
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: DW70x52Qx4CpvEFAhJISrWjTxdsnKqQH3YOl6U4ultc=
Subject key identifier: F0:1F:5A:84:6C:BE:CA:FE:94:85:9A:6A:3C:8F:68:DA:91:89:B9:68
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 07EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 07CC
Signing time: Mon 06 Apr 2026 21:11:27 +0000
Manifest this update: Mon 06 Apr 2026 21:11:26 +0000
Manifest next update: Mon 13 Apr 2026 21:11:26 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: Yld3mAaMJEW6+76zEQI2Kl0YEc/ZtZe+a8rLReh3df4=)
2: 56D3C71687AB11F095613811C4F9AE02.roa (hash: 0iBnup8wptUHFtoJ6sIo1Mi6U0z/k64gTDUxYk5oZKg=)
3: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
4: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 21:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: Apr 6 21:11:26 2026 GMT
Not After : Apr 13 21:11:26 2026 GMT
Subject: CN=69d4217f-d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3f:dc:a9:88:e6:eb:9d:8a:53:0e:4c:49:a0:
93:64:22:c2:3b:1f:9d:08:61:00:1b:e2:d8:55:b0:
13:6f:e2:36:a3:3f:fa:1e:44:5b:3b:7f:11:61:73:
09:22:10:4b:0f:3c:7e:f0:e3:27:94:97:59:89:5f:
07:80:ef:a8:8b:eb:a8:99:7c:3c:64:5e:98:d2:bc:
a1:a5:5b:2a:01:43:a9:09:c6:12:d7:39:16:a7:59:
12:17:7e:05:0b:87:66:4b:97:cd:f3:54:5c:b7:5d:
bd:09:e1:6e:d4:4c:5f:2c:cb:83:30:e9:19:8c:f2:
a2:db:16:15:36:24:a5:38:63:65:f5:9f:72:ac:c9:
5f:c6:ab:eb:28:cd:23:b6:4e:6c:9d:da:21:34:1f:
a9:90:6f:f2:c4:75:d7:4e:7a:f0:40:63:ab:3a:dd:
98:65:3c:53:55:fb:90:39:f4:b9:5c:84:70:58:c0:
dc:8d:22:fd:b5:50:88:20:e6:42:44:10:44:5b:7c:
c1:0e:96:e4:eb:6b:5b:0b:bc:2b:20:47:bb:66:5e:
01:e3:d1:19:98:de:52:43:56:f1:63:5c:90:d4:ac:
f9:f9:aa:46:ef:f9:6c:61:36:fa:5f:a0:00:66:1a:
ea:a2:2e:c1:62:3a:2e:ef:af:44:54:4f:1c:c5:b5:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:5A:84:6C:BE:CA:FE:94:85:9A:6A:3C:8F:68:DA:91:89:B9:68
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:82:81:86:c7:bf:2f:b7:53:91:d5:ed:f1:07:79:8c:6b:83:
68:73:ef:5e:c4:a8:44:a1:ee:11:3c:6a:d9:ff:8a:50:c5:0e:
bc:d9:d0:b1:26:3d:5b:7a:9b:8d:9f:05:8c:34:39:38:ab:67:
08:bd:fe:d8:81:bc:bd:a7:09:30:79:70:7f:df:8f:54:6a:76:
ff:8a:b6:c8:9e:ab:15:ee:4b:0a:d6:a0:4b:90:9d:3e:aa:39:
cd:86:21:3f:1c:7c:05:24:9f:79:ad:01:94:a7:5f:87:da:96:
d4:16:d1:e0:b9:d7:4b:a3:68:3d:7e:7c:e3:57:76:82:58:e0:
95:9b:62:d5:b7:c5:7a:cd:7e:cf:09:d9:3c:8a:0a:06:82:63:
ae:f5:4f:35:4f:38:cc:85:e4:85:2b:4d:7f:fd:7c:8c:d1:c1:
17:ce:5f:26:33:c6:65:0c:9f:76:21:03:31:09:de:05:64:3b:
cd:9e:f1:d4:5c:2e:3b:27:6c:2a:41:e8:d6:8c:0b:0a:37:be:
d0:07:b7:e2:71:c3:40:9f:dd:33:8b:d8:84:38:d0:10:87:d4:
65:42:29:df:9f:78:4a:f5:e3:99:11:b2:36:2c:37:0d:f4:b5:
83:2b:fe:65:12:f2:27:2e:89:83:1d:14:d5:6d:62:51:e6:fb:
72:98:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 20:20:17 2026 by rpki-client