
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json)
Hash identifier: 1LroyuXJ9ACreD6x0I3wpxcyuiSKP+8rAenbbBSU1oc=
Subject key identifier: DA:8B:18:1A:56:4F:B2:85:A5:29:1E:26:AA:63:0F:17:31:E1:DF:D4
Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Certificate serial: 058D
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
Manifest number: 0583
Signing time: Tue 22 Sep 2026 22:57:05 +0000
Manifest this update: Tue 22 Sep 2026 22:57:05 +0000
Manifest next update: Tue 29 Sep 2026 22:57:05 +0000
Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: Kn6yVxmaMMnobjzpPKn3SZe4eED2duwMchP/eHFvCNg=)
2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421 (0x58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Validity
Not Before: Sep 22 22:57:05 2026 GMT
Not After : Sep 29 22:57:05 2026 GMT
Subject: CN=6ab307c1-692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:14:69:bb:b4:fd:e4:e3:7d:84:5e:c7:a1:
32:de:25:e3:dd:7e:9b:75:e3:d6:3c:6d:ac:6c:e1:
61:8b:28:91:6b:e0:5e:f6:5a:62:ec:b7:6d:05:18:
9f:3a:70:7d:68:e7:06:7d:84:dc:0f:30:44:34:d5:
b7:7d:b8:a3:7d:ac:b2:cc:a1:78:79:64:db:5d:03:
4d:b8:b2:c2:f1:2b:d7:86:a4:ab:d3:fd:da:76:a0:
08:8a:b6:19:35:ed:94:ea:bb:0d:ca:9a:a9:b7:1c:
a4:cf:67:01:3c:02:12:80:53:ec:2d:a5:48:2a:1a:
1a:f6:ef:9b:f6:41:1a:c5:fe:74:6e:b1:76:a5:ed:
31:19:2d:c9:1d:19:c7:0d:de:f9:a9:ee:cf:79:88:
31:24:66:8b:4d:22:05:56:b0:a1:4e:eb:41:6e:a9:
33:e2:f2:70:c2:27:8b:22:83:a0:6b:e0:11:36:6f:
fb:f2:9f:da:62:03:03:2c:5f:1c:3a:b8:ab:e7:e0:
4e:af:55:e7:b5:d3:e3:b5:d0:cc:5c:7c:8d:6a:e6:
8b:6c:8d:47:eb:b6:1e:e9:a3:c6:de:27:fa:d3:08:
b0:7e:6d:0d:7e:b7:62:76:c9:12:92:ff:56:0f:1c:
de:0c:00:aa:ad:fd:f8:96:fe:f5:b4:9f:65:43:52:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8B:18:1A:56:4F:B2:85:A5:29:1E:26:AA:63:0F:17:31:E1:DF:D4
X509v3 Authority Key Identifier:
keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:1e:4e:9e:67:12:10:70:cb:78:73:a2:c4:e8:9f:aa:d7:8a:
dc:cb:1b:bd:8d:a2:90:f3:ee:48:19:aa:f3:dc:9f:82:b0:d3:
cd:08:29:d7:3c:ed:40:e1:d0:f3:51:cb:74:d7:85:ef:6f:2b:
de:67:bb:0f:e7:06:f2:80:77:a2:09:d6:32:93:4d:ba:7f:1a:
a9:9b:ee:04:88:c6:e6:ef:e1:37:59:d3:db:e7:04:b2:2f:30:
04:ea:29:45:59:b3:f7:4f:13:c3:69:68:89:7e:dc:00:0d:fd:
96:e8:73:49:44:97:04:77:5e:93:44:32:a2:76:9c:d6:c2:ca:
53:57:23:f3:2a:16:a3:05:d3:c2:32:d4:ea:cb:27:fc:5a:d2:
46:63:d6:2f:77:ac:f8:90:da:74:9a:66:1d:b3:1a:44:fd:d3:
29:ce:3c:31:66:5c:7e:52:29:b1:11:70:29:4e:b9:15:a3:3a:
57:7b:d2:3c:4e:95:9f:3c:d3:91:37:4b:5b:2d:53:30:f2:f6:
02:6b:c4:e4:4c:22:95:db:86:34:84:ea:ea:42:d7:42:f4:6f:
8b:2d:db:34:06:04:78:90:e2:63:5c:29:c3:8a:e0:2e:b5:bc:
ba:55:4e:0f:e7:f0:f5:8e:63:4a:90:a5:2e:ec:99:23:80:c5:
bb:fd:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:07:23 2026 by rpki-client