
$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier: xnfif+F91a2X+Ni+1j6HMjMkDflf+rdzSF//DrIrgU4=
Subject key identifier: 0F:09:39:8F:CE:20:AA:61:01:F4:83:0A:D0:2F:46:1F:83:30:AD:CD
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial: 17EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number: 17E0
Signing time: Tue 12 May 2026 16:33:32 +0000
Manifest this update: Tue 12 May 2026 16:33:32 +0000
Manifest next update: Tue 19 May 2026 16:33:32 +0000
Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: UpDOZ3Udq77U5GHqWM9M09gKAeDL7Vt7DoQC3OQDpmU=)
2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: R19qxLrIh1c+/g96rJpVUSyzG1wIPKCyqhlsnSxYpaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6124 (0x17ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Validity
Not Before: May 12 16:33:32 2026 GMT
Not After : May 19 16:33:32 2026 GMT
Subject: CN=6a03565c-6da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ce:9d:95:96:40:47:c3:2d:5a:e2:f4:17:10:
ad:d6:05:57:f7:c6:76:d4:02:9b:1c:3e:04:c8:3e:
82:c0:27:f7:44:87:a5:02:8f:1f:38:2f:d7:45:39:
f5:4c:f3:5f:7a:fa:ff:a9:e6:47:a4:e7:d6:3d:22:
4a:60:04:5f:34:e0:d9:c9:1b:1b:02:a9:16:bb:8f:
e2:af:51:96:f6:bf:07:69:64:48:b4:c2:3e:51:ec:
94:37:3b:4c:fe:f6:5b:a7:32:c3:db:24:fe:e3:8a:
ac:c5:ee:e3:b2:44:89:6e:81:3d:f9:fc:5e:2d:9f:
40:3b:c3:90:2e:e6:bb:d2:c7:b6:2b:bb:fe:05:b7:
b2:57:af:b7:83:5f:60:7a:4f:a1:1d:a5:38:c2:4f:
b8:a1:2f:63:df:be:55:94:c1:cf:52:6c:af:47:d5:
4b:c6:9c:6f:6b:0d:72:8e:38:f0:7d:56:31:f9:bf:
f0:ae:0c:33:20:d7:48:da:a8:54:cd:2f:3f:13:a9:
d3:95:f3:6e:d7:d4:d8:54:4e:2b:d1:e7:07:fc:18:
ea:aa:b8:a9:0c:a5:7c:25:0f:bc:96:d2:62:1d:91:
79:7d:13:c5:08:53:cc:3d:40:86:e8:fa:5c:75:aa:
24:3e:78:7a:54:1a:35:60:c0:ff:30:68:08:2a:6d:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:39:8F:CE:20:AA:61:01:F4:83:0A:D0:2F:46:1F:83:30:AD:CD
X509v3 Authority Key Identifier:
keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:13:6e:e2:31:d3:6a:93:94:e0:21:f4:d2:81:c5:03:e2:b4:
87:e7:8a:9d:ed:d1:66:da:1d:11:d2:2d:00:5a:af:ab:e4:3c:
c1:d5:3c:07:1f:77:eb:91:1c:35:95:e1:7d:21:17:a3:5d:1d:
28:b4:6f:83:de:30:8e:36:24:b0:14:6c:bc:e6:a2:cb:3b:68:
c9:d8:44:07:11:9f:a0:19:a1:53:e4:cb:1b:3c:36:ea:06:9a:
d1:f3:3b:e1:a1:57:f8:b0:34:6d:cd:b6:40:45:d6:ff:57:12:
fa:56:b9:8e:0a:b7:dd:42:a2:a4:b4:0f:45:1f:82:5c:35:14:
18:d4:80:08:71:81:e9:28:c4:c3:dd:8f:6a:aa:99:2e:a5:7e:
3e:18:af:4a:d6:af:5b:24:c9:35:db:93:3e:88:8e:6e:0e:f7:
92:fb:ec:40:26:f1:d8:2d:8f:ae:f3:ca:ed:d2:b4:17:f1:3b:
15:44:94:2c:e5:f6:13:d8:b4:4d:a4:88:94:2b:ff:b9:58:29:
c1:71:11:f0:99:69:d7:3c:7f:da:ef:ba:01:37:d9:7a:67:fa:
74:ea:1d:c6:65:4d:b3:ff:dc:e6:39:47:3d:83:32:9d:6a:e5:
c3:a8:73:6e:b7:6a:c3:24:d1:81:67:2b:75:5a:ce:f8:d4:a9:
99:79:ec:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1
QkUyNUIxQjQwHhcNMjYwNTEyMTYzMzMyWhcNMjYwNTE5MTYzMzMyWjAYMRYwFAYD
VQQDEw02YTAzNTY1Yy02ZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9s6dlZZAR8MtWuL0FxCt1gVX98Z21AKbHD4EyD6CwCf3RIelAo8fOC/XRTn1
TPNfevr/qeZHpOfWPSJKYARfNODZyRsbAqkWu4/ir1GW9r8HaWRItMI+UeyUNztM
/vZbpzLD2yT+44qsxe7jskSJboE9+fxeLZ9AO8OQLua70se2K7v+BbeyV6+3g19g
ek+hHaU4wk+4oS9j375VlMHPUmyvR9VLxpxvaw1yjjjwfVYx+b/wrgwzINdI2qhU
zS8/E6nTlfNu19TYVE4r0ecH/BjqqripDKV8JQ+8ltJiHZF5fRPFCFPMPUCG6Ppc
daokPnh6VBo1YMD/MGgIKm3QrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8JOY/O
IKphAfSDCtAvRh+DMK3NMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw
QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl
MFhUZjhtUXdIYlJiNGxzYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkhNu4jHTapOU4CH00oHFA+K0h+eKne3RZtodEdItAFqvq+Q8wdU8Bx9365Ec
NZXhfSEXo10dKLRvg94wjjYksBRsvOaiyztoydhEBxGfoBmhU+TLGzw26gaa0fM7
4aFX+LA0bc22QEXW/1cS+la5jgq33UKipLQPRR+CXDUUGNSACHGB6SjEw92PaqqZ
LqV+PhivStavWyTJNduTPoiObg73kvvsQCbx2C2PrvPK7dK0F/E7FUSULOX2E9i0
TaSIlCv/uVgpwXER8Jlp1zx/2u+6ATfZemf6dOodxmVNs//c5jlHPYMynWrlw6hz
brdqwyTRgWcrdVrO+NSpmXns/A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:52 2026 by rpki-client