
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
File: JQTp-AqYQrVKSSacwvSxrCtuhUw.mft (raw, json)
Hash identifier: dcv7Mk00BGqjnmimzN2756PvzSeUaKIcroUZo8Az7FM=
Subject key identifier: B4:B6:98:9A:3F:A3:E6:38:CA:16:F0:24:7C:58:47:01:4D:C3:5F:EF
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial: 1162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
Manifest number: 1157
Signing time: Sat 10 Oct 2026 17:15:19 +0000
Manifest this update: Sat 10 Oct 2026 17:15:19 +0000
Manifest next update: Sat 17 Oct 2026 17:15:19 +0000
Files and hashes: 1: JQTp-AqYQrVKSSacwvSxrCtuhUw.crl (hash: qOsYIgcm0+xZHGoNeLlsbdMjsbz9jnTfzfgok9KcyPc=)
2: B70383D6385411E9A0023656C4F9AE02.roa (hash: 7vWFkGFq5uxVXCbfQZ/86ifw+qgZ8YrPvE/ofrwS5C0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4450 (0x1162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Validity
Not Before: Oct 10 17:15:19 2026 GMT
Not After : Oct 17 17:15:19 2026 GMT
Subject: CN=6aca72a7-1957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:aa:fc:06:df:12:10:cb:42:97:d3:53:d6:
9e:3a:bc:d5:2f:14:1c:ff:cf:8e:70:b0:c7:0c:61:
1b:70:04:69:70:3d:2e:32:90:3a:93:d6:f0:95:aa:
cf:a9:d4:b2:89:fe:bd:cd:2e:eb:5c:0e:09:d6:fb:
ee:b7:6b:84:16:a8:2b:1d:70:53:df:12:db:f3:4b:
1b:77:c0:26:3a:d4:c5:cb:3b:af:27:12:35:f8:97:
06:89:b3:d8:12:5f:08:75:7f:10:54:24:13:53:86:
f0:65:2e:29:e8:ea:41:5c:3c:06:73:d9:d7:84:69:
92:db:6c:25:c6:ca:2d:d7:92:8c:28:1b:e6:4f:55:
28:e3:d7:ac:00:04:de:e9:f4:9c:ba:c2:da:a5:79:
82:b4:9c:97:89:b4:99:d8:99:f8:e0:42:37:a1:63:
e7:52:28:88:d7:67:38:62:bb:51:72:1c:d8:b6:42:
7a:1b:d3:7a:fc:75:d9:8e:98:73:99:33:78:ec:c2:
1e:b5:a6:57:a6:ec:29:8c:dc:14:8e:0f:2c:63:0c:
c9:5c:01:93:d5:7c:e7:5f:c1:d8:72:ed:9a:e2:fe:
38:2f:a5:e5:4f:1e:a5:e8:c5:6d:90:2b:86:19:d1:
91:4c:d6:9f:0f:fa:21:2a:1e:9e:ce:b4:55:da:b6:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:98:9A:3F:A3:E6:38:CA:16:F0:24:7C:58:47:01:4D:C3:5F:EF
X509v3 Authority Key Identifier:
keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:94:fc:54:0f:95:1b:bc:63:33:ed:19:88:0a:fb:69:1d:8e:
a9:6d:2c:9e:7f:19:b7:96:bd:a3:fb:c2:e2:8e:1b:76:e5:e2:
24:a2:40:b7:d3:51:44:e5:88:ef:0e:13:99:92:69:2e:37:04:
66:7a:4e:78:0f:97:f2:80:24:f2:38:0c:a6:98:23:da:dc:5c:
31:63:3e:4c:78:78:d7:fd:e0:ce:a1:14:11:e3:e7:82:96:9c:
ff:f8:16:43:10:1c:6f:88:06:6f:7c:48:1c:3e:75:ba:0e:b3:
ff:56:9c:9c:31:79:50:83:ba:ed:2f:9f:4e:b6:42:91:1f:e7:
d0:b2:dd:ea:a1:e8:96:28:76:0f:79:8b:17:18:d4:aa:a3:57:
97:0c:0d:f2:94:79:14:ad:b5:2b:22:93:c5:c7:e8:69:a7:0d:
79:6f:ab:13:58:30:6e:ab:74:ec:fb:4b:b0:31:08:a9:a6:07:
30:ca:ac:fa:03:45:2d:8a:46:36:43:a6:f3:02:7b:a7:1e:5a:
22:e2:be:f5:f3:46:64:6f:15:5b:af:70:1e:a2:08:a7:2a:42:
57:22:68:d4:e9:a8:7d:8d:e9:02:7f:19:c5:84:ba:c7:3e:af:
bc:f0:86:b4:f0:67:a6:67:97:7c:50:6b:2d:6e:b5:36:6e:9d:
b5:82:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:24:48 2026 by rpki-client