
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier: icZA24vP1O5tAnR8iG5b09PUN3Gjx7/C1KSiIdl8CbE=
Subject key identifier: F6:33:78:0A:23:74:BB:A3:93:77:25:1F:7C:2F:F9:BA:ED:DA:5E:AD
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial: 10C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number: 10AC
Signing time: Tue 12 May 2026 17:21:57 +0000
Manifest this update: Tue 12 May 2026 17:21:56 +0000
Manifest next update: Tue 19 May 2026 17:21:56 +0000
Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 7YPCeIkK3GYvyBm+EyuSwt4rr/rWpdzEfStTspH+fkk=)
2: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=)
3: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: na3agWbpkvvPPGYrDAzu2fpB/eIpBQi6AGL/7SLQlTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:21:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4292 (0x10c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Validity
Not Before: May 12 17:21:56 2026 GMT
Not After : May 19 17:21:56 2026 GMT
Subject: CN=6a0361b4-55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:85:6a:dd:ef:07:2d:f5:8a:b5:eb:4c:89:
d5:fb:88:04:a7:30:93:20:6a:14:11:2a:e7:c1:cf:
9d:92:25:b2:da:a9:12:4d:d5:3d:e6:29:e6:e7:13:
e2:cb:52:d5:17:f1:f0:f3:0a:cd:e6:39:a0:a9:c2:
58:39:7c:06:dc:84:05:a8:59:87:13:45:41:ac:84:
97:06:d4:f5:e3:df:ae:7a:cb:ee:be:ca:91:d0:16:
b0:59:b7:af:a4:4a:ab:ca:42:45:54:79:24:c1:47:
47:3b:a8:8f:04:97:40:fe:3a:b5:70:83:e6:d9:3b:
62:e3:63:3b:3c:28:da:0f:88:b7:88:21:f3:16:e4:
ce:35:98:d4:0f:ff:3f:2a:55:5e:e8:f2:28:23:83:
aa:06:c6:be:8d:5b:db:36:01:47:02:1c:73:69:41:
e2:18:c6:26:93:54:25:43:ce:5b:ed:19:42:2f:fa:
d0:8b:f1:2d:b7:e3:fd:3f:da:a6:53:65:dc:b8:a0:
9b:4b:02:8b:6d:24:5c:ef:6e:a1:29:38:2c:18:5e:
b4:cb:2b:be:08:83:87:53:4b:86:d8:48:69:16:72:
33:84:3f:fb:5e:93:24:3c:7e:67:55:97:5b:d5:13:
df:91:01:70:44:c7:e2:44:99:68:20:a2:ee:a8:c5:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:33:78:0A:23:74:BB:A3:93:77:25:1F:7C:2F:F9:BA:ED:DA:5E:AD
X509v3 Authority Key Identifier:
keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:78:c4:93:96:91:5c:29:29:5a:d5:90:85:f4:1e:dd:8b:fb:
5d:9b:88:3b:84:ca:52:58:e6:20:f2:28:45:62:40:f6:0c:93:
94:20:a9:28:31:3e:02:b2:52:62:d7:dc:7f:a1:c0:6c:f6:84:
90:93:c1:2f:96:73:f6:40:a5:73:dc:ee:b0:7b:aa:f0:eb:4a:
b3:a4:69:33:47:54:99:3a:dc:b1:44:50:8a:83:4e:90:96:ac:
ef:09:70:2c:f9:e3:31:86:ea:ee:af:d3:a7:90:f4:11:12:8b:
7a:3d:aa:67:53:0f:f6:25:db:86:dc:57:34:c2:3c:97:0f:50:
d8:45:46:19:d1:1b:b0:c3:9a:24:e2:37:5f:54:c8:38:f5:7d:
4e:e6:b6:d9:15:c8:6b:03:52:fb:b0:db:13:46:d8:71:e5:a6:
da:c1:55:9c:20:66:8e:6a:18:b9:d5:4b:63:dc:f1:2b:a7:6c:
25:f4:f1:ae:92:48:13:8f:4e:55:48:bc:57:39:85:db:6f:04:
d3:f6:2e:88:95:a6:9d:1d:76:a7:7d:c5:bc:fe:ee:cc:a2:a5:
c6:fb:0b:7b:ed:fd:b7:79:fb:7b:41:56:d7:7d:ae:cd:bf:d2:
22:ed:dc:75:e6:6f:2d:25:44:a6:99:3b:df:f8:fd:f5:02:77:
ff:92:97:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz
QjE0MEZGNkUwHhcNMjYwNTEyMTcyMTU2WhcNMjYwNTE5MTcyMTU2WjAYMRYwFAYD
VQQDEw02YTAzNjFiNC01NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3pqFat3vBy31irXrTInV+4gEpzCTIGoUESrnwc+dkiWy2qkSTdU95inm5xPi
y1LVF/Hw8wrN5jmgqcJYOXwG3IQFqFmHE0VBrISXBtT149+uesvuvsqR0BawWbev
pEqrykJFVHkkwUdHO6iPBJdA/jq1cIPm2Tti42M7PCjaD4i3iCHzFuTONZjUD/8/
KlVe6PIoI4OqBsa+jVvbNgFHAhxzaUHiGMYmk1QlQ85b7RlCL/rQi/Ett+P9P9qm
U2XcuKCbSwKLbSRc726hKTgsGF60yyu+CIOHU0uG2EhpFnIzhD/7XpMkPH5nVZdb
1RPfkQFwRMfiRJloIKLuqMX9gQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYzeAoj
dLujk3clH3wv+brt2l6tMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD
NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf
MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr
cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR3jEk5aRXCkpWtWQhfQe3Yv7XZuIO4TKUljmIPIoRWJA9gyTlCCpKDE+ArJS
Ytfcf6HAbPaEkJPBL5Zz9kClc9zusHuq8OtKs6RpM0dUmTrcsURQioNOkJas7wlw
LPnjMYbq7q/Tp5D0ERKLej2qZ1MP9iXbhtxXNMI8lw9Q2EVGGdEbsMOaJOI3X1TI
OPV9Tua22RXIawNS+7DbE0bYceWm2sFVnCBmjmoYudVLY9zxK6dsJfTxrpJIE49O
VUi8VzmF228E0/YuiJWmnR12p33FvP7uzKKlxvsLe+39t3n7e0FW132uzb/SIu3c
deZvLSVEppk73/j99QJ3/5KX3w==
-----END CERTIFICATE-----
Generated at Wed May 13 15:30:05 2026 by rpki-client