
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json)
Hash identifier: 6NDrrWQkavY8P84nBYcel/rSZmsbWFX60TZJ9Egt1ZA=
Subject key identifier: 76:CC:61:F0:CB:94:8B:F7:D8:01:C7:EE:D3:2F:9B:77:75:4F:C7:8C
Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Certificate serial: 1144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
Manifest number: 1122
Signing time: Thu 16 Apr 2026 17:10:44 +0000
Manifest this update: Thu 16 Apr 2026 17:10:43 +0000
Manifest next update: Thu 23 Apr 2026 17:10:43 +0000
Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: uDAJQAmHMGwChnyVZhonGvclo7h8EbsC8pCDPIWAQzk=)
2: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: u8MY1OzKY8z4qKXeNf9qa8cd339LC15MI2p8BZS61RI=)
3: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: zaS5mzK/IyBJHAKDC1c+q1bnUd4SwxYZrRdM7KycEiU=)
4: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: YkgZVrV5vjIQhVdrVUxXczN4RAkHyGEMn+Q/a9az7v4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4420 (0x1144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Validity
Not Before: Apr 16 17:10:43 2026 GMT
Not After : Apr 23 17:10:43 2026 GMT
Subject: CN=69e11814-f80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:bc:72:eb:51:59:d4:85:66:13:fa:cf:77:
3e:95:67:c1:72:79:3d:4d:a7:8b:67:ff:a4:94:cb:
f1:21:dd:7d:79:13:bb:37:b5:75:c3:6b:d5:f2:97:
56:48:da:85:95:3e:1a:ae:ce:30:18:da:29:da:d1:
65:e1:f1:b8:c9:f5:69:28:eb:b0:16:7b:2b:c9:54:
10:a3:c0:db:02:fa:83:a2:15:36:2d:db:88:be:fd:
d0:98:31:0c:a9:72:96:f6:57:ae:39:cc:f1:d6:ce:
79:c2:20:aa:1e:79:36:fc:c5:bc:69:b9:49:10:c2:
49:01:92:97:90:d8:8e:50:bd:10:e0:e3:5e:18:1e:
61:4a:c3:e7:91:65:b7:6a:8c:92:1b:71:57:7b:a2:
c1:b7:7f:bc:c4:2c:75:46:64:da:1a:64:d0:c5:56:
21:a6:53:c6:10:fa:99:76:93:ea:1b:ea:c0:23:ed:
69:96:79:24:45:01:d1:2c:86:a7:22:3a:42:77:73:
c8:58:18:c4:fd:59:99:c6:63:7a:1a:0b:87:6c:6d:
0c:26:b5:6b:8f:18:6e:30:dc:d7:c9:62:75:f2:12:
7f:c5:26:79:ea:6b:80:5c:4d:c8:6f:c7:c5:14:5b:
cf:15:a1:ed:cf:7d:ca:cb:33:c0:f1:3c:c5:fd:c3:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CC:61:F0:CB:94:8B:F7:D8:01:C7:EE:D3:2F:9B:77:75:4F:C7:8C
X509v3 Authority Key Identifier:
keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ee:2a:2a:44:9a:5c:07:db:ae:14:49:68:da:98:5e:ea:f0:
63:c1:2b:e3:7c:30:85:b1:d3:72:93:cd:6e:a5:cd:7d:67:05:
0d:aa:76:28:af:f5:50:71:8e:82:db:6a:03:f8:35:df:d2:8b:
9f:70:48:b3:95:42:9a:3b:d8:6b:c8:04:83:fb:06:0d:d5:01:
29:17:3b:e6:54:e1:3c:23:e1:39:1c:fe:66:18:7f:df:a5:0b:
74:17:89:18:8c:ac:dd:6a:07:68:d2:26:6c:fa:a8:0a:77:40:
e4:5a:f2:11:66:02:95:8c:d9:20:ed:12:dc:07:9a:2e:f2:dd:
10:e0:10:75:1f:0b:ce:e4:a8:84:c2:7d:aa:c1:c8:ba:1f:5e:
18:9f:19:34:85:3d:05:7c:6b:87:21:4b:1f:45:22:12:80:19:
78:cf:46:7f:23:9e:1a:d0:94:cb:c1:eb:9c:41:42:66:b4:85:
bf:cd:3a:2f:44:49:b6:a2:1c:a2:03:95:20:be:98:41:6e:61:
de:92:1a:2b:50:2e:e3:65:2c:84:9d:8d:29:22:ae:a2:af:98:
b5:2e:98:69:fc:48:88:cc:a8:e4:15:17:cd:df:39:4d:70:90:
ff:9f:f8:7d:0c:06:a6:a5:fb:10:c5:68:c4:3e:fd:4f:5d:af:
22:b2:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:29 2026 by rpki-client