
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: I71htJ//W7h2fPoGP3Av6UmiftGbexFO/AfX6DVUdgQ=
Subject key identifier: A8:DE:A6:74:9A:9A:91:2E:C3:C1:C2:F1:07:87:2D:97:8C:07:69:09
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0ACD
Signing time: Tue 12 May 2026 19:43:15 +0000
Manifest this update: Tue 12 May 2026 19:43:15 +0000
Manifest next update: Tue 19 May 2026 19:43:15 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: B3B8VqMcR5qwH3qv//M1UyWil8W/q7KbojjqtNjHre8=)
2: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: fKLRAkWs+zCufWcV04yXK1kQ1KxM/zVG5v7JSWUHnmI=)
3: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: KKSynpOm+ycQihs/yZsWcr8FrhVz4wSTwzAIsyVh/HE=)
4: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: iHRiLGk5bEvTzw6ual7pTVIN/CRRx+XVbsv/MEAp4Wk=)
5: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=)
6: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=)
7: ABF4F248555511F0A341047BC4F9AE02.roa (hash: n9QAmEJQ9kZxHlOhthQbr/AO7+Rv5gbW5CmVpfpdp1Y=)
8: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU=)
9: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: mxCH2vpK2XOhgq6GjWu4EDLEBsLtWayBY2NOfqL8jYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: May 12 19:43:15 2026 GMT
Not After : May 19 19:43:15 2026 GMT
Subject: CN=6a0382d3-35f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:73:fe:46:00:85:32:b3:4c:eb:15:e0:03:
23:74:d7:bd:84:b9:89:b9:b9:2b:64:36:d1:5b:57:
bd:bd:e0:37:96:a1:83:87:0b:57:a8:f6:70:af:51:
a4:c6:8e:b0:e3:b7:31:29:0e:c8:1a:f2:5f:00:61:
89:89:6d:a9:db:78:48:e2:63:8b:2d:77:6e:83:a4:
5f:77:74:8a:04:02:a3:44:f6:38:d5:46:5c:94:11:
30:2b:c2:c2:1c:f3:1e:45:cb:90:24:37:3f:41:4a:
95:af:b8:87:e5:7b:a7:63:c7:a0:6c:82:b8:21:f7:
24:d3:59:35:4f:dc:35:b2:b6:9f:66:06:2b:53:a6:
49:7f:dc:c6:ff:14:94:10:3a:e7:a5:4a:df:a8:10:
87:78:b5:3f:a7:84:00:77:16:14:0c:54:df:4f:ef:
c5:cf:22:0f:61:3a:23:dc:58:a3:b9:d6:43:21:4b:
83:01:e5:fc:7f:e7:d9:50:3c:0b:12:c5:68:1d:ea:
5f:24:6a:b2:08:55:9e:8c:9a:48:79:ad:a7:3b:6a:
d6:41:16:b0:0b:3d:86:bd:8c:33:df:ec:e2:46:34:
08:72:c9:b1:c1:94:6b:63:ca:8a:b7:27:ee:c9:6b:
8f:7c:e8:cb:00:cb:7c:5e:2d:bc:c8:20:c3:c6:18:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:A6:74:9A:9A:91:2E:C3:C1:C2:F1:07:87:2D:97:8C:07:69:09
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3c:6b:8e:53:d8:68:ec:2e:a0:a2:ad:a2:9e:58:70:c1:b4:
c7:5a:9c:92:aa:c8:ec:c7:22:99:8c:19:1b:1f:3c:c8:43:0c:
49:fb:e0:68:65:da:d8:e4:16:a8:68:9a:65:82:1d:86:6d:0d:
22:c7:af:22:ed:26:b7:bc:2e:81:e7:63:3a:da:bf:87:98:a1:
fb:df:9d:97:bb:2e:d1:9f:42:c1:82:fc:c9:f6:14:b8:d1:2f:
8b:9d:50:81:86:79:6f:5d:37:75:ff:1f:e6:19:8d:90:52:ea:
4d:3c:0f:31:42:21:a6:c9:6e:ff:29:19:30:5f:23:4a:c8:00:
1a:bb:3a:41:9d:f8:87:4d:73:80:06:8f:cc:07:45:7b:39:90:
70:4c:f2:d4:1d:f4:a2:64:d0:ac:f1:14:f5:50:b0:61:f9:06:
1a:c5:08:a9:0a:7c:6b:67:d1:ae:c8:25:44:b1:93:ae:d6:28:
27:df:8f:3c:83:3c:98:06:5a:9b:7e:75:71:2e:db:10:d2:36:
de:a2:08:03:bf:43:02:4c:54:a5:c8:2a:0c:41:fb:29:a2:ab:
bd:c1:0b:43:90:36:fd:f1:33:12:15:aa:d9:de:4c:31:f8:99:
de:53:b8:fc:b8:fb:a7:03:d2:10:41:b3:e4:63:29:c0:7e:1b:
f6:70:25:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4
RThDRUI3NUYwHhcNMjYwNTEyMTk0MzE1WhcNMjYwNTE5MTk0MzE1WjAYMRYwFAYD
VQQDEw02YTAzODJkMy0zNWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PZz/kYAhTKzTOsV4AMjdNe9hLmJubkrZDbRW1e9veA3lqGDhwtXqPZwr1Gk
xo6w47cxKQ7IGvJfAGGJiW2p23hI4mOLLXdug6Rfd3SKBAKjRPY41UZclBEwK8LC
HPMeRcuQJDc/QUqVr7iH5XunY8egbIK4Ifck01k1T9w1srafZgYrU6ZJf9zG/xSU
EDrnpUrfqBCHeLU/p4QAdxYUDFTfT+/FzyIPYToj3FijudZDIUuDAeX8f+fZUDwL
EsVoHepfJGqyCFWejJpIea2nO2rWQRawCz2GvYwz3+ziRjQIcsmxwZRrY8qKtyfu
yWuPfOjLAMt8Xi28yCDDxhixSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjepnSa
mpEuw8HC8QeHLZeMB2kJMB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4
MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkIxRS84OTM2Q0MwNDg4MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5
ZHUtTk5iZ2hMNE9Pak90MTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWjxrjlPYaOwuoKKtop5YcMG0x1qckqrI7McimYwZGx88yEMMSfvgaGXa2OQW
qGiaZYIdhm0NIsevIu0mt7wugedjOtq/h5ih+9+dl7su0Z9CwYL8yfYUuNEvi51Q
gYZ5b103df8f5hmNkFLqTTwPMUIhpslu/ykZMF8jSsgAGrs6QZ34h01zgAaPzAdF
ezmQcEzy1B30omTQrPEU9VCwYfkGGsUIqQp8a2fRrsglRLGTrtYoJ9+PPIM8mAZa
m351cS7bENI23qIIA79DAkxUpcgqDEH7KaKrvcELQ5A2/fEzEhWq2d5MMfiZ3lO4
/Lj7pwPSEEGz5GMpwH4b9nAljA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:22:56 2026 by rpki-client