
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: trGc40YGoxmI6iSzci1jU+YY16VHkBa4frnShizci3g=
Subject key identifier: 08:57:AB:04:D7:34:F9:26:51:8B:83:66:80:3F:E8:69:41:DB:34:9D
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: 0119
Signing time: Wed 13 May 2026 05:55:44 +0000
Manifest this update: Wed 13 May 2026 05:55:43 +0000
Manifest next update: Wed 20 May 2026 05:55:43 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: f+J7ahNWiWfFLWU1ucPT3PmDacs23WSNRmSnEUQKB2Y=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 05:55:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Validity
Not Before: May 13 05:55:43 2026 GMT
Not After : May 20 05:55:43 2026 GMT
Subject: CN=6a041260-4642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0c:de:a1:a1:1d:08:ea:d3:d6:79:50:10:0e:
fd:fd:19:01:20:1c:70:22:62:ff:e4:22:8e:de:09:
2f:a0:21:83:77:34:28:af:1d:95:34:4f:50:5f:15:
db:5e:68:0c:3e:b2:2a:4e:c6:64:6f:8b:cd:40:85:
b1:c8:92:b0:dd:23:d3:b7:be:9c:9a:03:63:d4:2d:
5c:82:c6:20:61:94:d7:f8:f0:5c:a6:f1:3b:2f:58:
c3:b4:0f:7e:b7:55:e5:1a:2e:ec:40:3d:4d:25:5b:
7f:af:7c:7b:03:2f:f9:99:9d:a0:82:31:8c:e6:4e:
14:63:88:18:c6:da:0e:c8:3d:00:b1:c2:2d:8b:e1:
7c:ba:9c:92:7e:de:30:2f:fe:3f:84:c4:45:4a:ea:
0c:93:c1:7d:57:0c:00:4b:14:90:7a:86:c3:13:a2:
48:64:d0:e4:fb:81:1a:28:91:e8:b2:86:a8:66:ac:
ef:83:1d:fd:8a:87:65:be:6b:81:b4:62:a3:fa:0b:
4e:31:ef:55:6f:39:35:5f:d6:ef:0c:78:4b:e9:a5:
32:05:fb:db:76:45:41:da:31:cb:a9:bb:a2:bd:d9:
cf:ad:0e:57:dc:b7:4a:8c:a6:19:e5:5d:29:6a:da:
02:3b:bb:81:bb:55:15:4d:3a:8c:b1:ea:5b:43:19:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:AB:04:D7:34:F9:26:51:8B:83:66:80:3F:E8:69:41:DB:34:9D
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:69:4d:29:7f:d9:a4:c3:7b:4a:24:2e:83:c7:3b:37:b7:a6:
0a:51:bf:2b:5f:9e:06:46:e6:c7:f1:d5:f5:ea:b5:71:aa:81:
79:97:00:fe:70:bd:f2:1d:a0:53:63:f4:81:97:91:dc:4c:73:
5e:d7:70:6c:dc:0f:91:f7:5f:45:1b:b5:f8:ce:9c:b8:77:c2:
9d:80:eb:29:a3:d3:ae:62:5c:5c:e3:a3:6b:f2:bd:ec:34:12:
e6:6a:37:3b:20:13:a8:f3:07:99:e4:0a:6e:5c:58:96:02:5a:
b6:bb:3b:db:03:7b:d0:84:c9:6a:bb:b8:4e:f0:78:90:2b:6a:
ce:cc:32:45:24:8d:ac:83:7f:d7:7f:db:b1:4c:30:2a:86:63:
33:4b:14:96:82:55:b3:94:40:ad:61:e3:e9:9d:40:a9:47:b1:
50:f2:d1:df:7b:70:ee:78:bf:fb:b9:15:b2:95:48:f5:62:f1:
9c:45:fc:9d:85:31:21:ab:34:23:bf:78:18:15:94:d8:9e:8c:
42:83:b5:49:b7:d4:90:3f:6d:cb:2b:36:77:e8:7d:cf:90:87:
3d:ec:74:29:1d:51:f2:3b:86:21:7f:b9:e3:8c:0a:ca:33:a7:
5d:cc:d9:f0:7c:ed:aa:8f:a6:d4:d5:45:95:a2:01:fd:d9:ac:
00:69:e2:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQxNjQxMTAvBgNVBAUTKEE4NzM3MjAxRkE0QzY0RkEwMDU2NDAyMkRCMDZGNjBF
N0VFMkNEMEQwHhcNMjYwNTEzMDU1NTQzWhcNMjYwNTIwMDU1NTQzWjAYMRYwFAYD
VQQDEw02YTA0MTI2MC00NjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2AzeoaEdCOrT1nlQEA79/RkBIBxwImL/5CKO3gkvoCGDdzQorx2VNE9QXxXb
XmgMPrIqTsZkb4vNQIWxyJKw3SPTt76cmgNj1C1cgsYgYZTX+PBcpvE7L1jDtA9+
t1XlGi7sQD1NJVt/r3x7Ay/5mZ2ggjGM5k4UY4gYxtoOyD0AscIti+F8upySft4w
L/4/hMRFSuoMk8F9VwwASxSQeobDE6JIZNDk+4EaKJHosoaoZqzvgx39iodlvmuB
tGKj+gtOMe9Vbzk1X9bvDHhL6aUyBfvbdkVB2jHLqbuivdnPrQ5X3LdKjKYZ5V0p
atoCO7uBu1UVTTqMsepbQxmHEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhXqwTX
NPkmUYuDZoA/6GlB2zSdMB8GA1UdIwQYMBaAFKhzcgH6TGT6AFZAItsG9g5+4s0N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDE2NC9BNjhFMjY0RUEx
ODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQb0FWa0FpMndiMkRuN2l6
UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FITnlBZnBNWlBvQVZrQWkyd2IyRG43aXpRMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDE2NC9BNjhFMjY0RUExODIxMUVGOEY0RTE2MjNDNEY5QUUwMi9xSE55QWZwTVpQ
b0FWa0FpMndiMkRuN2l6UTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU2lNKX/ZpMN7SiQug8c7N7emClG/K1+eBkbmx/HV9eq1caqBeZcA/nC98h2g
U2P0gZeR3ExzXtdwbNwPkfdfRRu1+M6cuHfCnYDrKaPTrmJcXOOja/K97DQS5mo3
OyATqPMHmeQKblxYlgJatrs72wN70ITJaru4TvB4kCtqzswyRSSNrIN/13/bsUww
KoZjM0sUloJVs5RArWHj6Z1AqUexUPLR33tw7ni/+7kVspVI9WLxnEX8nYUxIas0
I794GBWU2J6MQoO1SbfUkD9tyys2d+h9z5CHPex0KR1R8juGIX+544wKyjOnXczZ
8Hztqo+m1NVFlaIB/dmsAGniLQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:36:39 2026 by rpki-client