
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
File: NQcxtmBE00o9LadYm9gzHRRf5Jg.mft (raw, json)
Hash identifier: 9Tdv0QievHauUSx+HMF0Z/pya9PG8CfGJ2+BCn77luo=
Subject key identifier: E8:AA:AC:EE:17:4B:4F:F0:3A:1D:9D:44:12:B0:DB:57:EB:C8:9F:7D
Authority key identifier: 35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
Certificate issuer: /CN=A9118A69/serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Certificate serial: 01A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
Manifest number: 0198
Signing time: Tue 07 Jul 2026 05:17:20 +0000
Manifest this update: Tue 07 Jul 2026 05:17:19 +0000
Manifest next update: Tue 14 Jul 2026 05:17:19 +0000
Files and hashes: 1: NQcxtmBE00o9LadYm9gzHRRf5Jg.crl (hash: MCZ0Tfw+DL1xKaDLFH5A2QAMSIqB9pZhmc6mMbgcjyo=)
2: 6FC4A52C0E9611EF8B4CB827C4F9AE02.roa (hash: kHqgL13pwDNCnWVijT06uf83XtGX7ISyin8fJncV3XQ=)
3: 7036FFF00E9611EF8B4CB827C4F9AE02.roa (hash: mvClkx+/PklZJGKqgdrrZKMouehan4C+PlGcFt8iz2Y=)
4: BB90D9FECF4B11F08EB76486C4F9AE02.roa (hash: qS3P8NL2nujD8GiZi/a7Ne2ppBzTvdhSsZKX+btH6bY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 05:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118A69, serialNumber=350731B66044D34A3D2DA7589BD8331D145FE498
Validity
Not Before: Jul 7 05:17:19 2026 GMT
Not After : Jul 14 05:17:19 2026 GMT
Subject: CN=6a4c8bdf-e2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:91:ee:79:aa:2e:16:c7:66:50:a6:f5:16:67:
18:c4:60:6c:89:c9:d9:d7:00:24:28:fa:5b:ea:18:
a3:3e:e3:3f:1b:55:16:13:dd:55:dc:6b:03:62:ee:
79:fc:8a:61:f1:66:04:ea:bb:1d:3b:88:5f:cf:36:
24:9a:f6:76:6b:5d:50:f1:1f:72:b0:61:28:c3:01:
72:28:b6:b6:bc:2a:e8:50:a7:fe:70:23:75:33:7a:
23:39:19:f2:ec:c6:e2:af:63:61:7a:36:a9:e7:56:
6c:ba:f0:64:c7:9e:ef:ec:23:b1:b7:77:45:b8:14:
10:52:b0:fe:12:b7:fb:e5:2b:ae:16:5f:6a:a3:56:
3e:06:f2:8f:22:50:f5:f2:18:df:e0:4c:25:b7:f1:
de:e9:4e:08:c2:5a:1e:e4:f8:8f:7e:21:97:f4:28:
a2:9f:03:a2:4b:fd:37:3c:28:dd:eb:5b:97:44:c0:
14:5c:37:90:7a:e0:cc:7d:d6:31:94:ff:5b:4a:73:
69:c7:51:e7:a1:44:9e:85:a5:61:3b:38:09:9c:df:
8c:63:a4:99:d7:37:6e:66:7a:35:bd:ff:a8:55:73:
eb:a3:24:0b:80:db:53:e3:fa:d0:79:95:a5:c0:19:
98:92:ff:af:5e:4d:38:23:51:6d:d5:8a:97:3c:ae:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AA:AC:EE:17:4B:4F:F0:3A:1D:9D:44:12:B0:DB:57:EB:C8:9F:7D
X509v3 Authority Key Identifier:
keyid:35:07:31:B6:60:44:D3:4A:3D:2D:A7:58:9B:D8:33:1D:14:5F:E4:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQcxtmBE00o9LadYm9gzHRRf5Jg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118A69/C62011D60CE811EF9EFDA31BC4F9AE02/NQcxtmBE00o9LadYm9gzHRRf5Jg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:19:4e:a4:44:18:b5:fc:fb:f2:36:46:7c:b0:b3:dc:6f:2f:
4a:bb:1a:58:59:8d:2a:08:98:4a:cf:46:0d:38:98:33:7f:61:
c1:66:94:a2:4e:0f:c2:a4:ed:c7:6d:3f:16:d4:f5:32:a5:ed:
d9:0c:ac:21:40:4d:47:f2:4b:7a:90:3d:d5:03:1b:31:36:96:
6d:9f:f3:8f:fe:42:ae:5f:f3:21:4d:31:9e:59:97:c3:36:4c:
43:37:ed:ad:fa:58:23:01:3d:3a:4b:8e:5f:2f:99:eb:68:df:
a5:fa:2d:87:8d:27:7d:1e:1f:a1:f4:41:65:b1:7e:88:97:e1:
f4:f6:4d:51:a0:dd:a5:54:c5:8b:1e:4e:28:37:08:2d:75:28:
c4:f0:24:09:ea:29:dd:2c:c0:0c:a9:b0:29:c1:d2:95:99:6f:
cd:4d:2b:4f:14:5c:29:26:15:bc:4e:ba:c8:7f:15:c8:05:ee:
7a:c6:8a:1f:b6:8e:ad:4c:15:e1:df:23:9d:27:a6:d0:4c:83:
b5:26:7d:73:01:78:6a:24:39:75:0b:e5:af:70:52:f7:c8:f2:
4c:28:39:50:34:ad:03:88:38:72:51:24:79:23:ad:96:24:91:
a1:6f:dc:44:37:17:82:0f:52:72:d4:58:42:d2:63:14:c4:ac:
77:b8:07:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThBNjkxMTAvBgNVBAUTKDM1MDczMUI2NjA0NEQzNEEzRDJEQTc1ODlCRDgzMzFE
MTQ1RkU0OTgwHhcNMjYwNzA3MDUxNzE5WhcNMjYwNzE0MDUxNzE5WjAYMRYwFAYD
VQQDEw02YTRjOGJkZi1lMmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ZHueaouFsdmUKb1FmcYxGBsicnZ1wAkKPpb6hijPuM/G1UWE91V3GsDYu55
/Iph8WYE6rsdO4hfzzYkmvZ2a11Q8R9ysGEowwFyKLa2vCroUKf+cCN1M3ojORny
7Mbir2Nhejap51ZsuvBkx57v7COxt3dFuBQQUrD+Erf75SuuFl9qo1Y+BvKPIlD1
8hjf4Ewlt/He6U4Iwloe5PiPfiGX9CiinwOiS/03PCjd61uXRMAUXDeQeuDMfdYx
lP9bSnNpx1HnoUSehaVhOzgJnN+MY6SZ1zduZno1vf+oVXProyQLgNtT4/rQeZWl
wBmYkv+vXk04I1Ft1YqXPK7BmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOiqrO4X
S0/wOh2dRBKw21fryJ99MB8GA1UdIwQYMBaAFDUHMbZgRNNKPS2nWJvYMx0UX+SY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEE2OS9DNjIwMTFENjBD
RTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAwbzlMYWRZbTlnekhSUmY1
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05RY3h0bUJFMDBvOUxhZFltOWd6SFJSZjVKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OEE2OS9DNjIwMTFENjBDRTgxMUVGOUVGREEzMUJDNEY5QUUwMi9OUWN4dG1CRTAw
bzlMYWRZbTlnekhSUmY1SmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdBlOpEQYtfz78jZGfLCz3G8vSrsaWFmNKgiYSs9GDTiYM39hwWaUok4PwqTt
x20/FtT1MqXt2QysIUBNR/JLepA91QMbMTaWbZ/zj/5Crl/zIU0xnlmXwzZMQzft
rfpYIwE9OkuOXy+Z62jfpfoth40nfR4fofRBZbF+iJfh9PZNUaDdpVTFix5OKDcI
LXUoxPAkCeop3SzADKmwKcHSlZlvzU0rTxRcKSYVvE66yH8VyAXuesaKH7aOrUwV
4d8jnSem0EyDtSZ9cwF4aiQ5dQvlr3BS98jyTCg5UDStA4g4clEkeSOtliSRoW/c
RDcXgg9SctRYQtJjFMSsd7gH/w==
-----END CERTIFICATE-----
Generated at Tue Jul 7 11:52:14 2026 by rpki-client