
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
File: s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json)
Hash identifier: NFXxMtOd4A32hFyS8sJrNyv3jrJOy3B1acQPAsN7oCw=
Subject key identifier: E7:95:DB:80:AA:9C:E6:5E:8D:1A:D5:2C:C3:23:4F:37:B5:90:7B:B9
Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Certificate issuer: /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Certificate serial: 0C1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
Manifest number: 1448
Signing time: Tue 22 Sep 2026 18:40:00 +0000
Manifest this update: Tue 22 Sep 2026 18:40:00 +0000
Manifest next update: Tue 29 Sep 2026 18:40:00 +0000
Files and hashes: 1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: ZzJtMULd14R+UXnodGDEHaxaBgQgAeDRyJq4Zp+QUOk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Validity
Not Before: Sep 22 18:40:00 2026 GMT
Not After : Sep 29 18:40:00 2026 GMT
Subject: CN=6ab2cb80-8f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:b3:a5:e3:37:db:03:6b:25:65:d7:80:2a:
64:da:5d:f1:af:4a:ca:e8:95:3d:e6:0b:5b:9f:45:
ac:d0:a1:2d:ab:54:e9:93:98:f7:32:40:8c:a0:87:
5b:ba:33:2a:76:dc:85:f6:85:6a:41:2d:f9:3a:40:
2d:32:36:a6:be:ea:50:27:16:7c:de:a1:86:d8:56:
dc:62:a5:42:ff:29:e6:5f:63:97:b7:1a:c9:79:01:
e0:03:f7:51:ab:f4:aa:87:5d:24:7e:42:e4:77:cf:
56:8c:12:b1:e6:7b:a3:2c:dc:52:0f:61:8f:5f:98:
94:c2:23:43:a4:a3:54:2b:26:95:10:e5:7f:43:38:
26:c5:51:51:4b:ad:a5:ea:4b:48:bd:1c:df:22:ac:
a9:2a:f0:7c:5b:a3:46:7e:48:2c:f1:22:a5:d5:95:
c2:66:95:29:8c:78:96:45:93:b6:4c:87:41:81:8b:
99:a8:88:b5:ec:d9:4a:de:9d:df:88:a7:4e:c5:81:
ca:4d:29:47:de:42:95:49:34:c5:a4:3f:64:20:09:
6b:44:13:6f:bd:a7:3b:d8:84:80:2a:7e:7f:9e:82:
37:b0:28:34:01:ea:8a:7c:58:36:3c:ce:26:92:bf:
85:07:dc:60:ad:59:f7:51:a4:3b:f4:40:5d:c7:1b:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:DB:80:AA:9C:E6:5E:8D:1A:D5:2C:C3:23:4F:37:B5:90:7B:B9
X509v3 Authority Key Identifier:
keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:8e:40:2c:4b:de:4c:4e:78:75:a8:0d:2c:60:7a:3a:74:10:
95:d3:6c:39:7f:3b:40:dc:ba:aa:d2:5c:d3:33:2b:8e:ce:b3:
2c:e8:dc:73:90:69:6d:bb:7b:ae:b0:67:8b:fd:57:97:cf:58:
6e:2d:a2:49:0d:2f:63:00:db:8f:0e:58:60:f5:b1:29:c7:88:
0d:fc:ea:46:d3:de:dd:4b:2f:be:74:2b:d9:da:c9:da:cb:bd:
5c:61:62:d3:21:5a:08:43:76:c3:f5:9d:fd:23:73:8f:93:81:
15:86:5a:f4:5e:05:03:4a:69:41:b5:7c:bc:a9:31:12:13:4d:
68:af:95:24:67:f9:d6:70:92:03:0f:a4:e9:df:91:e7:02:e7:
f4:31:6e:b2:77:4d:e1:8b:0d:f3:bb:8c:3a:b0:29:1b:ff:ed:
57:f6:cb:aa:98:41:d8:78:3e:66:cc:54:b7:38:57:b1:7a:4e:
b8:8e:dd:42:9e:74:3d:73:0c:74:32:e6:95:e2:fb:b9:fd:5c:
81:0c:15:0c:ff:c1:23:ec:43:fb:f5:5d:f8:25:30:49:92:c1:
c8:f8:52:c8:fa:b1:16:d0:ce:fb:41:f5:36:21:0a:30:af:b3:
81:84:0c:57:ec:46:cc:85:98:67:30:88:da:23:b3:31:97:78:
9c:15:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:50:18 2026 by rpki-client