
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: Q8jhiCTQ4/aiqa8Z8cbDJc0eqzqvQF5Emnr7KEhW3J8=
Subject key identifier: E0:D2:42:03:2F:87:57:C6:92:BE:D7:07:D5:9F:92:B3:69:B1:CC:43
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0BAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0B08
Signing time: Fri 04 Sep 2026 19:27:09 +0000
Manifest this update: Fri 04 Sep 2026 19:27:08 +0000
Manifest next update: Fri 11 Sep 2026 19:27:08 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: o7ky+XTonDhPkhZUyFqCtSQ8JlYhWQq1yu44chyBWwo=)
2: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU=)
3: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=)
4: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: KKSynpOm+ycQihs/yZsWcr8FrhVz4wSTwzAIsyVh/HE=)
5: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: iHRiLGk5bEvTzw6ual7pTVIN/CRRx+XVbsv/MEAp4Wk=)
6: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: mxCH2vpK2XOhgq6GjWu4EDLEBsLtWayBY2NOfqL8jYM=)
7: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: fKLRAkWs+zCufWcV04yXK1kQ1KxM/zVG5v7JSWUHnmI=)
8: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=)
9: ABF4F248555511F0A341047BC4F9AE02.roa (hash: n9QAmEJQ9kZxHlOhthQbr/AO7+Rv5gbW5CmVpfpdp1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2990 (0xbae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Sep 4 19:27:08 2026 GMT
Not After : Sep 11 19:27:08 2026 GMT
Subject: CN=6a9b1b8d-df63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:7c:8f:86:4f:b2:b4:db:fe:95:60:73:e3:
6f:5e:08:e7:1f:f0:4b:93:5f:e5:e6:be:e5:16:d0:
3a:1b:f4:4a:e8:b4:60:cd:3a:7a:b9:39:a2:7a:ea:
88:59:b2:02:9a:17:43:12:22:c0:82:6e:f8:54:26:
19:7b:51:eb:f4:66:a9:cc:b5:e6:5b:d1:fc:a7:6c:
9e:0a:25:8a:f9:38:5f:66:ce:ad:a5:ff:0b:87:ac:
93:0c:94:61:a1:3f:ba:a4:a5:e5:75:ca:af:8a:26:
ff:e3:f0:6b:28:3d:e5:0c:78:f7:87:4b:8a:72:f3:
63:e1:85:42:e6:7f:4a:b1:8a:86:8f:47:c7:a2:5d:
ed:72:ce:26:3d:54:9a:1f:4f:5c:ea:44:bd:e8:85:
4a:43:f8:32:49:6f:79:f4:07:00:11:d4:84:00:63:
f1:91:ab:27:1d:d3:a6:fe:78:fe:88:d3:8c:8b:fe:
1d:1a:b4:f3:4c:65:8d:0f:59:53:a4:f4:eb:38:35:
7a:a5:99:ca:dd:2f:71:ea:f9:57:c3:79:7a:1d:ff:
c9:3c:8e:6e:9c:b0:6a:dc:3d:6f:df:26:12:1d:8b:
6a:34:c3:5d:08:05:01:ec:f6:f6:16:a1:af:76:59:
ab:b2:de:a8:d1:15:a5:e9:9a:73:3c:74:62:13:eb:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:42:03:2F:87:57:C6:92:BE:D7:07:D5:9F:92:B3:69:B1:CC:43
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:1e:97:3b:53:0e:48:be:89:40:61:6a:f1:c1:c3:7f:e3:4b:
ed:42:28:e1:a6:79:e3:b2:bd:aa:ea:b1:2a:e1:d5:1b:83:6a:
bf:70:4a:74:27:3d:6f:13:76:a8:3e:7b:8e:f7:f1:fe:65:04:
5e:b2:9d:0b:2b:19:7b:6e:14:5e:a6:48:e3:36:31:26:89:5a:
c1:c8:20:15:17:23:85:57:26:0b:93:dc:e2:19:46:23:dc:3c:
10:26:c8:f0:df:bc:82:61:30:1c:04:b5:9d:4f:61:7b:93:6d:
64:54:65:b6:3f:ea:af:cc:c2:87:11:ad:12:68:ed:38:03:ad:
b7:97:8c:d0:9c:3e:6e:aa:24:af:36:2d:1e:ca:28:9c:53:cc:
fc:51:9f:b5:7d:a6:04:70:c4:61:3e:e5:99:1f:7f:4f:86:31:
5b:5a:51:61:3a:6e:07:c7:68:ca:f6:40:d2:57:40:ab:e0:ec:
91:03:e8:bf:08:49:ff:62:05:a0:bf:bf:b8:ba:b0:23:e0:53:
25:cb:a3:0f:e0:2f:e8:8b:e7:9c:31:b7:48:8b:84:bd:f8:33:
ce:7d:dd:48:f9:36:05:f3:be:94:ed:c1:12:03:4c:c5:42:ca:
2d:3e:8f:ca:c6:73:3d:68:90:72:a9:1e:24:31:f9:96:8a:b2:
5d:dc:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:31:48 2026 by rpki-client