
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
File: qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft (raw, json)
Hash identifier: Us3h9oJbRFdG0mzIs5qLcxSypu2SsUhXrAE2pLvDiLQ=
Subject key identifier: 8F:C8:00:04:41:74:BC:B4:4B:F3:BE:4C:C8:00:F9:23:1D:BD:0B:F7
Authority key identifier: A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
Certificate issuer: /CN=A9145456/serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Certificate serial: 0857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
Manifest number: 0843
Signing time: Mon 28 Sep 2026 21:16:57 +0000
Manifest this update: Mon 28 Sep 2026 21:16:56 +0000
Manifest next update: Mon 05 Oct 2026 21:16:56 +0000
Files and hashes: 1: qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl (hash: HnhCAIJYlKHOZqsSCc97K2W7gHlAVpnmpuQUjhnWLMI=)
2: 713028F48D4911EB9335E32FC4F9AE02.roa (hash: 2gCt/x7KidgUUiic8KeZ4+Ldk+O6Z1R5WNeHf6m8yn0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 21:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=A99B2DB6FAC36CB0203B98E20FD67E019FE1B8FB
Validity
Not Before: Sep 28 21:16:56 2026 GMT
Not After : Oct 5 21:16:56 2026 GMT
Subject: CN=6abad948-c051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:50:30:ea:c2:6c:a5:0f:c3:e8:d6:5f:ca:
0a:84:0b:aa:79:c8:c2:42:f0:91:45:20:8e:8d:88:
ad:10:9f:7c:4c:8a:d3:2d:30:46:24:b2:7f:49:3f:
1c:84:8c:d7:96:02:b3:e1:ac:06:14:02:c3:c6:33:
92:63:14:60:5f:62:09:e7:cc:b5:e0:e2:46:d4:1e:
80:98:0d:d3:b6:c8:6a:fa:ef:43:ae:11:fa:f9:2a:
ad:b9:be:ce:a7:bf:a5:7d:9c:fb:d1:ee:32:06:eb:
41:6a:b3:ad:14:05:14:7f:bc:26:06:93:97:3e:67:
80:a8:65:55:a1:d0:45:d3:3d:07:05:c5:d2:2e:27:
3c:3d:89:76:ef:33:c5:fa:15:cc:f6:fc:fc:4c:1e:
62:74:9c:d8:24:5e:58:72:b3:bb:ab:ed:87:8e:e5:
2c:25:fc:e9:ae:bf:ec:4d:be:82:33:52:3d:c0:f5:
a9:12:c3:3b:8d:06:98:1f:d3:81:86:e0:0d:56:c6:
1e:15:97:88:85:a0:14:2a:60:61:cb:3b:c2:8d:d2:
6b:cb:45:e8:7c:a7:e1:2f:f5:92:b9:ec:21:e9:db:
d7:ca:c5:a2:ed:76:60:25:9d:6f:72:dc:e9:16:a0:
22:e6:a6:48:70:56:af:b9:24:f1:23:ce:75:1f:b5:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:00:04:41:74:BC:B4:4B:F3:BE:4C:C8:00:F9:23:1D:BD:0B:F7
X509v3 Authority Key Identifier:
keyid:A9:9B:2D:B6:FA:C3:6C:B0:20:3B:98:E2:0F:D6:7E:01:9F:E1:B8:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZsttvrDbLAgO5jiD9Z-AZ_huPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/8141425E306611EB85251355C4F9AE02/qZsttvrDbLAgO5jiD9Z-AZ_huPs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:c4:42:2b:a4:b4:ba:98:c0:99:5f:a8:25:ea:81:c5:a7:58:
9d:72:bd:5e:b5:9f:be:38:67:1a:ed:fc:ea:5f:01:06:8d:3b:
b0:01:20:17:25:7b:de:f7:d9:b1:59:fb:76:9b:92:cd:79:8d:
a9:36:d7:6d:04:86:86:14:84:13:78:56:db:f2:2e:44:f1:7e:
71:ab:30:36:38:ee:bd:a7:a8:1a:08:f4:dc:f1:9d:3c:a1:78:
4f:4e:ca:bc:75:1c:ce:1c:f9:4b:9a:ad:e4:25:a2:f9:3a:52:
f5:f2:6d:5d:1b:c4:e5:b1:d9:c5:46:56:7f:bf:74:2b:df:7f:
29:5b:b4:ad:61:18:26:0e:9c:d8:90:62:14:33:ba:2f:5f:00:
e6:c6:53:84:29:ac:e7:18:aa:96:90:4a:31:ed:44:53:75:91:
5a:55:66:67:b9:ab:f3:f1:9e:06:66:1a:e7:cb:78:62:cb:4a:
bf:b5:06:a4:7e:da:27:9f:4d:10:f2:dd:ab:05:3f:97:58:2d:
53:04:e4:8c:07:fe:68:0b:ef:4b:18:14:08:e7:10:c8:c3:34:
7e:9a:d8:58:c9:57:b4:1c:b5:d4:a1:9c:3a:20:41:4d:75:1d:
de:72:bf:d8:8d:dd:fa:18:46:21:d8:30:4c:de:72:ba:28:82:
d9:61:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:13:25 2026 by rpki-client