
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier: HqGpae5VYpzbmPPpZo3hpz1xOLb8+Oq/+m/DO02y1IY=
Subject key identifier: 49:AF:98:62:0D:6A:B9:D3:01:FC:F2:F2:79:F8:D4:7E:4B:2A:4A:2C
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number: 01C3
Signing time: Sun 27 Sep 2026 04:15:35 +0000
Manifest this update: Sun 27 Sep 2026 04:15:34 +0000
Manifest next update: Sun 04 Oct 2026 04:15:34 +0000
Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: 8agy/68xQ/9rVwAP08gjqSnUwDrSOur5RJiAbK+t9/c=)
2: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: mvClkx+/PklZJGKqgdrrZKMouehan4C+PlGcFt8iz2Y=)
3: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: kHqgL13pwDNCnWVijT06uf83XtGX7ISyin8fJncV3XQ=)
4: UjEm5kabhW9vr-i3NwoF0aw5w6s.asa (hash: Td7JO2SZVJYr3H8UIyYpWtvYcdHpVvCG4vUJYY1jjbc=)
5: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: qS3P8NL2nujD8GiZi/a7Ne2ppBzTvdhSsZKX+btH6bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 04:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Validity
Not Before: Sep 27 04:15:34 2026 GMT
Not After : Oct 4 04:15:34 2026 GMT
Subject: CN=6ab89867-7796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:aa:b3:0f:96:41:bb:7e:92:86:5a:d7:d7:
11:d6:de:0b:d1:a7:b6:0f:84:45:27:76:1f:1e:22:
72:ba:cb:18:a4:87:74:71:ec:e0:26:42:7e:82:a5:
cb:49:60:aa:1f:17:23:dc:e4:21:c1:ee:06:48:85:
89:17:27:dd:ed:24:4c:d3:c2:86:83:f0:82:04:eb:
4e:55:df:13:fc:41:c7:1b:da:5b:b6:81:0d:9f:b5:
39:4f:3b:7f:b2:ff:df:d4:90:cd:43:08:01:82:b0:
60:7e:51:91:ad:42:69:1b:23:27:43:47:22:dc:77:
ab:94:dd:e3:9a:d9:fc:a7:e0:ba:f2:9f:e1:b3:3c:
3f:a7:4d:23:19:b9:fa:47:ed:85:22:02:5c:48:07:
f4:6a:16:32:be:2b:6b:49:d0:d5:3a:f4:82:f7:48:
85:68:97:16:ae:7a:0d:a9:ae:a0:18:11:97:a5:a5:
8f:7a:48:14:17:03:83:d5:3c:0b:48:49:fd:34:2b:
78:7f:3f:de:57:51:5e:73:a1:0b:f5:26:71:b3:a2:
45:73:38:d8:88:e2:ea:02:18:01:a2:41:6b:99:7f:
d7:ef:91:21:19:6e:8d:c0:21:3d:07:6a:69:6f:64:
cf:f0:06:58:98:58:07:f0:a1:37:0a:4d:fb:aa:77:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:98:62:0D:6A:B9:D3:01:FC:F2:F2:79:F8:D4:7E:4B:2A:4A:2C
X509v3 Authority Key Identifier:
keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9f:5d:bd:e4:29:3f:92:c1:11:b7:b2:e1:f4:20:de:57:4e:
a1:ea:eb:e8:74:9f:d3:10:67:41:3e:60:ed:70:a9:9e:dd:53:
0b:2d:c3:9e:50:b6:31:eb:bc:6a:ec:c5:d6:5c:99:85:56:57:
a4:b7:72:e6:c5:af:ca:29:b2:9c:b0:f7:35:89:a3:0b:76:fe:
88:f1:23:66:64:41:52:65:70:05:be:dd:21:1d:35:55:6d:6e:
6a:49:97:0f:1a:ec:e7:43:54:ee:67:16:5c:1b:f8:38:85:48:
39:0d:31:09:fd:d8:8a:d3:0b:76:89:7a:7f:c5:56:5d:a5:3e:
84:b4:f4:d5:5c:9d:7d:83:b4:d5:70:7a:1e:9b:71:50:d9:53:
6a:6c:ce:d0:48:65:c2:7f:34:04:a3:15:5f:00:68:90:0e:6b:
b5:cb:58:02:5f:db:8b:2a:28:39:23:bf:3a:c5:58:e4:04:29:
c5:a5:28:3d:54:dc:f4:01:1f:59:37:5f:60:28:8b:fb:90:1d:
94:df:e9:ad:03:1d:f0:35:11:08:4b:b8:68:41:26:57:c0:79:
81:59:02:3e:5c:cf:9d:38:b3:10:84:03:60:88:f2:8a:02:d8:
7a:c7:ca:93:d1:7f:84:2e:22:93:ad:be:49:f8:a4:31:44:9d:
64:1e:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:21:35 2026 by rpki-client