
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
File: qEozZepSO9pPIzph5Qd_MRjWP3g.mft (raw, json)
Hash identifier: 8hNA6DhXdO8dvoA+CY5A/XFRMZbV0lDNhwMzxoQ2CHo=
Subject key identifier: 98:AA:91:41:30:87:83:65:3B:1B:85:6A:2C:AB:2E:34:52:35:83:52
Authority key identifier: A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
Certificate issuer: /CN=A9174FE8/serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
Manifest number: 57
Signing time: Mon 11 May 2026 08:20:29 +0000
Manifest this update: Mon 11 May 2026 08:20:29 +0000
Manifest next update: Mon 18 May 2026 08:20:29 +0000
Files and hashes: 1: qEozZepSO9pPIzph5Qd_MRjWP3g.crl (hash: 4Cfd6ivTMKgiKbjlK+fEYsT881v2BZoZoehLLab6JIM=)
2: F5B1147ACC4C11F0B2EE7944C4F9AE02.roa (hash: rthVEOzl3I+Nrh1/x+VYyq3xjzoN6lgAA50smRMa7oE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174FE8, serialNumber=A84A3365EA523BDA4F233A61E5077F3118D63F78
Validity
Not Before: May 11 08:20:29 2026 GMT
Not After : May 18 08:20:29 2026 GMT
Subject: CN=6a01914d-4d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:61:fb:a7:a8:7b:e0:6d:73:7b:fa:cc:98:
93:49:b3:f7:dd:42:93:86:a8:ed:93:5a:4a:2c:fc:
4c:21:4e:0d:e6:5d:93:fe:cc:62:94:71:23:e3:4c:
a0:88:b1:87:ba:c7:ba:48:81:71:59:60:83:f3:03:
15:37:c8:13:f6:b2:fb:2c:72:17:c8:33:0a:db:33:
13:40:7e:eb:65:be:ff:f8:39:4f:95:00:f6:9e:bc:
70:b5:91:58:6d:09:92:04:b2:45:e4:90:1e:c0:3b:
b3:ef:57:98:d9:f0:08:55:c4:e1:2b:e4:72:52:4c:
4a:4f:f7:8d:4d:64:6b:bc:86:55:7b:1a:3a:4e:f4:
04:3f:3a:7e:2b:9c:bd:01:21:73:3e:4a:ac:3e:e1:
c8:bd:9e:9b:68:b4:c5:34:14:87:78:a0:6c:29:db:
9b:f0:c3:3f:9e:ea:f9:f4:96:18:7b:df:a4:4a:33:
2a:c0:be:6e:18:f4:3e:90:11:5a:eb:85:fa:24:12:
13:80:f1:d7:5d:1f:90:d9:94:5f:67:a2:c3:ae:35:
da:26:c9:7e:30:e8:5f:dd:fe:c4:94:a2:5d:99:4a:
22:8e:40:d2:4c:0b:97:09:d3:97:b1:49:ef:71:ee:
0b:64:ef:e0:e9:f6:20:44:f6:fb:ab:24:92:14:7c:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AA:91:41:30:87:83:65:3B:1B:85:6A:2C:AB:2E:34:52:35:83:52
X509v3 Authority Key Identifier:
keyid:A8:4A:33:65:EA:52:3B:DA:4F:23:3A:61:E5:07:7F:31:18:D6:3F:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEozZepSO9pPIzph5Qd_MRjWP3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174FE8/322AAB4CCC4C11F080480B40C4F9AE02/qEozZepSO9pPIzph5Qd_MRjWP3g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:82:a5:93:5a:fc:ed:78:fc:bd:9e:f7:09:91:2e:b6:f6:47:
b3:0e:fc:fa:36:ce:c9:e1:9e:5d:dd:35:1b:ad:c1:19:17:42:
84:a2:d7:a8:0e:26:9f:da:99:c7:f9:8a:ca:86:87:bd:60:74:
ab:86:ed:22:79:1d:af:ce:b4:f3:a9:c4:df:a9:86:6b:d2:a9:
03:53:43:89:01:02:36:4a:2d:56:23:bb:55:f1:52:4d:df:62:
ca:07:5b:5b:e1:03:87:bc:34:12:05:e2:cd:1d:33:5d:c9:ca:
94:34:fb:99:09:ce:b6:c7:d4:35:df:be:78:16:df:1d:21:f2:
51:a1:a2:a0:f8:b7:a1:b1:e5:54:1e:bf:a0:cd:75:91:2f:20:
b9:bc:30:27:d9:7e:29:de:f7:15:5f:0b:f7:ff:27:5a:9a:8f:
9c:c7:7c:2e:ac:72:11:19:55:08:f8:f5:bc:78:81:a8:21:0c:
02:1a:39:5e:aa:6a:50:36:a4:15:27:54:77:07:f9:7d:3e:e4:
21:8b:61:31:b2:fa:7d:f1:92:e2:64:96:25:c4:c7:1e:19:98:
ee:40:4a:39:13:a2:22:24:fa:c2:74:8e:76:5e:e2:c0:87:eb:
b3:10:36:a9:fa:f9:e3:cb:80:ed:d9:cd:2c:cc:1c:2c:b3:fe:
cc:da:be:6c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NEZFODExMC8GA1UEBRMoQTg0QTMzNjVFQTUyM0JEQTRGMjMzQTYxRTUwNzdGMzEx
OEQ2M0Y3ODAeFw0yNjA1MTEwODIwMjlaFw0yNjA1MTgwODIwMjlaMBgxFjAUBgNV
BAMTDTZhMDE5MTRkLTRkOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQPmH7p6h74G1ze/rMmJNJs/fdQpOGqO2TWkos/EwhTg3mXZP+zGKUcSPjTKCI
sYe6x7pIgXFZYIPzAxU3yBP2svsschfIMwrbMxNAfutlvv/4OU+VAPaevHC1kVht
CZIEskXkkB7AO7PvV5jZ8AhVxOEr5HJSTEpP941NZGu8hlV7GjpO9AQ/On4rnL0B
IXM+Sqw+4ci9nptotMU0FId4oGwp25vwwz+e6vn0lhh736RKMyrAvm4Y9D6QEVrr
hfokEhOA8dddH5DZlF9nosOuNdomyX4w6F/d/sSUol2ZSiKOQNJMC5cJ05exSe9x
7gtk7+Dp9iBE9vurJJIUfDWVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmKqRQTCH
g2U7G4VqLKsuNFI1g1IwHwYDVR0jBBgwFoAUqEozZepSO9pPIzph5Qd/MRjWP3gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0RkU4LzMyMkFBQjRDQ0M0
QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlwUEl6cGg1UWRfTVJqV1Az
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcUVvelplcFNPOXBQSXpwaDVRZF9NUmpXUDNnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0
RkU4LzMyMkFBQjRDQ0M0QzExRjA4MDQ4MEI0MEM0RjlBRTAyL3FFb3paZXBTTzlw
UEl6cGg1UWRfTVJqV1AzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCggqWTWvztePy9nvcJkS629kezDvz6Ns7J4Z5d3TUbrcEZF0KEoteoDiaf2pnH
+YrKhoe9YHSrhu0ieR2vzrTzqcTfqYZr0qkDU0OJAQI2Si1WI7tV8VJN32LKB1tb
4QOHvDQSBeLNHTNdycqUNPuZCc62x9Q13754Ft8dIfJRoaKg+LehseVUHr+gzXWR
LyC5vDAn2X4p3vcVXwv3/ydamo+cx3wurHIRGVUI+PW8eIGoIQwCGjleqmpQNqQV
J1R3B/l9PuQhi2Exsvp98ZLiZJYlxMceGZjuQEo5E6IiJPrCdI52XuLAh+uzEDap
+vnjy4Dt2c0szBwss/7M2r5s
-----END CERTIFICATE-----
Generated at Wed May 13 03:10:51 2026 by rpki-client