
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
File: qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft (raw, json)
Hash identifier: Jp19uI3q78wSqgtMSLljIbZ0L78R39a5SQ4C9/g2JjY=
Subject key identifier: 9C:29:C4:F9:8C:61:E1:0B:08:FF:2B:F6:B6:20:51:15:2D:C6:19:24
Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
Manifest number: 017D
Signing time: Wed 23 Sep 2026 04:33:00 +0000
Manifest this update: Wed 23 Sep 2026 04:33:00 +0000
Manifest next update: Wed 30 Sep 2026 04:33:00 +0000
Files and hashes: 1: qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl (hash: RE0Egsk2mYVnzkapjo5kD0iVvijVWp9t1a5U55WdrrE=)
2: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (hash: FTfGtoGrUVwrnxaveaM8/TkkP8CeSjEWf8+UAR8ONdk=)
3: 48C56FF2B97A11F082553162C4F9AE02.roa (hash: OtWdgE0NfWAtdp3sq2GPul7fJB1+qypIA/v5t4925Qw=)
4: 49AD69BAB97A11F082553162C4F9AE02.roa (hash: u+AOQs7swlbtyTKzbGqH0JVVjQoXfbRTN0aGMPHqYwM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184324, serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8
Validity
Not Before: Sep 23 04:33:00 2026 GMT
Not After : Sep 30 04:33:00 2026 GMT
Subject: CN=6ab3567c-3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:90:52:27:50:8d:e4:ab:37:ec:4b:39:30:
96:41:f6:d0:4f:a0:a9:59:47:ff:9a:d7:64:71:17:
06:1a:0e:51:a9:43:9c:f4:2f:10:63:0f:ab:b9:ac:
37:d9:56:d8:70:23:d1:28:fd:0c:f7:bb:38:4c:e2:
c0:9c:85:9f:50:67:2a:e9:78:91:bc:45:cc:0a:27:
b2:f7:4b:00:b8:6a:f0:a4:83:2f:cf:aa:02:f9:1d:
be:90:7e:dd:a2:db:ae:11:39:1b:6a:cf:51:d8:c1:
40:7f:83:25:ad:6f:8b:98:7b:2c:d8:72:bb:a7:1d:
3a:88:d0:49:71:7d:87:09:24:46:ba:05:6f:a3:0d:
0a:24:4a:34:d0:de:71:eb:2f:32:ae:36:34:fa:79:
6b:21:02:a7:59:15:02:cf:fa:8c:31:38:4b:10:b9:
c1:a5:a6:5a:e5:ae:97:0f:5d:a5:51:1d:cb:75:f5:
31:d3:c8:0a:3c:b6:fc:f2:20:49:70:63:29:e1:72:
c2:c5:2c:a1:5d:45:b0:5e:df:14:69:a3:0a:e1:a8:
f0:b8:6e:1b:5d:89:5c:ab:2c:45:c3:ff:fa:b1:9b:
25:e2:a9:1e:46:26:1b:b5:b4:1a:2a:51:c0:83:5b:
f1:d5:be:5f:b8:f3:2b:88:f2:e6:31:00:9a:90:48:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:C4:F9:8C:61:E1:0B:08:FF:2B:F6:B6:20:51:15:2D:C6:19:24
X509v3 Authority Key Identifier:
keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:1e:30:0c:15:02:b7:03:da:17:12:a3:1c:e3:5e:6b:97:
ae:a7:71:f7:b3:9d:6a:ae:1b:d3:aa:22:2c:0e:e4:06:5c:22:
f1:7c:5c:4d:be:1b:cf:ca:13:e2:09:54:20:fb:9a:04:66:e7:
37:f1:16:08:04:7d:2e:12:fb:a7:9e:20:e8:cc:66:c7:1e:ca:
4d:4d:37:2c:a0:7a:02:51:ec:8b:2c:22:ce:db:08:72:c4:69:
33:3d:0f:23:38:e9:ac:ac:4b:1a:2c:a0:e5:78:01:fb:04:4a:
2f:99:ce:49:71:91:3e:40:aa:62:c8:3c:db:90:4c:6b:74:ed:
4f:af:14:9a:70:a8:c6:d1:6c:d9:f9:ab:b4:ad:39:b0:81:20:
45:98:4b:c8:e5:c8:b0:3a:de:05:31:98:0d:0e:53:6f:68:fd:
8d:5e:b2:20:4e:d1:ba:d9:2e:dd:b3:2c:fc:59:ad:da:7f:2b:
d3:b4:31:1b:c2:99:3f:8b:ea:18:d4:03:e6:38:e8:b8:09:93:
c7:0d:fd:bb:a0:7c:9e:3a:8b:5e:37:75:eb:7b:d7:f4:3c:91:
93:fc:a5:df:9d:21:7f:c4:88:f5:4e:fb:a0:89:ac:a7:3a:f4:
13:f0:e3:26:a3:a5:25:9c:38:80:db:03:84:31:11:7d:e5:d1:
10:1f:f2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:42:40 2026 by rpki-client