
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
File: Qnc6qEHXDnPE730nyY_LnUQgxGw.mft (raw, json)
Hash identifier: T74n5KjVK3Zbo7jS8T/hVCvLfzEJVXb7I1W0A0KdV6Q=
Subject key identifier: A3:63:FC:AB:0A:32:C4:01:B1:E4:BC:61:CF:A6:55:FA:81:97:F0:38
Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C
Certificate issuer: /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
Manifest number: 0111
Signing time: Fri 25 Sep 2026 06:05:42 +0000
Manifest this update: Fri 25 Sep 2026 06:05:42 +0000
Manifest next update: Fri 02 Oct 2026 06:05:42 +0000
Files and hashes: 1: Qnc6qEHXDnPE730nyY_LnUQgxGw.crl (hash: OuYWYxpir8DqRcauhTC18OcukJnYyxa18Q9w6ceP63g=)
2: 6ADACB0A1B6911F09204CE2FC4F9AE02.roa (hash: cYV9Wu/6Wqn6zp3BwuSN18Ue5SEFgQnX6CcttNooSvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl
rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 06:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
Validity
Not Before: Sep 25 06:05:42 2026 GMT
Not After : Oct 2 06:05:42 2026 GMT
Subject: CN=6ab60f36-ee0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:24:7b:71:37:77:34:4c:1c:8e:59:34:10:
6b:fe:fd:d1:87:bc:ad:0d:cc:58:16:f7:af:52:89:
79:57:65:56:bb:b5:fc:9f:7c:40:f8:8d:b2:16:6e:
a7:18:ec:62:0a:ca:21:26:20:2c:4a:26:8e:87:6b:
f6:d8:f5:d2:b3:bb:73:fa:71:eb:cf:9f:04:0b:a5:
b5:09:7b:99:d9:f2:53:47:70:29:0d:c5:ad:a7:49:
b5:8f:73:9c:5f:19:f8:00:ea:4c:7f:62:43:fa:93:
4e:21:ac:97:0e:f8:44:8e:5b:60:f4:17:ef:38:c8:
6d:8f:72:ba:1c:2a:8b:e8:83:6f:33:54:b1:7d:81:
35:f0:e4:22:f6:8d:d6:df:de:d4:a2:e7:a4:39:7e:
fb:70:d5:cc:61:18:98:55:66:a5:42:fb:6a:eb:5e:
2d:fc:d5:ef:69:9a:86:aa:72:97:8f:01:97:5f:bd:
5f:48:eb:07:90:48:17:d9:7c:7f:86:09:60:d2:53:
88:e3:80:b6:fb:84:19:5f:c8:be:10:23:b1:85:bb:
80:a8:93:ba:d8:8c:31:57:2c:36:d2:3a:6c:b5:36:
90:1d:d8:94:d3:ef:7f:6e:f8:b7:1c:8a:14:27:38:
5b:b8:74:26:83:3d:7b:fc:7e:2c:93:4c:01:e9:80:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:63:FC:AB:0A:32:C4:01:B1:E4:BC:61:CF:A6:55:FA:81:97:F0:38
X509v3 Authority Key Identifier:
keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:c0:ce:87:24:d6:03:63:ea:c8:2f:60:f7:3f:c4:89:2a:15:
b1:b6:9a:45:11:b9:34:3c:53:f4:9e:7e:9e:c5:69:d4:b0:92:
03:d9:cb:c6:25:34:5a:ed:a4:4a:9f:92:a6:6f:72:60:1d:b4:
8c:d6:0e:61:48:20:a5:50:95:76:6a:b6:fc:ad:61:7e:63:fa:
f9:39:de:c3:45:d8:d8:6c:e6:a0:8e:d4:55:91:fd:41:83:10:
2a:17:6d:b5:d3:72:09:a9:c8:50:c6:f1:c0:11:69:6e:ee:e5:
7a:d5:df:18:6a:66:0d:ae:4c:89:6e:21:2c:92:5e:1e:bd:2d:
09:9b:fe:86:f6:23:fb:ba:dc:ab:92:3b:21:6f:4d:77:fb:d4:
c3:62:09:3e:85:81:0d:ce:88:34:ce:d2:dd:44:ef:a5:17:7c:
c2:ac:7c:db:25:f0:2c:05:d2:82:0f:a4:3d:ab:12:79:24:75:
34:48:4f:6a:ee:21:47:57:2c:e6:14:7c:ca:14:7e:87:17:4d:
24:73:65:24:3b:ed:a0:8b:1c:3d:a8:c3:86:84:3f:bc:db:74:
55:ce:1b:72:b7:ce:18:72:b8:f5:97:8d:16:fc:14:c7:eb:2d:
46:e1:c2:9b:1b:ce:4f:de:40:5d:7e:ca:ad:ba:b8:97:96:9b:
b0:72:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:52:42 2026 by rpki-client