
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
File: 1Q7mk8tIRN0udgNL7L02qIHDeJc.mft (raw, json)
Hash identifier: UDULF5e3zHfmOgEZ1wWDFn4UVQrMLq3vd5HuUnbFzEI=
Subject key identifier: 3E:AA:16:F8:97:A4:81:D8:E4:5F:A5:CD:F6:C8:45:1F:6B:F5:B9:0F
Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Certificate serial: 119B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
Manifest number: 1179
Signing time: Sun 04 Oct 2026 17:13:50 +0000
Manifest this update: Sun 04 Oct 2026 17:13:50 +0000
Manifest next update: Sun 11 Oct 2026 17:13:50 +0000
Files and hashes: 1: 1Q7mk8tIRN0udgNL7L02qIHDeJc.crl (hash: HDrNBC/T6H1Yv5IdPy1N511WJIzaMP2p6S90TQhSh/g=)
2: B0790AC83AB511E9A79AA42DC4F9AE02.roa (hash: zaS5mzK/IyBJHAKDC1c+q1bnUd4SwxYZrRdM7KycEiU=)
3: AFDA40003AB511E9A79AA42DC4F9AE02.roa (hash: YkgZVrV5vjIQhVdrVUxXczN4RAkHyGEMn+Q/a9az7v4=)
4: 0FC30B10264211EEB9FAAA43C4F9AE02.roa (hash: u8MY1OzKY8z4qKXeNf9qa8cd339LC15MI2p8BZS61RI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:13:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4507 (0x119b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Validity
Not Before: Oct 4 17:13:50 2026 GMT
Not After : Oct 11 17:13:50 2026 GMT
Subject: CN=6ac2894e-5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:79:c0:af:6f:04:43:27:76:9a:07:12:12:
c2:e9:64:04:f4:d6:ab:66:d6:20:34:42:2c:7f:67:
d8:41:8d:3f:cf:5e:93:4f:d0:c1:f4:4c:bd:31:d4:
ed:99:89:d1:1c:c5:08:03:d0:30:c4:5a:94:c0:d9:
af:7a:12:0c:e9:3b:c9:18:d2:4e:79:68:7e:e0:b9:
28:61:69:2f:84:1c:6f:81:ea:f3:73:eb:28:36:9b:
cb:2b:02:79:41:3b:06:e2:e1:88:40:de:38:59:64:
b6:bf:d6:0d:51:23:64:6f:34:ff:0e:25:e5:7f:15:
4d:6c:9d:37:b9:25:b5:7f:8e:a9:0e:d8:80:de:2f:
9e:cf:f0:f8:fc:2d:c4:3f:1e:48:ce:53:6c:46:1c:
00:4b:2a:31:20:93:dc:28:54:71:ac:2a:58:71:d9:
db:01:02:4b:55:08:41:ff:ca:80:2b:6e:a0:58:3d:
57:19:c8:0f:53:7f:59:f9:e3:47:77:60:5d:74:b1:
7f:74:ca:88:0a:ec:65:2c:74:0a:1a:5d:18:7d:5f:
d4:72:6d:40:b8:3c:35:7e:32:46:84:de:19:e1:97:
3b:6d:93:e2:7f:7a:9a:2d:f6:9f:9d:7c:f0:b1:39:
c0:d7:1e:fe:9d:92:9b:66:82:d0:29:33:0f:83:35:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AA:16:F8:97:A4:81:D8:E4:5F:A5:CD:F6:C8:45:1F:6B:F5:B9:0F
X509v3 Authority Key Identifier:
keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fe:7a:78:80:c4:d9:4d:65:13:90:09:c2:98:96:06:a5:a2:
80:70:f1:0b:0f:61:58:26:bf:9d:26:ac:d6:6f:3c:78:96:48:
c7:25:c1:0d:21:f5:6e:7e:ba:d2:7f:c0:84:a1:93:74:a5:e3:
b3:24:09:38:dc:71:c5:ba:ae:d8:c5:c8:a4:70:e9:7f:0e:86:
9a:17:70:ee:e4:ec:72:d3:75:e7:ad:c8:f5:8f:36:22:d5:ce:
6f:2d:82:c5:e8:47:db:bc:f5:81:22:1e:0a:dd:67:b7:d4:4c:
57:a2:2f:b4:88:a3:99:3f:c5:7b:93:e6:4b:36:d5:2b:0f:3c:
93:a3:d6:f8:2e:ba:db:83:fe:b5:57:cd:1f:c3:d0:6b:22:9b:
a1:d3:3e:e0:86:8e:58:88:b8:53:65:ee:40:73:fb:6e:01:8f:
9a:70:13:04:c8:db:ad:d8:49:86:0b:a5:bf:d1:83:7f:36:64:
13:d7:58:63:4c:7e:0d:61:eb:fb:81:21:a1:d0:e4:93:97:63:
6c:d4:19:f5:98:93:1f:9f:4e:f5:42:84:4c:c6:0a:fd:a0:3a:
aa:4d:5d:49:b7:56:bf:dd:c9:14:f9:8e:3c:bd:94:a7:7d:bb:
a9:69:eb:89:87:df:ae:bd:8e:76:6e:3d:6d:ea:a9:df:27:c0:
ca:53:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:38:44 2026 by rpki-client