
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: y23k5e8XSs2JX6jW9IKD1JlOjHD9t7HiOWAROrJiquo=
Subject key identifier: CA:EF:85:42:A2:2C:89:33:28:13:B1:90:26:82:A6:EB:B9:33:E9:3C
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0E30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0DE2
Signing time: Thu 24 Sep 2026 17:55:13 +0000
Manifest this update: Thu 24 Sep 2026 17:55:12 +0000
Manifest next update: Thu 01 Oct 2026 17:55:12 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: AwZb42g/yoxL2qznkH/JJJA9dtXXURUWdqdJ10aRwKE=)
2: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WtRbho5g5BDH0VmjD381QM1AFpgUjX2PrH3Z2ld09Yw=)
3: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3632 (0xe30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Sep 24 17:55:12 2026 GMT
Not After : Oct 1 17:55:12 2026 GMT
Subject: CN=6ab56401-6737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:75:57:4b:f9:2c:d7:23:ff:71:6a:c6:36:
89:b3:da:98:a7:c1:0f:ec:fe:f2:f6:fe:f9:f1:5f:
cf:cf:b6:56:00:46:78:14:da:3b:73:ae:d9:3a:4c:
b0:bc:bd:60:cf:b2:aa:40:93:a8:95:32:d1:3f:77:
af:0d:05:5e:2e:55:a3:e0:96:cd:57:68:6d:28:7f:
1d:f8:52:3f:61:80:d3:05:35:69:2a:b3:69:51:df:
73:19:d8:b7:d9:9b:a2:0f:8a:1e:18:4d:1a:2d:93:
75:81:f5:46:7d:b3:8f:65:3f:b2:7b:cc:da:bf:18:
3d:99:03:21:e7:4a:fa:83:48:c5:02:ef:44:22:5b:
fb:90:60:4d:95:b3:36:20:d5:a0:87:ee:ac:47:7f:
33:c8:48:c5:7b:a9:2c:96:d2:22:2a:6e:bd:49:fc:
fb:c6:e0:d6:6c:00:63:b2:20:8a:97:54:fd:63:36:
e2:7b:7f:39:f9:c6:14:05:03:b2:19:d8:21:0e:ab:
91:a2:f8:87:b9:91:f2:56:84:f5:32:e8:45:a7:d8:
dc:0d:80:3c:b4:39:71:08:b1:56:01:20:bb:4a:b7:
ed:74:89:9f:27:b0:d7:5b:e6:68:a6:09:a2:6e:06:
6c:27:27:f5:fa:81:ca:85:93:67:3e:a8:37:23:81:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:85:42:A2:2C:89:33:28:13:B1:90:26:82:A6:EB:B9:33:E9:3C
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:4f:6b:d6:d5:4b:4d:2a:82:ee:ef:f9:59:9b:71:e2:79:b1:
34:b9:48:8f:48:e3:17:3c:4a:8d:92:90:e5:6c:94:67:14:e7:
82:39:7f:14:8b:fa:30:a8:b8:a1:06:7e:51:f5:2d:56:7c:b1:
e9:85:29:c1:7e:65:60:a7:57:8f:71:09:67:85:6d:32:dd:25:
86:14:19:0c:cb:0f:45:b4:f2:44:8c:1b:ff:39:82:d5:1f:86:
18:e8:52:e5:d3:f3:53:73:17:ea:e1:cd:9f:40:c7:60:ce:88:
83:cc:b0:d0:12:e0:e0:55:56:65:b2:09:11:60:f1:ba:c7:fc:
b1:69:fb:88:c6:98:ba:21:ec:f0:25:27:85:fa:c4:be:b1:cc:
17:e3:9f:2a:6b:1a:cc:60:49:7d:1a:22:2d:21:4d:cd:65:be:
1d:d6:96:8e:16:27:5d:87:ad:a9:4f:80:ff:3e:e5:e9:9d:59:
e6:ad:dc:d6:fa:b1:6d:09:78:6c:01:3e:22:34:e1:59:da:a9:
5c:24:79:e2:e4:3c:34:0b:92:97:2d:0e:4c:6c:52:4c:9b:cf:
92:de:9d:b5:5a:16:05:d8:55:2d:82:a4:b9:92:45:07:1f:4c:
1d:9d:bb:09:b4:bd:65:b6:de:a6:1f:06:aa:cb:d3:9c:e0:c2:
ee:d6:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:41:21 2026 by rpki-client