
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File: q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier: Yf+Hvk1imSIFe2ajJrlIiCMMeNZaCGDwS5/NBv1bb9w=
Subject key identifier: 10:90:A3:75:CD:3F:24:0F:C7:36:07:D1:02:01:62:DC:9C:A8:1A:C8
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 0858
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number: 0839
Signing time: Mon 02 Nov 2026 21:21:46 +0000
Manifest this update: Mon 02 Nov 2026 21:21:46 +0000
Manifest next update: Mon 09 Nov 2026 21:21:46 +0000
Files and hashes: 1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 4iVLN1nzW/ZzJQbofCM3vSLf0oiAkRKiMfJQg2A7xUk=)
2: 56D3C71687AB11F095613811C4F9AE02.roa (hash: /iyD3hld6gjpTGLsl0+ygpbYTM+w2T0GBHJEgaI/WgU=)
3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 21:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: Nov 2 21:21:46 2026 GMT
Not After : Nov 9 21:21:46 2026 GMT
Subject: CN=6ae8feea-2f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:05:44:ea:8a:8e:f7:74:0a:a6:04:5c:ca:
35:bd:62:75:c0:e6:8f:45:c8:b9:a6:bd:49:a5:b7:
76:26:61:44:07:f0:15:e7:37:0f:17:48:e7:18:84:
a2:71:fd:f8:9a:db:44:c2:c1:63:46:4b:e4:97:e1:
c6:4f:39:c5:ee:ac:bc:be:b7:2c:1f:c0:c9:10:25:
22:27:7e:0b:95:55:30:5f:17:50:05:e3:35:74:33:
09:7d:6b:89:5d:db:d5:9b:a9:30:e5:79:7a:ef:c2:
12:46:52:ab:8f:2e:8a:a4:b3:f1:21:08:81:7a:99:
81:15:e3:98:32:2e:1e:81:ae:dd:8c:cd:25:51:77:
8b:b2:b0:09:8e:dd:fe:57:4a:7a:eb:a3:17:f0:6b:
86:39:e7:c4:e5:b2:35:ba:df:b5:e4:0f:f6:58:0b:
15:69:a7:d3:79:b2:23:70:6e:1f:f4:f2:04:a9:d1:
ff:71:ef:2e:49:54:7d:d5:c6:a7:74:e9:1f:6f:73:
8d:ff:0e:a5:43:26:26:11:5a:e6:6a:93:8f:0c:f1:
97:bc:7c:01:45:23:0b:00:15:3e:dd:b8:4e:b3:fb:
15:f0:ec:60:27:ac:01:7e:d1:2e:40:21:0e:67:a5:
51:e5:53:b0:47:25:7b:28:6a:4e:e3:5c:d3:40:ad:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:90:A3:75:CD:3F:24:0F:C7:36:07:D1:02:01:62:DC:9C:A8:1A:C8
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:7b:37:68:00:08:18:c7:ff:2d:46:49:e1:f3:c2:9c:c2:cc:
14:b5:01:83:8a:01:30:fd:05:90:f6:13:a5:27:ed:9c:89:db:
e6:c1:2f:25:f9:75:88:74:cc:b8:c5:c4:ec:81:93:27:4a:48:
7c:2b:64:5a:10:1f:66:74:08:24:fd:3d:f2:9d:a6:fc:ae:d1:
4e:d8:f5:21:e7:5d:66:5a:3a:09:1f:6b:f0:54:7e:6e:10:9c:
7e:df:c5:f6:2b:df:a3:29:91:d6:48:2d:56:d8:88:f0:25:25:
af:e7:b4:36:8f:7b:a5:5d:44:82:52:32:dd:1a:62:89:a5:50:
6b:6b:ac:2f:36:2b:c5:d5:ec:ed:66:15:76:7c:1a:a1:f8:01:
9e:7f:50:b7:1a:2b:ef:c8:92:34:42:d9:48:d6:38:6d:9c:ab:
79:d5:d2:2e:80:b5:0c:56:c4:d8:89:e4:06:3f:6c:d2:a5:7a:
b8:56:e1:d3:de:84:66:f1:fc:c0:07:17:23:34:2f:f1:24:14:
ce:b6:9e:36:fa:74:66:6f:50:e9:1b:54:bd:e8:b7:21:15:f9:
58:b2:5f:00:f6:24:d9:48:6b:d4:e8:7b:f5:12:32:25:2d:c3:
e5:68:8a:58:2e:30:21:c7:fb:32:1d:81:41:80:2f:56:4c:89:
23:d0:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:24:29 2026 by rpki-client