
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: Ghh1NzebgGwZTaQalvFBVT1rZMJZNjZXcAU4TCgpMms=
Subject key identifier: 38:55:CB:68:28:B7:D4:96:6F:C2:00:62:18:7E:FE:6B:81:59:25:85
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0AD9
Signing time: Thu 04 Jun 2026 19:40:10 +0000
Manifest this update: Thu 04 Jun 2026 19:40:09 +0000
Manifest next update: Thu 11 Jun 2026 19:40:09 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: QBsIw2HKY2ty1HfsD7SRyBB4HVtzAoyhXL/bK9Pjxnc=)
2: ABF4F248555511F0A341047BC4F9AE02.roa (hash: n9QAmEJQ9kZxHlOhthQbr/AO7+Rv5gbW5CmVpfpdp1Y=)
3: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: iHRiLGk5bEvTzw6ual7pTVIN/CRRx+XVbsv/MEAp4Wk=)
4: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: KKSynpOm+ycQihs/yZsWcr8FrhVz4wSTwzAIsyVh/HE=)
5: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: 9YeNPbkEMr49smUkWp5OvMYw8mMpgYiATLaFT0UeorU=)
6: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: xIcJEEo0SjLo9RfqmyhHd5f9q4sHEfEABEu9ajiLww0=)
7: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: hCfgHx3D3/JbgVOrzp8me4jGJi6fR8N8xzDPSQIMBx0=)
8: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: mxCH2vpK2XOhgq6GjWu4EDLEBsLtWayBY2NOfqL8jYM=)
9: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: fKLRAkWs+zCufWcV04yXK1kQ1KxM/zVG5v7JSWUHnmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2943 (0xb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Jun 4 19:40:09 2026 GMT
Not After : Jun 11 19:40:09 2026 GMT
Subject: CN=6a21d49a-02f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:78:5b:9c:9f:94:5a:17:5a:bc:10:9a:c8:
19:5d:2b:41:20:09:ac:bb:fb:10:7c:c2:ed:f4:03:
57:6f:16:85:97:b7:08:a7:42:3f:41:55:f6:68:b6:
85:a4:03:8a:f2:7b:f3:c9:cc:52:f0:c1:08:29:99:
09:43:90:59:08:9d:4b:1a:9c:9b:57:c3:aa:b6:0d:
92:a7:81:8f:e6:92:c8:53:47:58:66:eb:34:fb:96:
c8:e5:ca:ab:ac:f1:c5:96:eb:82:13:52:7f:eb:c7:
ee:79:8b:fe:d2:1c:8e:a6:55:a5:90:c3:6e:dc:41:
fa:d8:b9:fc:17:b0:08:33:5d:10:14:03:9c:7a:2d:
ef:e0:35:ee:48:64:10:37:e7:21:e5:cc:21:cf:62:
f6:97:3e:e0:02:67:d6:26:59:ff:57:88:25:c7:d1:
57:b3:4a:b2:90:01:5c:02:08:da:28:27:4e:00:14:
e8:ce:03:e4:7f:e1:dd:16:27:bb:ab:42:75:bc:d9:
68:26:6c:02:fe:df:55:2c:5f:fa:73:47:1b:2f:e1:
1e:4f:94:b6:b4:56:28:a9:4a:61:f4:e3:2f:12:e7:
fa:6c:77:d5:4a:56:fa:30:60:1e:85:eb:81:78:79:
81:47:9a:7f:45:14:09:40:42:d3:11:c8:e9:ab:82:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:CB:68:28:B7:D4:96:6F:C2:00:62:18:7E:FE:6B:81:59:25:85
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:3e:e6:36:51:8c:2b:81:e8:22:a9:38:6e:fd:93:a5:f1:e2:
7a:c6:99:c6:a9:85:fc:0e:da:a8:e2:36:d2:32:a5:8f:4f:5b:
3a:cc:22:af:53:2d:58:9c:35:dd:1b:c9:22:35:4b:70:41:f5:
2f:9d:2a:6b:4a:07:7f:fd:a9:28:f4:9e:ff:05:d6:ae:83:cf:
5a:b6:5f:84:65:7e:df:7a:32:43:bd:cb:56:a6:69:7c:5c:ba:
4d:c0:cb:4d:72:31:30:50:8c:5d:82:c8:8c:9b:61:59:33:34:
b4:08:a8:06:d2:81:09:4f:d7:1b:ae:cc:3d:54:1e:a4:9f:0c:
c4:89:36:5e:62:66:f3:7f:f1:e7:ef:52:ad:6e:fd:df:af:19:
f8:15:9c:8e:57:17:2b:35:03:5c:52:7f:a3:32:4a:ee:8a:2a:
9d:14:fc:45:ca:e8:8c:2d:54:78:46:14:f0:b2:06:67:f3:80:
51:28:21:2d:01:11:e6:b3:95:ab:64:ed:b3:12:9b:5d:46:3e:
92:ca:84:48:65:ae:a7:9a:b6:44:7d:65:b2:f6:c6:b5:fe:58:
bb:60:3d:4e:73:26:83:72:76:d8:fe:88:5b:c0:33:04:ff:53:
7c:aa:d1:d0:2a:e7:c9:80:22:58:29:62:e5:c8:2a:75:df:4c:
af:e8:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:08:36 2026 by rpki-client