
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json)
Hash identifier: TrnYAtf0QVzXrmnZFvkyEKVHdYmISfegj6ldv36R+uU=
Subject key identifier: 48:73:6A:1E:6B:E9:85:C8:76:07:FB:2E:B3:C0:ED:BD:08:AF:E8:7F
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 02A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
Manifest number: 028D
Signing time: Thu 23 Jul 2026 03:01:15 +0000
Manifest this update: Thu 23 Jul 2026 03:01:14 +0000
Manifest next update: Thu 30 Jul 2026 03:01:14 +0000
Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: bnwhYAb0vlW8wqXKhLqS8GvaYhAqsDzJ7WNmPiBgUHw=)
2: B24758AE772311EFA5510A63C4F9AE02.roa (hash: knFwvMjPgbAwZWQ4tl74NJH9Eoq0c8p4Rxp+Mu8Ms4k=)
3: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: rF7SOFEvy817x7nCvoQTwE931VplbOd/lPkpG4O4yR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416, serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Validity
Not Before: Jul 23 03:01:14 2026 GMT
Not After : Jul 30 03:01:14 2026 GMT
Subject: CN=6a6183fb-a661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:17:56:8d:24:c2:e3:2b:6b:bd:33:2f:b9:
fa:a7:6f:a1:b3:6b:3a:5a:60:82:95:2a:d7:d1:92:
9b:73:a6:07:04:e8:6b:23:26:71:c8:0e:72:40:5a:
d7:b2:36:cc:f3:5e:6d:80:5c:89:ed:e5:25:d7:81:
69:fd:5d:d8:79:f3:68:95:dc:56:67:97:17:64:7e:
44:4e:f4:8c:cf:98:99:d8:7e:2c:c2:65:ee:82:65:
9c:4d:d2:35:2d:dd:15:f2:5c:2d:07:76:36:30:63:
58:b3:d0:63:70:97:35:ae:ad:fc:18:8a:63:1d:43:
21:91:c3:8e:c2:41:37:51:ba:71:c0:fc:a9:40:67:
27:cc:47:b0:7d:48:c0:be:54:b1:38:0a:02:00:73:
34:b4:a6:9d:cc:cf:a7:15:c3:d9:b2:25:bc:0d:8a:
a5:42:af:cb:2d:86:fe:4e:86:34:a1:e1:a7:57:81:
a0:ba:ae:b4:cc:cd:2e:3a:7e:08:c0:86:76:15:29:
44:8b:68:90:b2:00:8c:2b:9d:39:a4:3f:d2:9c:eb:
e7:6b:74:2a:61:11:f8:75:59:73:5d:4d:34:5d:d2:
d3:63:5e:4c:8f:b3:6d:42:6e:f7:d9:be:19:28:b2:
44:c0:ca:e3:d0:48:49:7b:f4:0e:2e:78:f5:fb:a0:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:73:6A:1E:6B:E9:85:C8:76:07:FB:2E:B3:C0:ED:BD:08:AF:E8:7F
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:d3:ea:9c:3a:e1:cc:29:29:67:47:9e:25:d2:fb:e5:00:d9:
1a:05:3f:7c:fe:74:a2:9a:08:c3:10:bc:72:0a:ed:ad:12:4b:
b8:79:09:9c:de:b4:c5:f7:37:d5:14:b7:61:90:25:77:71:a2:
0b:cc:43:6d:0d:b3:be:d5:fa:98:a4:3c:6b:1c:99:2a:fd:15:
e8:a4:21:9c:d6:9f:c9:02:31:1e:57:a0:49:d2:44:76:0f:61:
95:b7:40:40:6a:aa:d1:e9:1e:17:2b:cb:4a:ae:c8:53:59:bd:
d2:4e:50:4a:f7:39:a8:b6:04:a0:d4:54:2c:f6:c8:7f:34:90:
7b:41:48:63:7b:92:a2:e9:b9:1e:57:51:6e:9b:24:81:26:5f:
02:72:18:8d:38:bb:11:f7:e7:45:8b:4a:89:52:5f:1d:cc:db:
f8:c8:f5:35:7d:86:ed:b8:d3:a6:78:02:2f:90:d8:b5:ce:a9:
04:64:4a:6f:f0:36:70:83:b5:24:4d:ae:37:5b:fa:bf:bb:24:
85:75:28:fc:59:bd:2b:c5:6c:14:ac:88:78:5a:a1:8f:d8:9d:
97:d5:9c:cb:d4:08:6f:f8:56:92:b7:d7:f3:5c:b8:41:77:b5:
44:0a:30:c5:1a:a2:99:f0:76:87:87:e9:c3:7d:df:e7:ea:eb:
4f:93:8c:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF
NDcwREU4QjIwHhcNMjYwNzIzMDMwMTE0WhcNMjYwNzMwMDMwMTE0WjAYMRYwFAYD
VQQDEw02YTYxODNmYi1hNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwLQXVo0kwuMra70zL7n6p2+hs2s6WmCClSrX0ZKbc6YHBOhrIyZxyA5yQFrX
sjbM815tgFyJ7eUl14Fp/V3YefNoldxWZ5cXZH5ETvSMz5iZ2H4swmXugmWcTdI1
Ld0V8lwtB3Y2MGNYs9BjcJc1rq38GIpjHUMhkcOOwkE3UbpxwPypQGcnzEewfUjA
vlSxOAoCAHM0tKadzM+nFcPZsiW8DYqlQq/LLYb+ToY0oeGnV4Gguq60zM0uOn4I
wIZ2FSlEi2iQsgCMK505pD/SnOvna3QqYRH4dVlzXU00XdLTY15Mj7NtQm732b4Z
KLJEwMrj0EhJe/QOLnj1+6CiqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhzah5r
6YXIdgf7LrPA7b0Ir+h/MB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2
NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ
YlV1b2J5ekN3ZVhrY042TEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg9PqnDrhzCkpZ0eeJdL75QDZGgU/fP50opoIwxC8cgrtrRJLuHkJnN60xfc3
1RS3YZAld3GiC8xDbQ2zvtX6mKQ8axyZKv0V6KQhnNafyQIxHlegSdJEdg9hlbdA
QGqq0ekeFyvLSq7IU1m90k5QSvc5qLYEoNRULPbIfzSQe0FIY3uSoum5HldRbpsk
gSZfAnIYjTi7EffnRYtKiVJfHczb+Mj1NX2G7bjTpngCL5DYtc6pBGRKb/A2cIO1
JE2uN1v6v7skhXUo/Fm9K8VsFKyIeFqhj9idl9Wcy9QIb/hWkrfX81y4QXe1RAow
xRqimfB2h4fpw33f5+rrT5OMkw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:21 2026 by rpki-client