
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
File: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft (raw, json)
Hash identifier: bwbTNopp/th5wh985vsWMlL0juEI1d6s+GDLlzJv9QA=
Subject key identifier: 2E:AC:7E:39:52:6A:DC:C5:6E:DE:E7:18:CB:FD:D5:5C:3E:F6:28:48
Authority key identifier: 49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
Certificate issuer: /CN=A9198BAC/serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
Manifest number: 5F
Signing time: Mon 21 Sep 2026 08:07:51 +0000
Manifest this update: Mon 21 Sep 2026 08:07:51 +0000
Manifest next update: Mon 28 Sep 2026 08:07:51 +0000
Files and hashes: 1: SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl (hash: sYTs44oXrhAhc9sKR1+0fA81biMIw8MUGpP5v5Aa4DI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198BAC, serialNumber=4901FA7B27FE6737553366CF8DB8FDABD2F7B149
Validity
Not Before: Sep 21 08:07:51 2026 GMT
Not After : Sep 28 08:07:51 2026 GMT
Subject: CN=6ab0e5d7-2c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:4b:46:98:b7:9d:75:f0:c1:db:a6:52:07:
10:40:7f:7e:70:e7:fc:48:f5:bf:cd:cb:41:7f:4d:
bb:94:3f:64:c3:78:27:83:ce:36:2e:b0:46:d0:0f:
cf:af:db:03:9e:8d:21:a9:37:66:1b:bc:24:a0:c0:
08:bb:e9:4b:a9:03:a8:6d:fd:e4:8d:29:3d:e9:d6:
43:e0:61:d1:3f:93:ec:ff:df:d9:7a:9c:7d:2f:95:
84:1b:45:21:fa:35:df:d9:a0:fa:6a:af:2a:05:f9:
a8:10:e4:30:78:4c:d1:65:a0:a1:0f:f7:b3:56:02:
a8:82:b2:f0:82:2b:91:0c:4a:50:88:4d:30:69:62:
4a:8e:ec:ee:d3:08:b0:7a:c3:de:97:f3:42:c8:ce:
3d:65:05:a5:a0:03:64:32:31:95:4d:17:30:b0:9b:
a8:56:f3:b7:6b:74:55:1b:75:ef:f4:93:92:b7:13:
c3:35:8e:f4:f4:76:f3:fa:5c:32:45:74:47:10:0c:
0d:82:ff:7d:ea:69:dd:c9:e8:3d:55:60:19:e1:ef:
5d:52:bb:7e:22:2e:0d:8c:5e:26:4a:b8:32:7c:ae:
e4:b1:f3:fc:34:3f:7f:31:95:0b:da:94:c4:e7:3d:
61:e7:bf:3b:2b:ee:44:39:17:e7:a5:90:64:90:af:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AC:7E:39:52:6A:DC:C5:6E:DE:E7:18:CB:FD:D5:5C:3E:F6:28:48
X509v3 Authority Key Identifier:
keyid:49:01:FA:7B:27:FE:67:37:55:33:66:CF:8D:B8:FD:AB:D2:F7:B1:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198BAC/A5C5860E24FC11F19F62A4C5B6833773/SQH6eyf-ZzdVM2bPjbj9q9L3sUk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:d7:57:ba:f5:bc:83:4c:b9:59:f1:60:de:56:6d:c1:ee:
84:45:54:57:83:fb:ca:69:4e:15:86:72:cd:d2:53:62:e6:cb:
92:3f:3c:0b:85:56:8a:c7:77:ee:43:b8:f8:6c:1b:48:e0:90:
52:64:4a:fa:59:95:60:3e:a5:b7:ff:2a:56:1d:43:40:59:9a:
da:51:96:71:26:d0:86:6e:78:47:10:1d:12:76:b3:c1:67:06:
31:1d:5a:a8:7b:67:6e:c7:aa:d0:e4:74:b7:f4:87:52:88:07:
a2:50:25:80:c2:61:f8:5a:2b:c0:5a:8e:80:94:25:c4:38:10:
7b:95:98:1e:6f:70:97:8b:46:ee:66:90:13:c1:e6:1f:e1:3a:
f2:2f:09:0b:54:68:09:4d:1f:6d:e6:50:b3:3b:55:a1:ad:9c:
ab:c3:cf:87:f3:ba:ea:86:c8:13:a4:2d:e5:eb:38:ca:f5:65:
ed:0a:3b:8b:a1:cc:88:c1:d0:8b:20:f8:cb:b0:d3:61:33:b5:
74:ef:3c:91:ed:b8:96:a3:50:0b:47:0c:26:59:8d:81:f4:44:
5f:1e:1c:25:70:60:d2:59:85:07:06:a9:b6:3e:f8:4a:d0:f6:
43:cb:7b:c3:5f:e9:37:52:c9:4f:2e:e3:a0:d5:f7:79:1c:9f:
34:36:50:72
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEJBQzExMC8GA1UEBRMoNDkwMUZBN0IyN0ZFNjczNzU1MzM2NkNGOERCOEZEQUJE
MkY3QjE0OTAeFw0yNjA5MjEwODA3NTFaFw0yNjA5MjgwODA3NTFaMBgxFjAUBgNV
BAMTDTZhYjBlNWQ3LTJjNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCidUtGmLeddfDB26ZSBxBAf35w5/xI9b/Ny0F/TbuUP2TDeCeDzjYusEbQD8+v
2wOejSGpN2YbvCSgwAi76UupA6ht/eSNKT3p1kPgYdE/k+z/39l6nH0vlYQbRSH6
Nd/ZoPpqryoF+agQ5DB4TNFloKEP97NWAqiCsvCCK5EMSlCITTBpYkqO7O7TCLB6
w96X80LIzj1lBaWgA2QyMZVNFzCwm6hW87drdFUbde/0k5K3E8M1jvT0dvP6XDJF
dEcQDA2C/33qad3J6D1VYBnh711Su34iLg2MXiZKuDJ8ruSx8/w0P38xlQvalMTn
PWHnvzsr7kQ5F+elkGSQr2qTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULqx+OVJq
3MVu3ucYy/3VXD72KEgwHwYDVR0jBBgwFoAUSQH6eyf+ZzdVM2bPjbj9q9L3sUkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QkFDL0E1QzU4NjBFMjRG
QzExRjE5RjYyQTRDNUI2ODMzNzczL1NRSDZleWYtWnpkVk0yYlBqYmo5cTlMM3NV
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU1FINmV5Zi1aemRWTTJiUGpiajlxOUwzc1VrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
QkFDL0E1QzU4NjBFMjRGQzExRjE5RjYyQTRDNUI2ODMzNzczL1NRSDZleWYtWnpk
Vk0yYlBqYmo5cTlMM3NVay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCHrddXuvW8g0y5WfFg3lZtwe6ERVRXg/vKaU4VhnLN0lNi5suSPzwLhVaKx3fu
Q7j4bBtI4JBSZEr6WZVgPqW3/ypWHUNAWZraUZZxJtCGbnhHEB0SdrPBZwYxHVqo
e2dux6rQ5HS39IdSiAeiUCWAwmH4WivAWo6AlCXEOBB7lZgeb3CXi0buZpATweYf
4TryLwkLVGgJTR9t5lCzO1WhrZyrw8+H87rqhsgTpC3l6zjK9WXtCjuLocyIwdCL
IPjLsNNhM7V07zyR7biWo1ALRwwmWY2B9ERfHhwlcGDSWYUHBqm2PvhK0PZDy3vD
X+k3UslPLuOg1fd5HJ80NlBy
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:58:47 2026 by rpki-client