
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier: sWNr26haYrDoZemkz1lUlWHqx84ApVHSWQ2yaETc9tg=
Subject key identifier: ED:E7:B3:53:1D:1F:64:72:3A:D5:08:23:9C:D2:BE:0B:1E:5A:6F:D4
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial: 10AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number: 1094
Signing time: Thu 26 Mar 2026 17:18:52 +0000
Manifest this update: Thu 26 Mar 2026 17:18:51 +0000
Manifest next update: Thu 02 Apr 2026 17:18:51 +0000
Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: j0qIjd4YTspxEkCaiyX32NokgC0PpfJWr0qmvnQECjY=)
2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: na3agWbpkvvPPGYrDAzu2fpB/eIpBQi6AGL/7SLQlTY=)
3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Validity
Not Before: Mar 26 17:18:51 2026 GMT
Not After : Apr 2 17:18:51 2026 GMT
Subject: CN=69c56a7c-bfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:e3:cb:fb:b2:28:70:5f:b7:ad:d9:3b:a0:
a7:44:89:c0:45:0a:41:ac:ca:77:d6:b3:a7:ea:7d:
b6:aa:95:29:40:0f:6e:b4:18:bc:79:b4:e6:4d:6a:
b9:7f:fe:88:31:1f:8e:c1:af:55:27:49:da:ad:7f:
7a:17:65:0e:cc:b8:23:44:05:c3:d0:9f:49:c2:cc:
7f:9d:b7:e6:27:44:a7:4f:e8:80:49:67:5e:8f:6d:
e0:70:6b:69:3a:6f:32:79:3c:c5:eb:f7:5c:0f:8e:
22:84:4f:43:9b:b3:96:21:72:6f:a5:78:82:4e:23:
82:24:2f:a5:b9:b2:c5:11:25:64:98:3d:4e:55:d9:
bf:1f:84:d9:5b:04:2b:5e:59:41:74:37:dd:28:77:
17:74:b3:18:0c:ea:64:e9:0e:58:b6:45:cc:c4:a3:
da:33:d2:20:9c:ec:57:18:5e:b5:0d:8f:5b:01:55:
9c:78:8b:a0:c9:89:2b:c8:55:27:f2:9d:1a:dc:c1:
21:f5:18:4e:c4:18:bc:b3:8c:7d:b3:37:4c:9c:2b:
bf:f4:1f:ff:cf:2b:02:e5:88:37:a5:9f:a1:97:93:
8b:06:2f:9d:ae:44:2a:96:ae:1a:80:8d:54:cb:09:
93:94:93:4e:7d:16:7e:8c:e2:20:ce:bb:55:b7:68:
aa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:B3:53:1D:1F:64:72:3A:D5:08:23:9C:D2:BE:0B:1E:5A:6F:D4
X509v3 Authority Key Identifier:
keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:06:8d:15:8d:e9:1e:3b:d4:1e:18:db:e3:68:fb:5c:5e:
af:18:e9:6b:e7:7b:e1:90:98:ba:60:e3:86:09:27:73:e4:54:
01:29:6a:8e:18:7f:1a:75:8d:2a:83:e1:bb:de:0a:66:fb:47:
50:c6:6d:02:9c:3f:68:23:af:50:a4:d4:68:72:45:55:52:ec:
3f:e5:89:d3:2f:ed:8a:a1:fc:f2:ef:c1:95:68:6d:9f:bb:f3:
70:c5:a6:fb:21:78:7e:ee:00:88:a9:32:e5:e1:d1:f7:6c:b8:
0c:93:dd:67:29:8f:84:ce:d5:8c:cb:0a:5d:f0:b2:01:dc:20:
bb:d2:ec:90:1c:18:52:86:3d:04:74:c9:36:4e:3d:ac:05:d0:
e5:29:c8:82:fc:1c:4a:48:53:4b:95:92:28:07:ef:25:1b:10:
7d:af:27:92:ba:8f:f0:7f:a9:81:f2:41:d6:f2:71:78:f2:ef:
7f:39:fe:17:cb:d2:50:ae:fe:82:bd:49:77:11:83:44:07:c6:
e0:e1:09:77:d0:96:80:4e:85:9c:34:76:2f:25:53:72:b1:4f:
2d:c5:0f:15:9d:e6:37:9b:2f:5c:21:bc:66:cd:41:69:e8:25:
07:d4:59:e7:b2:1d:1f:7d:17:98:db:7a:cf:17:77:e5:e7:6b:
a1:2a:c3:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz
QjE0MEZGNkUwHhcNMjYwMzI2MTcxODUxWhcNMjYwNDAyMTcxODUxWjAYMRYwFAYD
VQQDEw02OWM1NmE3Yy1iZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArNfjy/uyKHBft63ZO6CnRInARQpBrMp31rOn6n22qpUpQA9utBi8ebTmTWq5
f/6IMR+Owa9VJ0narX96F2UOzLgjRAXD0J9Jwsx/nbfmJ0SnT+iASWdej23gcGtp
Om8yeTzF6/dcD44ihE9Dm7OWIXJvpXiCTiOCJC+lubLFESVkmD1OVdm/H4TZWwQr
XllBdDfdKHcXdLMYDOpk6Q5YtkXMxKPaM9IgnOxXGF61DY9bAVWceIugyYkryFUn
8p0a3MEh9RhOxBi8s4x9szdMnCu/9B//zysC5Yg3pZ+hl5OLBi+drkQqlq4agI1U
ywmTlJNOfRZ+jOIgzrtVt2iq7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3ns1Md
H2RyOtUII5zSvgseWm/UMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD
NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf
MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr
cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkE0GjRWN6R471B4Y2+No+1xerxjpa+d74ZCYumDjhgknc+RUASlqjhh/GnWN
KoPhu94KZvtHUMZtApw/aCOvUKTUaHJFVVLsP+WJ0y/tiqH88u/BlWhtn7vzcMWm
+yF4fu4AiKky5eHR92y4DJPdZymPhM7VjMsKXfCyAdwgu9LskBwYUoY9BHTJNk49
rAXQ5SnIgvwcSkhTS5WSKAfvJRsQfa8nkrqP8H+pgfJB1vJxePLvfzn+F8vSUK7+
gr1JdxGDRAfG4OEJd9CWgE6FnDR2LyVTcrFPLcUPFZ3mN5svXCG8Zs1BaeglB9RZ
57IdH30XmNt6zxd35edroSrDoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:09:34 2026 by rpki-client