
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: C8qbs868GhRydNUrsStGzYT8M8hK+HwxtVMlbpAhSRc=
Subject key identifier: 41:85:72:5E:15:E5:53:51:B7:62:73:FA:E7:AD:76:C0:21:10:B4:8A
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0AF1
Signing time: Wed 22 Jul 2026 19:59:26 +0000
Manifest this update: Wed 22 Jul 2026 19:59:25 +0000
Manifest next update: Wed 29 Jul 2026 19:59:25 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: u0YMtR1HvYYI9RV1Ez+kOchXz/z8NLBq/PJxyyYPjqk=)
2: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU=)
3: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: iHRiLGk5bEvTzw6ual7pTVIN/CRRx+XVbsv/MEAp4Wk=)
4: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=)
5: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: KKSynpOm+ycQihs/yZsWcr8FrhVz4wSTwzAIsyVh/HE=)
6: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: fKLRAkWs+zCufWcV04yXK1kQ1KxM/zVG5v7JSWUHnmI=)
7: ABF4F248555511F0A341047BC4F9AE02.roa (hash: n9QAmEJQ9kZxHlOhthQbr/AO7+Rv5gbW5CmVpfpdp1Y=)
8: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: mxCH2vpK2XOhgq6GjWu4EDLEBsLtWayBY2NOfqL8jYM=)
9: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Jul 22 19:59:25 2026 GMT
Not After : Jul 29 19:59:25 2026 GMT
Subject: CN=6a61211e-c3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:76:6a:59:ef:84:26:66:87:ff:d6:6d:26:
7b:25:c4:6b:52:5e:33:e9:5e:90:b5:65:22:48:ae:
da:67:eb:e8:dc:b5:18:e0:1b:6b:e6:02:88:7b:88:
02:7c:0a:67:ab:09:a7:1e:dc:6b:14:1d:cb:31:51:
ec:94:8f:36:8a:01:87:62:d1:76:1d:af:41:46:08:
d2:f3:f6:c1:7a:41:fe:5a:9e:e1:ba:65:ac:13:7b:
de:ae:16:12:8c:49:80:a2:4d:30:08:8d:86:63:a4:
0f:b2:a1:4e:0b:90:e7:48:64:f1:05:4a:e2:b4:a9:
9d:c5:04:44:2e:b7:e2:f6:51:a7:cf:46:29:c9:65:
bb:01:70:47:66:9c:65:af:f6:f7:4b:fe:9f:13:94:
99:a1:42:1d:1c:ec:bc:03:a5:8c:e1:c8:08:f1:3f:
c6:f2:bf:94:79:8b:0c:55:aa:31:76:17:7b:f1:3c:
be:d4:5f:46:ac:6c:20:86:23:db:48:ab:cc:2a:38:
3c:5f:21:ec:c6:71:4e:35:08:ae:3d:91:e8:ed:90:
3b:38:59:a9:7d:97:dd:43:7f:b9:af:94:56:a3:ce:
e3:11:16:3f:5d:b1:8a:80:9c:19:bf:8e:b5:9b:4d:
fc:48:24:cf:2b:f0:b0:61:e8:92:f9:fe:08:60:d0:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:85:72:5E:15:E5:53:51:B7:62:73:FA:E7:AD:76:C0:21:10:B4:8A
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:a2:5b:85:64:24:04:41:01:ec:c9:78:a1:47:e1:5f:5c:48:
50:44:e2:50:9f:3d:b4:39:32:4b:52:f4:8c:27:67:b8:c8:ef:
31:17:25:5b:26:a8:8e:b8:a8:c3:18:b0:ae:0c:6e:9a:bb:5a:
b2:05:d4:d6:cd:65:87:65:a1:c3:98:6a:b8:4d:57:17:98:57:
b7:67:8a:b2:07:b3:26:2c:c2:9a:2a:6f:a6:5f:d8:a9:64:16:
7f:a0:e6:0f:fd:a6:43:eb:54:d0:7f:79:41:cf:a7:8b:1d:5c:
ff:c4:28:5d:b3:c2:f6:ea:e2:23:01:bf:cf:ba:71:91:cd:da:
c3:1d:7f:34:b2:61:25:b1:8e:ef:f8:50:c4:14:db:69:f5:7e:
4a:5d:83:33:39:08:ce:66:ac:74:d7:b1:66:ad:a7:74:77:e7:
a0:5b:63:41:ad:7c:1b:77:a1:13:65:c4:81:f9:fc:18:f2:03:
c0:60:be:7b:5c:8c:92:bd:3e:2e:6c:74:54:60:9c:67:9d:4d:
73:ff:76:10:67:30:f6:18:e0:08:2c:a1:ed:00:4e:12:d0:4e:
64:0b:c6:56:dd:22:bc:6f:95:f3:0b:b2:43:69:5c:0c:41:92:
e0:9d:68:ae:8a:26:ee:1d:cf:5b:11:e8:25:66:64:ae:9a:ca:
5a:67:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:22:17 2026 by rpki-client