
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier: 7J32OjstJvocSS96qkWvzyp14lCvJ4oAY87eF2gf8EY=
Subject key identifier: 8C:27:59:FB:7A:4A:70:76:73:EE:A1:B5:ED:60:B6:B0:DF:E5:99:37
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial: 0A49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number: 0A23
Signing time: Thu 24 Sep 2026 19:43:44 +0000
Manifest this update: Thu 24 Sep 2026 19:43:43 +0000
Manifest next update: Thu 01 Oct 2026 19:43:43 +0000
Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: zTfgLCNhzFzuhTDWy5iV+ouROLr8FDKe1ubKDbgrqqs=)
2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: AihcOnul/rat7l3v9SLpKTdGvOueszYtqhBJ4Y0Rnoo=)
3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 1ODBDIzmi7SobQEAchEIzRuNrlYcJERwh0/ZlLEoL8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2633 (0xa49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Validity
Not Before: Sep 24 19:43:43 2026 GMT
Not After : Oct 1 19:43:43 2026 GMT
Subject: CN=6ab57d70-1caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:fb:27:cd:5c:e1:23:79:d9:04:87:7f:42:
6f:9e:25:f5:63:47:02:82:d3:28:ec:06:c2:bc:61:
68:0e:3d:ad:55:cb:ec:4c:d1:3e:5f:ef:40:ad:a4:
f1:a0:29:69:d7:e6:94:b2:4d:ca:3b:83:a9:66:31:
69:bd:cc:03:29:be:f8:a1:ac:91:92:d5:12:e9:5d:
67:37:a6:87:75:4b:b4:dc:38:7f:92:34:31:38:f9:
e4:59:dd:11:71:61:1a:09:b5:e4:ea:37:ed:bd:e3:
38:69:1a:1f:9d:5b:04:c8:70:33:48:8d:c2:a4:9f:
db:4c:81:18:0d:14:33:2a:c4:13:fd:7d:24:d3:34:
c6:23:85:ce:c8:9e:b9:3c:ae:5a:71:fa:ab:05:ea:
5f:09:47:3b:58:0c:6f:38:48:e8:9d:15:14:d6:18:
c1:3d:67:e5:9b:77:f8:02:57:cb:03:4a:28:3d:81:
8a:fd:85:da:da:5f:e2:c1:a8:64:d0:0f:a5:d0:a3:
12:1a:51:ea:d1:84:d2:bc:cf:6f:b3:64:4a:10:a2:
13:40:05:fe:a5:7a:eb:e0:f3:e9:c8:e0:f7:ef:54:
64:2a:bc:94:64:20:e6:3f:d0:55:9f:3b:1d:a9:33:
05:54:ed:0c:12:de:46:a7:61:b0:44:70:2f:94:19:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:27:59:FB:7A:4A:70:76:73:EE:A1:B5:ED:60:B6:B0:DF:E5:99:37
X509v3 Authority Key Identifier:
keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:33:42:15:4a:fd:b2:53:c8:2c:6d:8c:28:cc:d1:20:da:06:
b1:d1:94:45:81:7a:ff:82:1e:90:f9:f9:c1:71:c4:e0:5f:e5:
d1:2e:05:1c:69:4a:2e:14:fa:af:ea:f0:04:ed:67:5c:86:80:
50:ec:a0:73:36:3f:d1:32:2b:34:9c:70:58:3e:1d:46:07:79:
54:3b:7f:e5:84:a8:c0:46:1b:c2:67:b7:5d:ab:f2:f7:34:c9:
c1:22:95:92:c4:d0:f6:1d:e3:2f:a8:f8:54:4b:f2:48:45:00:
99:1e:f1:48:24:fe:26:3b:42:45:af:2c:5f:7f:4b:0c:0c:01:
30:62:23:ce:90:fa:d6:ba:04:f7:25:9b:d2:ef:fa:6e:c5:65:
40:4b:ac:d3:7e:53:a4:03:6f:3b:8c:e5:2f:12:f0:ea:0d:47:
da:a9:3c:bd:27:bc:ae:0c:1c:2d:ed:40:2b:85:f0:61:04:96:
e7:2f:c8:79:50:a2:50:e3:ec:01:12:f6:54:87:45:31:15:e7:
04:d1:8f:ae:c3:ac:93:a9:82:d6:84:79:95:5c:43:06:6c:61:
88:09:00:3c:72:8d:63:f0:52:b4:b0:27:f2:22:b8:58:e6:c3:
ee:81:db:73:74:28:e4:15:74:1f:7c:4c:16:9b:43:9b:fd:b5:
09:1e:ed:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThEMEYxMTAvBgNVBAUTKDQzRTFFOEM0MjYxQ0UwN0Q0RjhFNENGQjdBM0Y4MzNG
QkI0NkI4OEMwHhcNMjYwOTI0MTk0MzQzWhcNMjYxMDAxMTk0MzQzWjAYMRYwFAYD
VQQDEw02YWI1N2Q3MC0xY2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsr77J81c4SN52QSHf0JvniX1Y0cCgtMo7AbCvGFoDj2tVcvsTNE+X+9AraTx
oClp1+aUsk3KO4OpZjFpvcwDKb74oayRktUS6V1nN6aHdUu03Dh/kjQxOPnkWd0R
cWEaCbXk6jftveM4aRofnVsEyHAzSI3CpJ/bTIEYDRQzKsQT/X0k0zTGI4XOyJ65
PK5acfqrBepfCUc7WAxvOEjonRUU1hjBPWflm3f4AlfLA0ooPYGK/YXa2l/iwahk
0A+l0KMSGlHq0YTSvM9vs2RKEKITQAX+pXrr4PPpyOD371RkKryUZCDmP9BVnzsd
qTMFVO0MEt5Gp2GwRHAvlBngFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwnWft6
SnB2c+6hte1gtrDf5Zk3MB8GA1UdIwQYMBaAFEPh6MQmHOB9T45M+3o/gz+7RriM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEQwRi83RDIyNzNCNEE2
NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRIMVBqa3o3ZWotRFA3dEd1
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtSG94Q1ljNEgxUGprejdlai1EUDd0R3VJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEQwRi83RDIyNzNCNEE2NDYxMUVBQUY5RTkxNjJDNEY5QUUwMi9RLUhveENZYzRI
MVBqa3o3ZWotRFA3dEd1SXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjjNCFUr9slPILG2MKMzRINoGsdGURYF6/4IekPn5wXHE4F/l0S4FHGlKLhT6
r+rwBO1nXIaAUOygczY/0TIrNJxwWD4dRgd5VDt/5YSowEYbwme3Xavy9zTJwSKV
ksTQ9h3jL6j4VEvySEUAmR7xSCT+JjtCRa8sX39LDAwBMGIjzpD61roE9yWb0u/6
bsVlQEus035TpANvO4zlLxLw6g1H2qk8vSe8rgwcLe1AK4XwYQSW5y/IeVCiUOPs
ARL2VIdFMRXnBNGPrsOsk6mC1oR5lVxDBmxhiAkAPHKNY/BStLAn8iK4WObD7oHb
c3Qo5BV0H3xMFptDm/21CR7t9Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:42:00 2026 by rpki-client