
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: qyF41kmz+fmWGjSxMclEED5hOxY04sLHs1jZkRJnH3I=
Subject key identifier: 9E:F2:22:0B:AC:EE:FD:18:DB:29:78:78:3F:25:D6:FE:E0:3A:0A:19
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0AF0
Signing time: Mon 20 Jul 2026 19:59:52 +0000
Manifest this update: Mon 20 Jul 2026 19:59:52 +0000
Manifest next update: Mon 27 Jul 2026 19:59:52 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: TR/rUUt2g9i64Ox9n8NTThbWF11prNH5EhLnXbO2ceA=)
2: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: KKSynpOm+ycQihs/yZsWcr8FrhVz4wSTwzAIsyVh/HE=)
3: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: fKLRAkWs+zCufWcV04yXK1kQ1KxM/zVG5v7JSWUHnmI=)
4: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=)
5: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: iHRiLGk5bEvTzw6ual7pTVIN/CRRx+XVbsv/MEAp4Wk=)
6: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=)
7: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: mxCH2vpK2XOhgq6GjWu4EDLEBsLtWayBY2NOfqL8jYM=)
8: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU=)
9: ABF4F248555511F0A341047BC4F9AE02.roa (hash: n9QAmEJQ9kZxHlOhthQbr/AO7+Rv5gbW5CmVpfpdp1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 19:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2966 (0xb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Jul 20 19:59:52 2026 GMT
Not After : Jul 27 19:59:52 2026 GMT
Subject: CN=6a5e7e38-38c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:4b:b6:d3:f4:df:3a:49:17:26:30:04:30:
f1:3d:c4:40:c1:b8:ae:7a:01:82:bd:86:85:5c:bc:
a2:80:c7:33:7b:fe:e7:9c:58:4a:d4:a5:9d:80:fa:
26:17:09:38:2b:b6:5b:d2:8f:c1:2c:97:40:b1:3a:
e3:d8:f6:d7:24:c5:21:e1:d3:65:ac:73:5b:b4:ea:
81:c5:b4:95:a4:a4:56:35:04:61:3d:9c:92:79:8c:
c9:3f:df:3c:2b:4c:d4:c9:7a:c0:2e:9a:b0:02:26:
41:83:47:7e:94:0a:d9:de:f9:f9:a2:cf:fb:47:64:
28:62:37:48:5d:8e:18:c0:11:aa:80:66:3b:dc:f5:
e3:a1:57:77:da:9d:93:ed:bf:34:f0:d4:33:33:42:
2e:3b:f5:ac:b6:7e:8e:46:5b:01:4b:fd:10:84:c5:
25:e5:42:3f:ed:d1:60:c3:2a:e4:b5:bb:4b:85:31:
c1:ec:2b:d3:7e:cd:81:f7:ce:d0:52:aa:f3:d1:e6:
64:44:f4:36:9b:93:79:c6:8b:9d:36:83:37:21:ac:
54:30:3a:bd:03:a7:1b:69:e7:d1:0e:d4:1f:42:76:
63:73:72:d2:23:e3:30:8a:99:a4:68:c4:d9:ea:29:
ea:bd:06:2e:82:16:6d:eb:64:6e:5d:6a:db:52:e9:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:22:0B:AC:EE:FD:18:DB:29:78:78:3F:25:D6:FE:E0:3A:0A:19
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:3e:a3:25:e0:38:76:5b:9f:71:c4:1c:dc:f8:41:39:7e:16:
32:60:7a:9e:f0:95:f8:cc:72:77:1e:3a:67:77:22:d5:10:fd:
b3:d1:2c:72:10:c9:0f:c8:31:87:90:76:f0:34:dc:e3:a9:e4:
83:39:77:9d:5c:6b:b9:60:92:ad:57:4b:11:8f:b0:7b:1a:7e:
75:f2:45:9a:36:df:cc:94:2a:47:5f:2d:9e:8a:76:fa:40:12:
5e:36:a6:64:a1:ec:41:5b:1b:9e:b4:55:1e:91:86:d6:24:7b:
79:1c:42:3b:5c:62:d0:f2:3c:e8:bf:76:88:22:75:aa:ab:0f:
ce:f1:48:79:73:28:f6:2e:80:6c:d7:ae:cf:fe:58:7b:c9:5f:
28:91:25:da:29:9d:78:5b:bc:1f:97:bd:dc:08:84:48:7c:7b:
54:3e:9b:3e:51:96:67:08:90:d1:0d:9b:1c:ea:59:71:9b:16:
f3:a6:e4:08:7f:ec:68:a4:a9:5d:40:6b:a4:19:54:ef:f8:f1:
24:87:f1:9a:89:d9:28:22:04:80:5a:3a:70:f8:da:15:68:1a:
a4:5f:9e:81:4d:ca:cb:76:ed:b8:8a:da:a8:4f:51:9b:03:ee:
73:a5:db:58:1d:5e:94:0a:7c:c5:77:d5:c8:e3:d7:8c:73:a1:
ec:55:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:07 2026 by rpki-client