
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier: Xnp9Q/PgMGTWMmBeuoO0YR6wAawWG7utC+LjER4Pbgg=
Subject key identifier: 82:48:80:47:93:3A:F9:79:05:F7:4E:3F:AC:CF:B7:C2:5A:CC:A1:17
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer: /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial: 0A00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number: 09DC
Signing time: Sat 16 May 2026 19:53:05 +0000
Manifest this update: Sat 16 May 2026 19:53:05 +0000
Manifest next update: Sat 23 May 2026 19:53:05 +0000
Files and hashes: 1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: fFwmELdZ575RKBSlWF3sCMGtCdx443R2qhFAG9tXTgU=)
2: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=)
3: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: G8tEalgIYlF459jNjIZOJNDqLr5DDsJR+CWVbE3khX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560 (0xa00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Validity
Not Before: May 16 19:53:05 2026 GMT
Not After : May 23 19:53:05 2026 GMT
Subject: CN=6a08cb21-f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:2b:43:fe:51:bf:e3:5a:5b:c1:1f:2e:fa:
2b:94:15:8f:c8:93:22:eb:d6:b1:60:8e:4b:a3:76:
a7:6c:93:f5:d1:26:ce:78:09:a9:f5:47:79:80:20:
0c:52:0a:a0:52:6c:6e:93:98:94:30:1f:7d:d3:97:
10:00:19:7a:af:9c:7e:5d:f9:04:d1:5a:4a:ef:c4:
af:8d:18:eb:06:dd:a1:c1:e1:06:3f:2e:dd:ea:28:
01:e5:47:9b:3c:18:10:7b:20:d4:4d:75:43:7a:83:
6d:39:fd:6f:25:0d:84:3f:85:29:88:3a:dd:ac:89:
ad:59:03:ad:af:e8:0e:ee:d4:3b:e6:1b:41:60:b6:
11:65:e8:00:50:1d:1e:9b:46:5b:d4:87:dd:54:5b:
03:8b:08:99:2b:b4:5e:22:b0:89:55:22:18:90:42:
20:bf:65:e7:f4:36:7e:2f:1d:41:b9:e0:cb:74:95:
64:54:af:47:b3:a5:1d:9b:6f:db:24:0c:e8:71:f3:
c6:65:de:5d:c4:71:12:47:28:a3:70:60:a4:bd:fe:
4b:8f:f3:ce:69:70:59:d0:7c:ef:d0:63:81:a2:b8:
4f:1c:3d:af:03:f3:f0:c2:bd:41:9d:45:75:4e:6e:
c2:99:15:c7:6a:db:55:98:76:49:c5:6b:46:63:d8:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:80:47:93:3A:F9:79:05:F7:4E:3F:AC:CF:B7:C2:5A:CC:A1:17
X509v3 Authority Key Identifier:
keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:69:b6:1e:63:cf:68:58:3f:25:55:90:00:82:b0:ad:16:b9:
d2:85:2f:ac:70:10:63:95:b5:0b:32:f3:60:9b:9d:09:17:b4:
6d:65:57:19:89:33:50:ab:42:42:01:ff:74:39:b9:70:86:cb:
d6:38:4a:63:7d:3b:fb:4b:7b:6d:df:5a:fe:6f:72:a4:b4:2a:
b6:8e:4b:4b:b0:41:69:c4:ad:53:c6:2e:7a:6b:93:58:7b:0d:
fe:fa:28:f5:9a:bf:dc:c7:b5:e5:fb:be:5a:bf:85:ee:29:49:
53:dd:4d:49:69:6c:c3:83:2a:5e:ca:ba:3b:5b:9b:88:a3:92:
15:ce:a1:ce:1e:d0:63:94:92:d4:45:c9:a8:6a:b6:3b:99:4f:
bb:b6:d8:48:e9:51:5b:e0:12:b0:1e:3a:a9:01:c0:cb:74:1f:
77:5f:3e:80:3d:e2:3a:b4:8c:7e:08:36:25:40:b5:18:5c:a2:
1d:81:22:c4:85:b9:a0:81:fa:10:47:6f:17:89:31:29:7d:1c:
5c:5e:dc:1d:96:43:d4:79:35:40:02:65:6f:b9:6c:a9:29:af:
51:08:a9:57:ab:2f:29:23:08:10:37:9e:9c:c5:5d:b5:98:07:
f2:46:3d:b7:eb:37:74:c4:f1:07:7d:8b:9a:f6:39:95:87:6a:
63:62:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:33 2026 by rpki-client