
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json)
Hash identifier: fz79UHTH0HOHyUCDIlIQxG3K0OCE/M0LbMZ6j3Udk/M=
Subject key identifier: 1C:56:40:D2:B0:42:F6:B4:62:BE:E9:3B:27:B0:9D:0B:47:2C:63:15
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
Manifest number: 0222
Signing time: Thu 23 Jul 2026 04:10:21 +0000
Manifest this update: Thu 23 Jul 2026 04:10:20 +0000
Manifest next update: Thu 30 Jul 2026 04:10:20 +0000
Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: hf9Yv+vGphAzk7CCwcvymfvxnrfMZCGNXsOiujhGJ4A=)
2: 0648277C065B11F1BBF0D547343D8C67.roa (hash: UPZChaoPwZygYNvD1ZEQcZn9IurnbGE9M73HomojtHk=)
3: 6D64CF867A7911F1BAE44E8A93A30FBC.roa (hash: zFmiSlbbBCKEFvwjSsTrCiZSphB84QphTxQ1AkMFJbA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Validity
Not Before: Jul 23 04:10:20 2026 GMT
Not After : Jul 30 04:10:20 2026 GMT
Subject: CN=6a61942d-5ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:43:ce:31:d4:34:cf:8c:c5:32:29:f9:c8:
a9:72:12:de:d8:e1:ff:8e:09:41:93:58:58:b7:bd:
2b:7b:d1:a8:b7:56:0b:d3:49:5b:4e:37:b1:76:f9:
6b:02:95:ff:d1:ab:f7:cb:d0:13:bd:14:09:75:81:
b0:84:a2:b5:8e:6d:38:77:07:30:c3:4c:a5:6f:ab:
f8:64:23:ce:59:91:f2:f4:99:28:41:98:2f:47:ce:
2c:50:46:69:8e:f0:11:bf:39:ea:d2:dd:0e:33:99:
e8:6e:9d:51:ba:0c:90:46:e5:57:a7:a6:73:82:bb:
97:1a:0d:fb:81:e8:33:89:cb:36:c7:29:68:7f:f6:
a8:4e:ec:4d:3b:1f:37:b8:5f:2a:9c:fb:9e:cc:0f:
ef:91:75:ce:56:e0:7d:5a:41:4c:63:15:b7:77:80:
01:e1:8e:e0:60:02:d2:cb:e2:f9:1e:5c:b3:fa:de:
3c:c5:ea:cf:b6:ea:66:c6:94:ac:18:ae:60:66:4d:
db:ac:ac:43:29:11:37:07:4d:26:32:5e:d8:11:ad:
8b:52:61:6f:c3:d2:4f:cc:e5:b3:79:24:b8:d3:70:
ce:59:ac:17:36:3e:5f:8a:0a:62:04:98:e4:4c:0a:
21:92:09:93:db:70:bd:9a:4c:4c:74:47:e4:6d:6e:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:40:D2:B0:42:F6:B4:62:BE:E9:3B:27:B0:9D:0B:47:2C:63:15
X509v3 Authority Key Identifier:
keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fa:b7:1d:44:f3:44:76:9b:09:a0:b6:ef:61:85:f7:75:58:
a6:81:4e:f9:0c:31:29:73:cd:e7:b7:57:ec:0b:67:50:30:58:
f4:e4:1e:8b:89:4e:ce:39:30:2e:9e:1c:11:19:2f:c8:c9:d7:
61:1c:a0:ce:1b:cd:2a:7a:d3:f3:34:90:eb:4e:bd:11:cb:4c:
b6:cc:80:86:76:58:fc:72:04:fe:bc:bc:7e:f8:cd:a1:4b:30:
01:57:ed:b8:ee:99:f0:c2:15:50:03:49:7f:6c:4e:ec:a2:49:
b8:2e:23:f3:a8:72:d0:fc:87:d8:a7:25:17:0d:85:60:a9:18:
7f:27:49:cf:ef:5a:a1:01:9d:47:96:75:57:fd:d5:87:fb:e6:
2a:01:18:c0:c8:32:45:21:53:78:3d:ea:ad:98:b1:af:83:6e:
cf:d2:16:f1:fa:8e:c7:bb:45:86:ef:0e:e5:3a:3d:cf:e6:39:
24:02:ce:38:e5:5f:4d:95:98:dd:49:af:87:a8:9d:47:93:70:
4a:10:fc:87:da:a0:03:a9:b1:44:d5:3d:6a:ce:ec:2a:fa:74:
2a:35:ed:6b:e4:a8:19:25:1c:72:db:55:a8:38:8c:de:48:3e:
09:1b:38:bd:25:68:78:8d:38:ed:bb:b8:3a:e3:72:40:e1:ba:
2f:af:bf:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC
MzIzNTBBREEwHhcNMjYwNzIzMDQxMDIwWhcNMjYwNzMwMDQxMDIwWjAYMRYwFAYD
VQQDEw02YTYxOTQyZC01ZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26RDzjHUNM+MxTIp+cipchLe2OH/jglBk1hYt70re9Got1YL00lbTjexdvlr
ApX/0av3y9ATvRQJdYGwhKK1jm04dwcww0ylb6v4ZCPOWZHy9JkoQZgvR84sUEZp
jvARvznq0t0OM5nobp1RugyQRuVXp6ZzgruXGg37gegzics2xylof/aoTuxNOx83
uF8qnPuezA/vkXXOVuB9WkFMYxW3d4AB4Y7gYALSy+L5Hlyz+t48xerPtupmxpSs
GK5gZk3brKxDKRE3B00mMl7YEa2LUmFvw9JPzOWzeSS403DOWawXNj5figpiBJjk
TAohkgmT23C9mkxMdEfkbW6I0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxWQNKw
Qva0Yr7pOyewnQtHLGMVMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3
MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkNCMy9BNUZEODRGMjU3MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5
ZkpuODlBbzVzNGF6STFDdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATfq3HUTzRHabCaC272GF93VYpoFO+QwxKXPN57dX7AtnUDBY9OQei4lOzjkw
Lp4cERkvyMnXYRygzhvNKnrT8zSQ6069EctMtsyAhnZY/HIE/ry8fvjNoUswAVft
uO6Z8MIVUANJf2xO7KJJuC4j86hy0PyH2KclFw2FYKkYfydJz+9aoQGdR5Z1V/3V
h/vmKgEYwMgyRSFTeD3qrZixr4Nuz9IW8fqOx7tFhu8O5To9z+Y5JALOOOVfTZWY
3Umvh6idR5NwShD8h9qgA6mxRNU9as7sKvp0KjXta+SoGSUccttVqDiM3kg+CRs4
vSVoeI047bu4OuNyQOG6L6+/Iw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:30 2026 by rpki-client