
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft
File: qP6b7_xlQea2MsQh14p9zAiwrIw.mft (raw, json)
Hash identifier: d0kuGkqp+x13tGhKLjQwiXVMw4WNwgdJ0HX91n+O7TA=
Subject key identifier: C2:F3:81:DC:86:1A:CC:2F:9B:73:71:F2:16:21:2E:2E:F5:76:29:7A
Authority key identifier: A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C
Certificate issuer: /CN=A9132C07/serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft
Manifest number: 65
Signing time: Wed 25 Mar 2026 07:11:37 +0000
Manifest this update: Wed 25 Mar 2026 07:11:36 +0000
Manifest next update: Wed 01 Apr 2026 07:11:36 +0000
Files and hashes: 1: qP6b7_xlQea2MsQh14p9zAiwrIw.crl (hash: LxodWfJ7YwTZPZ+CMkf5Y0LU7wUhjPG749iLADrf3aI=)
2: D323D61E26BE11F181670517C8833773.roa (hash: Z89uvKw198kPM7vi56Rw9aZcvLn2lM3CIQLWAsDyCgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl
rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132C07, serialNumber=A8FE9BEFFC6541E6B632C421D78A7DCC08B0AC8C
Validity
Not Before: Mar 25 07:11:36 2026 GMT
Not After : Apr 1 07:11:36 2026 GMT
Subject: CN=69c38aa9-259c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:48:70:b2:e3:35:f2:00:87:9c:83:6e:08:
8e:43:9f:36:6b:e3:a7:3b:09:19:eb:fd:2f:88:ca:
40:ab:e9:27:e1:8c:a9:95:19:ba:df:ef:e4:4f:7f:
e4:a3:28:91:97:74:3e:85:a3:3a:ee:31:d9:56:66:
ae:6b:99:9c:19:ab:4c:46:28:c8:d6:27:30:c5:c5:
29:50:e0:1d:d1:37:c0:ed:a4:13:b0:d6:d4:bb:c4:
cb:b0:a4:c9:37:6f:40:13:3c:01:ce:8f:38:24:d1:
b8:52:9f:88:44:98:dc:43:c9:6d:97:40:64:4a:e1:
f0:99:46:fb:ff:a4:cc:14:e6:67:75:b7:4f:ed:39:
14:e8:2f:16:a0:4c:83:b3:3d:a4:62:c5:c8:46:30:
39:fb:50:f7:ac:55:96:fa:ee:49:2f:68:c7:30:24:
2d:68:89:cc:37:bc:21:55:24:b7:2e:10:ef:0d:f1:
ce:6d:5a:0c:00:62:f4:da:15:1f:78:d0:2f:a1:2f:
88:13:47:6c:77:2a:8f:9c:11:49:13:c2:88:ce:20:
de:53:89:30:32:3a:a9:d8:44:9f:b1:21:af:11:ec:
27:21:88:22:83:25:1c:65:db:49:17:a0:c2:20:46:
2c:20:5c:50:a4:4d:e1:a2:c2:c2:5d:2c:79:64:ef:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:81:DC:86:1A:CC:2F:9B:73:71:F2:16:21:2E:2E:F5:76:29:7A
X509v3 Authority Key Identifier:
keyid:A8:FE:9B:EF:FC:65:41:E6:B6:32:C4:21:D7:8A:7D:CC:08:B0:AC:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qP6b7_xlQea2MsQh14p9zAiwrIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132C07/4CA02976909B11F0A93B9137C4F9AE02/qP6b7_xlQea2MsQh14p9zAiwrIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:9e:a5:dc:93:04:86:71:07:1c:10:2e:79:b0:86:95:fd:cc:
9b:86:e3:f5:21:8f:61:89:7e:3a:54:7e:a4:c0:7c:d9:71:8a:
11:b1:c8:6e:20:ed:bb:2f:7b:7c:4e:35:99:5c:a5:aa:76:f6:
24:32:7c:9c:95:df:14:24:2d:e7:a1:59:6c:ed:c3:63:3f:3a:
22:da:25:f7:28:0c:14:e7:ba:ca:52:3d:a5:05:12:c2:91:dd:
7b:99:30:53:02:34:81:9b:87:e2:76:9b:3d:d6:23:4c:e2:f7:
05:8e:e3:7d:83:6a:eb:de:78:86:59:6f:f1:d6:c3:7e:90:7e:
c6:ef:54:63:9f:bb:85:ba:b3:27:a9:f6:21:af:53:69:a7:4e:
79:f9:09:82:a3:d5:4d:4b:54:c8:11:ae:8f:ea:9a:fb:e6:51:
85:7f:37:25:4d:3d:48:c9:f7:f8:c5:7f:e1:69:de:eb:8f:5e:
06:16:fc:7b:e4:4e:2d:90:14:b8:f8:9c:de:4d:34:10:9c:22:
7f:25:eb:88:12:ce:81:85:6e:11:44:c7:2b:2a:48:b8:a5:8f:
50:f6:aa:f4:c3:22:3c:c3:5b:71:1c:e4:60:14:f1:75:92:95:
dd:56:7d:c0:bc:00:6c:da:93:39:96:30:d8:40:08:46:7d:86:
f9:cd:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:58 2026 by rpki-client