
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
File: QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json)
Hash identifier: ZyoCV78Q68ha87Bw9Oyi3dAuLXxE7md9SufNq9/vOAI=
Subject key identifier: 20:07:EE:5C:EF:9C:A7:FC:97:EF:4B:DD:45:4C:EC:C6:DB:37:BA:97
Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11
Certificate issuer: /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
Certificate serial: 0333
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
Manifest number: 032D
Signing time: Fri 25 Sep 2026 00:51:26 +0000
Manifest this update: Fri 25 Sep 2026 00:51:25 +0000
Manifest next update: Fri 02 Oct 2026 00:51:25 +0000
Files and hashes: 1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: LWcDuU3wcl1b7/R+HZaxNXog/1e2OB21YyL6ibR+zEU=)
2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: KjdHFdT4hMQndSJL6UoMqkq2ZW2qsfB7WspT9fMf+Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl
rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148465, serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
Validity
Not Before: Sep 25 00:51:25 2026 GMT
Not After : Oct 2 00:51:25 2026 GMT
Subject: CN=6ab5c58e-6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:93:07:37:86:e8:53:c2:fe:1a:56:d8:59:
0b:69:3b:6f:7c:89:74:1a:e2:7b:bb:74:c1:92:e1:
bd:0a:ae:88:6e:16:85:8e:cb:df:9c:28:88:32:e8:
cb:56:f6:0c:3b:3b:11:94:3a:d3:03:fd:80:d9:86:
b4:73:eb:24:35:aa:cc:0e:e3:4c:60:b7:50:7a:da:
e0:1a:f2:f6:77:2a:ad:12:49:83:9c:17:14:64:a3:
e1:d3:63:35:19:ad:bb:89:1a:b9:3f:2f:4b:41:82:
43:27:b0:35:11:e1:ad:9d:e5:a4:95:08:8f:18:34:
1a:86:fa:11:40:1b:f8:23:d6:00:f1:cf:6e:58:87:
34:ac:a9:8d:aa:c3:49:40:4d:d3:f9:6d:06:ea:5a:
a6:e7:49:df:80:bd:e0:6b:c4:77:8b:5b:80:d9:4e:
b2:1a:36:b1:2e:93:f9:78:19:5d:90:25:7d:fe:ff:
73:8d:8c:83:f8:50:7c:52:1d:fd:2c:d6:57:3c:c8:
69:ad:45:43:b7:64:94:8b:e0:59:3e:a7:8b:63:2f:
8a:ce:95:a2:1d:00:84:69:ec:c8:23:bb:cc:af:32:
58:f5:db:1a:82:5a:29:cc:e9:0d:1b:dc:8f:2a:82:
08:fb:39:18:c6:0e:34:88:9d:7b:b1:c9:a0:22:06:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:EE:5C:EF:9C:A7:FC:97:EF:4B:DD:45:4C:EC:C6:DB:37:BA:97
X509v3 Authority Key Identifier:
keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:0c:9b:29:57:5d:7f:93:aa:cd:6b:df:a7:3a:0f:d5:e4:58:
f3:03:42:92:02:e2:d3:b9:7d:e4:51:e9:9a:60:18:f7:6c:b3:
1d:d1:84:61:bd:a3:c5:12:8f:6e:37:4e:7c:ea:da:f1:bb:84:
7e:20:26:07:ad:73:0d:8d:d9:b1:4d:cc:b2:0c:5f:dc:06:6b:
b6:fa:4c:88:3d:6b:8e:11:34:80:79:11:af:89:03:ac:8e:46:
b0:35:6b:05:87:39:8f:b0:51:96:68:ac:21:34:92:ec:bb:ae:
4e:1b:b4:21:86:f3:49:ed:85:f0:34:6b:f3:e1:00:48:f3:dc:
81:58:45:08:eb:89:f1:8f:82:1c:02:0e:1a:81:4d:ab:80:8d:
9b:e0:12:6e:be:9f:c0:43:b2:1b:51:df:5c:d3:28:08:ab:3c:
57:fe:85:b4:b0:d5:2b:0f:cd:6e:d2:c2:9b:06:bd:00:ba:2c:
e7:3d:6c:5e:7d:94:39:67:f5:6f:44:d3:6b:e8:fe:1b:6b:41:
41:43:b2:5e:d6:b4:a2:de:5c:b4:10:49:39:cb:6c:21:4d:9f:
f6:8e:e6:8d:af:8a:4c:d3:1d:08:0b:11:7b:67:bb:85:88:36:
30:dd:ea:ad:d3:bd:d4:48:fb:77:75:bc:0a:3c:d8:02:5f:1c:
d6:01:38:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:59 2026 by rpki-client