
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: UFopfZdXritbMH5zRROgk4sRjEKbDdgHqMluaV+/dtg=
Subject key identifier: 07:81:76:5B:9A:D4:95:02:16:CE:BA:4E:4F:45:50:E4:98:DF:0E:11
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: 015E
Signing time: Sun 27 Sep 2026 05:29:37 +0000
Manifest this update: Sun 27 Sep 2026 05:29:37 +0000
Manifest next update: Sun 04 Oct 2026 05:29:37 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: sPiIZPWI4FP1YDNX/3cAmAkkBdUz/T6LSQt7MBtHM7U=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Validity
Not Before: Sep 27 05:29:37 2026 GMT
Not After : Oct 4 05:29:37 2026 GMT
Subject: CN=6ab8a9c1-a07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:9c:da:76:a3:b9:ca:ea:85:71:98:0d:19:
7d:79:71:cc:73:dc:78:17:73:44:1a:c7:4e:02:1a:
78:db:fc:47:23:5a:dc:16:77:71:c6:60:c2:60:ef:
13:a8:c8:57:32:98:7b:f7:45:73:ce:d1:cc:ec:41:
be:39:20:35:20:03:be:45:9f:a9:23:79:4d:98:9f:
54:11:49:76:f2:b0:51:74:48:65:b7:86:64:10:0b:
ef:7d:0e:be:8b:5c:48:43:f3:e5:6f:cd:c5:f6:38:
ce:42:25:19:39:35:ce:fa:f5:4b:9c:1e:1d:cc:bb:
3d:75:05:1c:1b:b5:de:f3:bc:8a:d5:1b:43:ef:8b:
3f:5f:35:39:1c:d7:89:7c:03:57:2f:54:c4:1d:69:
11:c8:6d:af:bf:c8:f5:63:9c:2f:50:14:72:1f:13:
6f:15:8e:92:46:94:08:13:ae:ee:05:23:1b:bb:9e:
51:8e:f4:85:a3:14:3c:cf:3a:c3:d0:ba:2d:46:ed:
9d:a8:ee:e6:9a:41:29:00:73:23:55:cf:b1:95:b9:
cb:53:06:0f:1d:09:07:58:9e:73:a9:56:a6:3f:6b:
84:d0:ee:cb:cb:bc:73:b0:53:eb:c1:b1:d4:6b:16:
b2:2d:f2:3a:e1:a9:97:ad:3c:36:70:a1:30:ba:95:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:81:76:5B:9A:D4:95:02:16:CE:BA:4E:4F:45:50:E4:98:DF:0E:11
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:2c:e0:ea:d4:88:a8:17:f0:a9:ec:66:60:97:c7:00:96:b0:
5d:c5:af:f6:af:c8:6d:e8:bd:97:9c:7e:f5:d8:1b:51:6a:f4:
6a:50:65:cc:df:29:ed:ad:16:cd:03:79:61:df:bd:f0:e1:5c:
68:64:84:0e:b0:5a:49:60:28:a1:2f:73:bd:88:c6:dd:b4:69:
0f:37:8f:20:2b:83:08:ba:54:6f:c6:40:a1:50:5c:30:ba:0a:
20:5a:49:4f:62:71:a4:52:17:dc:f2:72:80:11:57:1a:24:73:
b0:cd:1b:b3:77:2d:ed:c9:13:71:0c:fb:5a:62:86:49:9e:5d:
a7:79:c3:44:e1:fd:b3:80:be:79:89:bc:59:70:96:59:59:19:
50:ea:b4:e7:54:8c:3a:aa:47:59:a8:80:e4:4e:87:4f:82:71:
ef:70:03:8f:8d:5c:86:84:b9:0d:90:a6:4c:e4:3a:d3:a7:73:
dd:54:15:31:b8:29:fa:fc:12:32:c5:98:84:a4:97:40:17:76:
01:98:a0:a8:06:4d:3a:bf:cd:f0:d0:eb:ff:77:a6:5a:92:f8:
dc:35:78:5a:57:8f:ae:b5:0e:35:92:64:c5:91:c2:71:ea:a8:
fb:b1:57:0f:85:02:97:4d:a8:ad:26:5f:e3:6d:a9:8f:7c:54:
61:16:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:01:42 2026 by rpki-client