
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: WTh/iIFVnInW25qMAeSTbzgYR339YoxwC7sFGrZbY/8=
Subject key identifier: E7:EF:07:DC:90:6E:BC:4A:7E:61:9E:66:94:CB:B4:D5:57:AB:2E:E0
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 0823
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 0804
Signing time: Wed 22 Jul 2026 21:52:08 +0000
Manifest this update: Wed 22 Jul 2026 21:52:07 +0000
Manifest next update: Wed 29 Jul 2026 21:52:07 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: UO6VURBXjuIZS+Rv9ty/Jz45bLsW0Y1KDlWDKJs6MbY=)
2: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
4: 56D3C71687AB11F095613811C4F9AE02.roa (hash: /iyD3hld6gjpTGLsl0+ygpbYTM+w2T0GBHJEgaI/WgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083 (0x823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: Jul 22 21:52:07 2026 GMT
Not After : Jul 29 21:52:07 2026 GMT
Subject: CN=6a613b88-a29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d5:a4:01:c1:69:d9:9f:41:a7:fe:1c:58:1f:
3f:cf:7c:af:d5:ee:24:b2:49:6d:b7:1a:be:2e:26:
bb:41:1e:d5:f1:fe:05:cb:8d:49:9b:35:5c:5e:64:
56:3c:e7:5f:e4:20:77:b1:8f:c3:90:6f:98:af:08:
cb:88:2e:82:1b:60:21:52:6e:4f:8d:6c:d5:3f:1a:
ac:09:04:a6:bc:04:04:3f:76:66:50:8b:a6:6b:3d:
58:f0:d8:ca:33:02:53:a6:5c:63:b6:80:2c:8b:a7:
18:52:77:ba:9d:b1:1b:93:18:01:48:40:44:1b:fd:
66:d4:15:c5:c1:af:8d:c3:01:32:db:17:71:41:ec:
ec:d0:d5:3d:4f:d5:d8:b5:cc:84:11:f5:b8:00:e5:
bb:d9:99:8a:70:a3:fc:ba:1e:dd:21:0b:4d:ca:a0:
5b:9f:c5:44:81:d5:37:ec:a9:60:f5:6d:89:55:bb:
92:00:28:3b:31:5b:69:66:46:a5:1d:90:4c:39:44:
38:3d:2e:af:10:55:f5:01:d1:18:80:dc:9c:b8:f7:
4b:83:d6:93:29:75:40:68:2c:b5:ad:32:ee:21:ff:
16:3d:52:0f:4e:75:d0:07:41:95:22:85:44:4d:bd:
27:ce:30:d9:82:b4:0b:71:5a:e3:19:b7:85:1c:40:
64:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EF:07:DC:90:6E:BC:4A:7E:61:9E:66:94:CB:B4:D5:57:AB:2E:E0
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:47:91:c8:29:5c:e9:1c:14:66:07:1e:0e:8a:73:01:00:fe:
8e:79:b6:57:a0:2f:6c:dd:7e:bd:c4:e4:da:f5:f4:21:c4:7d:
13:99:e3:00:b4:95:82:28:d4:ec:e4:f3:b1:c7:9c:a5:96:35:
b4:61:b6:92:40:44:47:5d:ef:15:77:42:d4:9b:fa:c9:34:fa:
2d:50:80:ca:3b:10:c0:82:ae:3a:fa:ef:bc:c7:f3:e3:7c:b0:
d3:a9:7d:d9:0a:d7:94:a2:96:e3:fd:1f:79:de:eb:0c:e7:6c:
36:c7:d3:81:12:68:db:8a:75:37:f8:2b:85:80:40:06:03:a0:
89:f8:d6:c7:05:2e:d4:7f:ec:a5:f4:4e:fc:41:e9:80:c6:2c:
56:34:a0:bf:d5:64:2d:ca:98:32:41:98:f0:8e:58:0b:8a:55:
39:af:87:d1:5b:06:f4:9a:61:22:8e:56:d5:29:a1:69:eb:a4:
73:d3:1c:c4:65:90:77:6d:db:6d:52:35:18:f0:e1:4c:f4:4e:
63:24:79:3b:c7:5e:69:1a:21:95:d2:ed:51:5f:dd:fb:0a:e3:
f2:12:32:fe:f7:d6:ff:d4:d2:57:14:1a:e0:da:40:f4:e1:88:
4f:96:4a:81:42:44:d8:ff:3f:78:de:ca:10:e3:5c:85:da:55:
6e:9c:04:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:03:09 2026 by rpki-client