
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier: /uaBrmafhj3reWZ21PaY5hBGPCMUKjC0udWvXTNZf9A=
Subject key identifier: EB:F4:07:A8:C4:50:B8:67:5B:83:C0:F4:8F:0D:F7:46:5C:04:70:38
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: 02B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number: 02A8
Signing time: Sat 05 Sep 2026 01:28:50 +0000
Manifest this update: Sat 05 Sep 2026 01:28:50 +0000
Manifest next update: Sat 12 Sep 2026 01:28:50 +0000
Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: Z7CtTMEeNbvU8zWW1PItzYLih61xKz4z1SM6UUiIxoo=)
2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 01:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: Sep 5 01:28:50 2026 GMT
Not After : Sep 12 01:28:50 2026 GMT
Subject: CN=6a9b7052-0774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:34:fb:ff:38:d6:a2:4c:8a:31:5d:a9:ac:
ab:87:84:9c:d1:f9:9d:af:00:6f:e2:0f:b2:75:2e:
a7:01:d9:cb:1a:f9:c9:4d:da:88:19:82:dc:fe:94:
14:49:ac:27:a0:55:b9:1b:56:e1:58:57:a9:b8:2e:
0f:64:e2:3f:07:1e:67:4a:bf:e5:a2:39:94:91:15:
b1:16:e4:ba:51:c5:17:d1:de:d8:95:1c:64:0a:b1:
2c:f8:04:81:b7:13:f5:79:5a:79:b5:14:54:ba:b7:
88:c1:95:20:2d:79:e8:cf:d3:6c:26:4d:56:72:e7:
b9:c1:d3:14:48:54:ec:8b:03:b4:5d:c0:34:a1:e0:
ed:f5:ca:90:cd:7c:fd:c6:2b:e8:68:d6:01:c5:da:
77:5a:31:cf:7b:4c:bd:8f:13:da:ea:4e:d2:d2:76:
f2:2a:39:b0:6f:e0:d2:a3:ff:bd:0f:0f:9c:a7:2a:
db:43:32:6d:36:21:9b:37:e4:31:54:4b:2c:0d:f4:
e9:6b:d5:e9:a5:24:59:bc:a3:10:cc:96:bb:52:22:
98:b4:fd:70:f3:b2:23:ba:15:06:6b:82:59:da:97:
ad:f5:95:47:66:6e:9b:df:9f:f9:32:24:49:54:b2:
60:3c:44:c6:36:5f:10:37:6b:ec:92:02:1c:a9:49:
2b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:07:A8:C4:50:B8:67:5B:83:C0:F4:8F:0D:F7:46:5C:04:70:38
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d8:91:ef:4d:ea:43:b4:2b:ba:27:5c:b0:76:3d:c4:d3:c9:
b9:98:77:e2:b8:b2:95:0e:db:d0:ba:2f:3f:e8:48:be:f8:fd:
27:34:91:ff:ca:a6:44:94:27:db:c2:95:da:b8:fc:e5:ed:61:
7c:98:5f:fc:8e:8d:0d:31:97:ce:0f:74:27:c6:df:b3:96:42:
61:7e:79:3c:f8:bb:2b:78:e2:eb:31:e2:ba:8b:34:b8:d2:b5:
b2:49:2d:a2:b5:a0:49:1c:9e:a3:75:63:96:ae:62:6a:98:34:
79:94:83:ec:4f:c0:43:1d:63:cb:49:25:cc:5a:1a:ab:08:16:
50:16:e2:2b:31:96:f8:ac:8f:28:01:da:02:b1:cb:ae:17:f7:
08:79:41:9e:b2:bc:9e:48:92:f8:48:8d:4d:0a:15:8a:ff:ba:
25:0e:ec:8d:6c:9b:a7:25:7d:5a:5a:34:6d:1f:00:ba:5c:e6:
7b:e4:9e:b0:1c:65:08:9e:88:8f:f0:b4:34:db:95:01:cf:6d:
07:99:ae:75:57:86:03:3c:d4:dc:4b:e3:2c:ab:cd:51:db:3d:
cf:af:af:74:9f:91:27:b0:1e:2b:e7:ae:d4:ff:41:92:90:29:
a0:7e:41:7d:64:7b:75:f9:08:79:59:48:f8:17:9f:56:65:3f:
5f:d7:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:15:05 2026 by rpki-client