
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
File: rqa1YkZ78uEmlnUJYunTMkshJj0.mft (raw, json)
Hash identifier: oC7YH6zpyYT0ztgasmExXvjCW14VLuTJiOqP5tWNk+I=
Subject key identifier: 08:EE:5A:9A:F3:22:89:51:8D:27:71:ED:FD:F0:52:C7:F5:7C:32:D1
Authority key identifier: AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D
Certificate issuer: /CN=A9139ECA/serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
Manifest number: 0F
Signing time: Thu 23 Jul 2026 11:12:47 +0000
Manifest this update: Thu 23 Jul 2026 11:12:47 +0000
Manifest next update: Thu 30 Jul 2026 11:12:47 +0000
Files and hashes: 1: rqa1YkZ78uEmlnUJYunTMkshJj0.crl (hash: lwG2Xn5snIEg6cWhIP/MCjKUQfmkxzL/WnliGz3ni8w=)
2: 1B0AAFAE7A8C11F1B1F8078C59A30FBC.roa (hash: wfatrlh8uuEwspZHwlBADBh6qz3SMKGJNlNB+wHl+u0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl
rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139ECA, serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
Validity
Not Before: Jul 23 11:12:47 2026 GMT
Not After : Jul 30 11:12:47 2026 GMT
Subject: CN=6a61f72f-bf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:92:69:81:40:b8:8c:25:c0:54:43:77:10:
4f:0a:2f:7f:eb:56:fd:0e:a2:89:74:b5:f1:db:0d:
2f:35:99:a0:d3:44:84:09:32:f0:30:4e:4d:58:4a:
86:8e:a3:cc:46:1e:6e:40:c7:09:f0:66:b1:6c:53:
8c:53:03:39:37:83:e3:13:c0:1c:cd:b5:0e:22:1c:
fc:69:6c:d6:2a:9d:a5:b0:d0:aa:f1:23:7f:27:da:
91:17:02:3e:9e:8a:da:98:35:17:4e:db:36:70:f9:
24:ca:2a:4f:74:93:40:81:68:1e:d2:92:f3:3a:6a:
ee:2e:73:63:68:e6:3c:1d:ad:f6:dc:f0:aa:7c:88:
3b:43:b2:31:72:53:66:d9:1a:60:6c:57:d8:67:14:
70:6c:9e:3b:3b:a9:78:c1:c9:1c:c7:b3:0d:cb:78:
d0:1a:b0:ae:a3:a1:72:72:61:c6:21:14:43:29:3b:
39:35:e1:81:dc:77:bb:06:30:33:c6:c4:3b:09:4e:
6d:2b:1e:4c:62:1f:c0:2d:eb:c9:28:4d:46:cf:fe:
cd:00:a2:aa:ba:e0:3e:dc:4d:b3:e2:88:cd:c0:03:
ba:7d:c7:06:7c:1d:ae:e5:af:c3:14:f9:00:dd:55:
e5:35:fe:84:ee:a0:de:b2:0d:87:d5:9d:e5:96:b3:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EE:5A:9A:F3:22:89:51:8D:27:71:ED:FD:F0:52:C7:F5:7C:32:D1
X509v3 Authority Key Identifier:
keyid:AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:db:b5:a5:f7:dd:a4:ad:91:e6:bd:aa:36:7a:3e:17:3f:4a:
a7:86:e6:02:dc:1c:6f:34:10:f1:19:28:94:88:d8:38:3f:6c:
60:a9:ea:d8:20:3d:ee:e4:98:ed:94:7f:d2:44:3a:48:d4:2c:
7c:31:c0:1d:e2:1b:00:61:bf:7d:bd:c9:88:b8:ab:b3:61:00:
62:3c:11:46:84:0c:dd:00:39:0f:82:e2:2c:52:12:eb:5d:78:
0f:fa:e5:68:42:99:5b:5d:e4:f8:1c:86:9a:48:c7:d8:0a:b0:
70:9f:5f:ab:bd:e9:03:ef:43:f0:c5:6f:8c:9e:ef:f9:e6:52:
60:75:bb:58:b3:fb:f7:43:c9:8d:08:ee:4f:55:4a:fd:ed:a0:
09:c9:b2:b9:79:e6:b8:56:99:62:c0:89:93:df:72:a8:0f:87:
dd:54:58:41:5d:95:9c:f9:4b:52:e6:3a:1c:79:4a:f9:fe:d7:
c8:4d:dc:42:37:d7:f7:2b:14:c0:b7:10:31:f9:fe:1c:9b:0b:
fa:69:3c:c2:d1:b1:00:18:bc:a9:78:21:c3:94:80:b6:5c:71:
62:a3:42:06:1a:89:0e:8f:80:d9:ad:60:fb:03:2d:53:69:8b:
0c:1b:af:7c:79:9b:b6:75:7a:01:e2:91:07:ba:f6:60:e0:72:
2e:84:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:20 2026 by rpki-client