
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
File: rqa1YkZ78uEmlnUJYunTMkshJj0.mft (raw, json)
Hash identifier: SS4hvd419oB45pjAhnE47vhJz/TYdjNdU2lpVA/CQLU=
Subject key identifier: EF:F1:7D:D6:D8:89:60:F7:98:F6:4F:1F:A3:D4:30:18:9A:F4:22:63
Authority key identifier: AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D
Certificate issuer: /CN=A9139ECA/serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
Manifest number: 30
Signing time: Fri 25 Sep 2026 08:50:43 +0000
Manifest this update: Fri 25 Sep 2026 08:50:42 +0000
Manifest next update: Fri 02 Oct 2026 08:50:42 +0000
Files and hashes: 1: rqa1YkZ78uEmlnUJYunTMkshJj0.crl (hash: ob7r7eEZgpVcZppCKmd+n3ps0UyBtzgEn15pOS5cEwI=)
2: 1B0AAFAE7A8C11F1B1F8078C59A30FBC.roa (hash: wfatrlh8uuEwspZHwlBADBh6qz3SMKGJNlNB+wHl+u0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl
rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139ECA, serialNumber=AEA6B562467BF2E12696750962E9D3324B21263D
Validity
Not Before: Sep 25 08:50:42 2026 GMT
Not After : Oct 2 08:50:42 2026 GMT
Subject: CN=6ab635e3-0236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:be:ce:e5:94:06:65:ce:5f:d2:eb:10:d1:
8f:ee:79:1b:d7:76:b3:06:b4:91:6e:90:72:e1:a0:
fd:f0:21:16:2e:f1:f2:3f:ee:08:98:dd:08:13:dc:
42:cc:74:26:9f:85:00:24:71:89:52:cd:80:23:54:
e2:d8:39:93:ee:ef:8c:1b:01:55:0e:15:32:a1:a7:
78:f7:bc:3d:c2:01:c7:dc:90:5e:ba:ba:72:44:21:
64:8d:a6:7c:af:b7:d5:53:21:ea:5f:1c:c2:53:c7:
d3:b5:eb:22:5d:dd:0c:98:a6:61:e5:a3:0f:80:48:
5f:f1:c3:97:e6:6d:76:8d:67:89:7b:fb:ce:f6:cf:
2b:43:20:5a:f1:74:5a:a8:c2:a3:28:13:3e:96:98:
39:68:e6:fb:25:b0:49:ad:01:69:d3:67:b0:36:a4:
db:18:07:1d:5e:bc:7d:88:05:60:1f:2c:ae:b1:dc:
99:3b:27:5f:e2:e2:42:5e:71:4a:c5:c9:d3:50:59:
ca:36:8e:42:ea:6a:04:ec:1e:d4:e1:11:fb:ac:32:
8a:52:73:28:52:ea:2b:1f:18:59:9a:71:0a:f5:c3:
0b:10:64:85:cd:0e:02:f9:e5:c5:65:2c:83:44:ac:
44:96:37:56:4e:5f:41:65:65:1f:8a:c6:41:17:c8:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:7D:D6:D8:89:60:F7:98:F6:4F:1F:A3:D4:30:18:9A:F4:22:63
X509v3 Authority Key Identifier:
keyid:AE:A6:B5:62:46:7B:F2:E1:26:96:75:09:62:E9:D3:32:4B:21:26:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rqa1YkZ78uEmlnUJYunTMkshJj0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139ECA/968DB62C744B11F1A715B8456CA30FBC/rqa1YkZ78uEmlnUJYunTMkshJj0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:95:0f:20:e8:ce:d6:c9:3e:c3:88:0a:15:8f:08:b3:80:8b:
ab:74:42:23:19:10:be:74:ef:d3:90:29:08:a0:1e:e3:62:f8:
c7:e5:55:bc:de:6e:49:e9:90:90:ff:5c:0c:0f:3c:23:89:03:
92:b8:cf:29:c4:b9:4b:df:7a:e0:64:cf:12:b6:de:15:fd:da:
63:ec:e9:b1:90:d3:5e:cf:7b:cb:cf:d3:cf:5e:33:0f:9c:c9:
37:d3:ce:2f:48:75:60:ab:47:a9:c4:f2:2d:17:4d:c0:09:62:
26:fd:80:8b:ab:18:d7:37:e2:91:c2:de:84:ae:d2:32:93:65:
b3:8a:0b:4b:69:df:5b:9c:23:d0:16:8c:a7:f9:f2:bb:c1:e6:
c8:96:e1:1f:d5:25:c9:cb:15:fe:0a:04:20:2b:78:9c:73:5b:
ac:e7:09:a6:46:f9:73:61:28:03:cf:06:1f:00:04:54:42:80:
b1:36:87:97:89:9d:b0:dd:d2:2c:58:b8:e7:8a:f1:99:71:b6:
9c:fa:8a:ec:a8:93:a2:d4:2a:df:e5:f8:59:c1:76:a4:a3:ab:
56:55:60:05:c6:a4:6c:9b:78:fa:5a:93:64:b1:d4:59:6a:76:
49:a4:e9:cb:27:d2:30:5b:be:93:bd:be:da:c5:32:9d:e9:15:
4e:1e:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:15:28 2026 by rpki-client