
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier: k49hleD4Sbqr7B8NVwUq/aKMe6vk1RyXC3tQkIB+I8Q=
Subject key identifier: 31:95:2A:3E:56:61:6E:37:D3:87:89:86:E4:2E:7B:47:E6:BF:39:F0
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number: 02D7
Signing time: Wed 23 Sep 2026 00:55:21 +0000
Manifest this update: Wed 23 Sep 2026 00:55:21 +0000
Manifest next update: Wed 30 Sep 2026 00:55:21 +0000
Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: bCkKLcEAIXjz/BLrwvjVVNPifEJkICTs0aypLiItBFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Validity
Not Before: Sep 23 00:55:21 2026 GMT
Not After : Sep 30 00:55:21 2026 GMT
Subject: CN=6ab32379-9f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:0d:1a:0d:ac:69:1d:8d:e6:d2:24:0d:6f:
e2:86:a0:50:44:01:5f:8a:0a:1e:2b:95:53:6e:ea:
c0:4d:6f:0d:8c:41:df:b1:f8:9f:80:bd:f9:dd:fc:
17:62:ef:62:df:83:df:22:c3:3c:d6:58:f8:89:67:
74:46:6b:ac:d0:0b:07:15:68:d5:3a:af:90:35:c8:
ab:f2:6a:0c:b7:f8:ba:ce:05:28:cb:ce:7a:9b:19:
b3:4d:56:f7:0c:9d:bd:a6:f1:ef:f6:74:28:6e:53:
af:9e:bf:33:cf:ac:f0:d1:1f:52:e0:3a:8e:eb:57:
b0:30:c2:b7:70:b9:02:8a:5c:5a:14:cb:94:5d:1d:
ce:bf:e4:54:c3:fc:40:92:be:ca:1f:b3:30:ec:c2:
f6:6d:01:3f:ea:ad:c9:ea:99:a6:98:11:3a:eb:75:
48:dc:f9:ed:bd:55:23:7c:0d:17:a7:32:ce:20:e1:
be:89:2d:e8:1d:0f:77:e0:f4:c3:26:bc:db:78:25:
e2:d5:c2:ce:8f:50:46:2f:3b:e3:e2:db:9f:c5:c5:
3d:5b:03:07:e6:2e:92:d2:7e:05:c4:a0:af:7d:ee:
65:45:25:28:2e:56:49:55:67:c8:57:4a:f6:42:b6:
d8:12:7e:38:fe:64:28:f4:a2:40:08:a0:3d:56:bd:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:95:2A:3E:56:61:6E:37:D3:87:89:86:E4:2E:7B:47:E6:BF:39:F0
X509v3 Authority Key Identifier:
keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:93:cc:93:7b:dc:b9:d7:88:61:84:1e:18:b1:36:2f:38:
33:a5:ec:74:75:de:3a:29:6d:9f:b0:c7:3a:1a:f5:24:57:e3:
17:dc:4b:2d:64:d5:5c:b8:8f:4c:cf:fb:e7:39:4d:39:11:17:
6e:ca:42:f5:dc:a7:db:dd:4f:bb:2b:ca:82:66:32:1e:8a:6f:
c5:22:8c:7b:9a:db:c9:8b:c8:31:f7:09:58:47:00:bb:3f:69:
15:58:87:33:e6:27:f6:b5:43:f8:7e:a6:a7:6b:01:b2:a0:fc:
41:42:90:e2:fd:88:e8:4d:33:97:71:15:d4:47:05:73:8f:e3:
19:d2:f0:cd:ca:cf:52:f4:79:63:e7:6a:72:6d:27:16:04:4c:
99:80:81:5a:6b:68:c8:ed:59:e2:fa:43:86:ae:ad:e5:47:f8:
dc:e7:e7:19:3e:bd:7a:a2:59:6b:06:a2:bc:e6:05:d8:e2:e6:
84:29:fc:9d:32:b0:95:32:a3:cc:93:19:88:4d:37:d9:8d:64:
92:f2:95:16:d3:10:db:a2:2e:27:5e:8a:9c:68:08:1b:66:2e:
02:db:18:98:9c:81:c1:b8:4e:5d:09:2b:63:5d:db:fd:3b:f5:
0a:17:1d:5d:8e:e2:d4:2b:73:43:dd:b0:0a:3d:3d:9b:6f:fe:
74:af:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:53:47 2026 by rpki-client