
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: G+h8O4NuVaOjFsKVOYXriz7A9+VOn4c8Z58mvC/cY8w=
Subject key identifier: E6:F0:7C:20:09:62:CA:55:5F:B4:BB:DC:11:67:BC:65:2E:DD:80:77
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0AC0
Signing time: Mon 20 Apr 2026 19:36:37 +0000
Manifest this update: Mon 20 Apr 2026 19:36:36 +0000
Manifest next update: Mon 27 Apr 2026 19:36:36 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: 2zGRhjeifyGBxyp+r7yO7uHsoNHRFIZJ5JxNXIGPPSE=)
2: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ly8SSkcgskhGQRoPTJo3pO2wtWF8MHFHJUjxu+Q5Vgk=)
3: ABF4F248555511F0A341047BC4F9AE02.roa (hash: w3FZYA8pQMfaRKp1mIPedAuxP7NKNsznrdKgzqYMe2I=)
4: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: W+v47olv9hi+vpg+AhoU4zpy1f8xz0X0Hoo6FgJgCAc=)
5: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: wlIurFaBpaXYDDean85NO67hD8yyKAoACdepsfWqkkM=)
6: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: npxDOaYlzq4v0D7ZqGwAs2+cX+X00ZFlXzEs2lS/E/g=)
7: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: VyFPTCs08W6m53CM1t6yDsUT0ET2zwscs652Zwcp3P8=)
8: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: K5LzMbNtKqH25iKtWdvWZe2aJGrqN5SOd0zyr400Qxc=)
9: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: aeJLAovFP6DXjYFrG69v6mvG7/KwF4hFCypD2VryA+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 19:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Apr 20 19:36:36 2026 GMT
Not After : Apr 27 19:36:36 2026 GMT
Subject: CN=69e68045-f9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:6b:23:e0:73:89:56:0f:7b:b2:90:f6:86:
2a:87:0c:7f:cb:28:8a:2b:d4:c6:95:c3:3c:84:f1:
ba:57:31:41:ce:52:3c:31:a4:dd:90:16:57:37:23:
c8:e4:49:c7:59:4c:92:1b:9c:15:54:9f:8b:a7:c2:
77:f5:e7:c5:cd:92:d6:18:5a:b8:f4:30:50:9c:e3:
d5:40:31:24:42:f2:b2:e6:22:67:bf:b8:c4:a5:58:
30:7f:59:7e:f2:24:49:9e:0c:8b:b5:a7:e5:16:b8:
e5:cd:5f:f0:ed:0e:7c:3f:09:69:88:19:f2:e2:1e:
d8:7a:36:c4:e0:28:a5:ea:fc:6a:ff:b5:bc:c5:35:
cc:b8:06:b3:1b:76:01:83:e2:49:3c:9a:f4:64:00:
82:68:7f:81:0c:bd:a8:4c:dd:53:56:5b:7b:92:da:
a3:fe:c5:e4:ae:bd:48:8b:3b:84:b5:a8:53:e1:98:
31:7a:7a:9d:78:62:8d:a6:42:48:ec:65:32:8d:9c:
f7:0a:03:38:e1:4f:24:35:39:f6:04:53:2f:3c:d4:
e6:dc:45:f2:bf:05:5c:75:ab:a9:33:98:bf:35:63:
d8:a0:13:bd:a6:18:35:61:0c:07:b8:5b:33:2e:b6:
8f:3e:5f:1e:de:5e:f1:93:f0:5e:7e:3b:1b:68:a7:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F0:7C:20:09:62:CA:55:5F:B4:BB:DC:11:67:BC:65:2E:DD:80:77
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:44:56:75:c5:76:84:5d:f9:5d:41:1c:4a:a0:88:a7:53:94:
01:7b:e9:2e:87:2d:5d:57:a5:de:d5:c1:5a:05:70:3c:33:a3:
56:8d:e0:e7:08:c8:23:69:17:19:91:1c:0d:27:90:c1:71:17:
c0:0b:66:6e:f6:8a:39:f6:05:10:e0:a4:02:66:c9:79:42:79:
24:7e:7b:da:82:82:04:82:b9:26:73:dc:a1:fc:42:e3:df:2a:
bb:b9:2b:e7:3d:1c:c1:fc:b6:49:13:0f:4a:0f:af:ce:ed:74:
23:dc:bb:3f:c3:0c:1d:bd:b4:6e:f2:73:f1:3d:f2:3a:a4:10:
ea:31:2b:58:b9:ed:d2:c3:05:92:9b:ea:b6:29:14:2c:51:31:
16:1e:e8:2b:bc:9a:41:1c:29:12:5d:2e:b0:3b:d3:88:dd:4a:
e8:3d:a0:35:38:09:29:1b:e2:fe:7a:09:9b:75:4b:6d:88:7d:
76:fc:bd:dd:2d:cb:a8:03:16:bd:b7:f6:04:b6:a0:81:37:11:
7d:c2:36:a1:cb:dc:6b:d4:69:c4:8b:05:9e:bd:4b:23:a3:cd:
ba:f4:87:a3:9f:bc:50:bd:a8:46:20:a9:b6:66:44:c6:fe:23:
62:5c:66:fe:44:30:80:cb:e8:16:01:8e:65:8e:b1:94:0c:49:
da:e2:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:37 2026 by rpki-client