c:
11:49:37:31:d2:22:49:2b:a9:26:bc:ae:5d:78:16:
86:41:21:a4:e0:65:94:b1:f8:60:b1:40:9a:9c:eb:
7d:f1:5e:aa:e2:90:d3:ab:59:71:a9:a6:03:ea:e6:
17:41:1a:79:b9:28:14:f3:c7:9f:9d:b0:c9:7a:ad:
98:e9:b4:c4:ec:3e:26:ef:33:92:e0:5d:fa:2f:a2:
77:a9:f9:04:62:63:cb:80:8c:44:d0:7c:c8:ac:56:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B6:62:56:B5:B5:C6:9C:4C:E5:98:88:E7:CF:63:2D:96:15:67:44
X509v3 Authority Key Identifier:
keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c4:91:e5:9f:49:b1:53:0b:ec:54:5b:89:17:51:19:5d:c1:
d7:ae:3d:f8:54:ee:14:ca:ba:b5:7d:0a:1a:1d:cf:b7:86:d6:
bf:b2:98:fa:ad:1e:21:8c:d5:a9:74:71:89:09:bf:70:d6:c2:
04:d7:67:dd:e8:58:f3:21:fa:a8:e5:b6:0c:2e:e6:fc:0d:93:
74:00:4d:00:7c:d3:df:00:48:d5:a7:1d:d1:e4:05:87:f5:50:
1e:98:2d:63:c7:7f:80:d2:1f:b6:f9:ba:a4:15:b1:21:ec:2a:
44:16:9e:a9:67:a7:b2:96:06:9b:23:74:4a:5e:49:01:3c:98:
82:10:cb:40:be:4a:5c:e4:46:99:45:41:ae:a2:d1:35:9a:52:
d1:99:8e:46:1d:6a:6a:06:4e:53:e8:71:22:57:ce:bb:80:4f:
00:ff:0c:79:e9:ce:08:2d:94:6a:0a:ec:b3:9b:75:88:56:87:
71:ab:dd:ce:fa:d7:70:fd:e4:fd:69:38:7f:bb:18:22:c1:6e:
70:cd:84:7a:f9:74:01:de:b3:0b:22:6d:89:d0:15:23:26:33:
6d:c1:3b:15:88:86:e8:35:19:03:33:4c:b8:46:8b:59:60:bd:
45:95:5b:e4:f6:69:ad:85:c0:f7:19:b7:55:26:d0:e9:c3:e3:
dc:38:98:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1
QkUyNUIxQjQwHhcNMjYwOTI0MTYyOTU1WhcNMjYxMDAxMTYyOTU1WjAYMRYwFAYD
VQQDEw02YWI1NTAwNC0xNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoV4nAi9r1BihKadt8cqViTAVSViIf44AiiOfmOzgbYijyHtzpJukw1DkQ5Fu
uRQ0a9qnUp3OkC7ay4fA78rTmUu51R2LIl2Xa5y4mC6i7BxH1W5kH6+JUQ18X2TN
LrCXatVcnvGAuA2kKPnXT0twQpLt4YclEa22sQVviuT69hZxGg/PvSuYkF47MOG3
nPtY7xPZoZaIhdImj0PbK6XxXBCgIowRSTcx0iJJK6kmvK5deBaGQSGk4GWUsfhg
sUCanOt98V6q4pDTq1lxqaYD6uYXQRp5uSgU88efnbDJeq2Y6bTE7D4m7zOS4F36
L6J3qfkEYmPLgIxE0HzIrFYWmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGW2Yla1
tcacTOWYiOfPYy2WFWdEMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw
QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl
MFhUZjhtUXdIYlJiNGxzYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArcSR5Z9JsVML7FRbiRdRGV3B1649+FTuFMq6tX0KGh3Pt4bWv7KY+q0eIYzV
qXRxiQm/cNbCBNdn3ehY8yH6qOW2DC7m/A2TdABNAHzT3wBI1acd0eQFh/VQHpgt
Y8d/gNIftvm6pBWxIewqRBaeqWenspYGmyN0Sl5JATyYghDLQL5KXORGmUVBrqLR
NZpS0ZmORh1qagZOU+hxIlfOu4BPAP8MeenOCC2Uagrss5t1iFaHcavdzvrXcP3k
/Wk4f7sYIsFucM2Eevl0Ad6zCyJtidAVIyYzbcE7FYiG6DUZAzNMuEaLWWC9RZVb
5PZprYXA9xm3VSbQ6cPj3DiYSw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:40:38 2026 by rpki-client