
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File: mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier: iXujXBAEICRYRFjJqD4r3uTHOy/exHieNcW6IZFTRnQ=
Subject key identifier: 81:E5:62:89:62:71:AB:8C:CE:96:21:29:EE:1A:73:E1:43:B7:D1:7D
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer: /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial: 02CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number: 02C1
Signing time: Sun 25 Oct 2026 01:42:36 +0000
Manifest this update: Sun 25 Oct 2026 01:42:35 +0000
Manifest next update: Sun 01 Nov 2026 01:42:35 +0000
Files and hashes: 1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: iNQkqhNAPUan5/t+PvUyTl5E9G4dO5ras3ph4cELoVw=)
2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 01:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 719 (0x2cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Validity
Not Before: Oct 25 01:42:35 2026 GMT
Not After : Nov 1 01:42:35 2026 GMT
Subject: CN=6add5e8c-51bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8d:ed:8c:fb:cd:88:37:fd:57:49:99:55:31:
74:04:60:8c:96:17:d5:19:7c:f9:0a:20:95:ee:a9:
ef:b9:ad:df:86:b8:46:92:8c:8a:b5:d5:ca:6f:a0:
9a:c6:0a:22:3c:0a:83:24:d7:0b:c6:42:2e:6b:11:
01:16:12:2b:5f:a4:54:94:66:87:57:d1:ec:f4:26:
9a:df:81:e6:38:93:06:6e:47:7d:d0:53:64:4a:40:
c7:93:c8:6d:af:68:c0:4f:56:cc:c4:b7:32:15:d8:
54:f6:24:50:8b:01:d2:b2:d4:ed:a2:fa:33:d7:aa:
b6:99:33:5d:0e:3e:51:60:fb:24:3e:69:49:13:0b:
c7:d9:3d:ad:dc:62:c5:db:b4:c1:e1:e0:bf:cf:10:
33:98:62:ed:ff:14:4d:c5:33:a0:3a:52:38:4c:f8:
01:75:e7:ac:08:63:33:66:ed:1d:73:07:d4:ea:a9:
c8:0f:39:e1:21:6a:53:9b:eb:97:a4:6f:5a:15:fa:
9b:55:1e:83:14:0c:53:ca:7b:8a:c7:86:42:85:90:
82:b6:3b:90:d3:69:f5:87:df:22:a9:95:e2:58:af:
34:9b:89:63:20:d0:db:6b:28:b2:75:b4:7b:ca:6b:
da:d9:d4:ad:51:03:19:b7:de:a5:05:fb:36:33:0b:
98:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:62:89:62:71:AB:8C:CE:96:21:29:EE:1A:73:E1:43:B7:D1:7D
X509v3 Authority Key Identifier:
keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9b:31:20:72:c0:78:5c:8b:8f:f4:7c:7c:da:0a:22:87:1d:
0c:3c:d7:89:70:8d:0b:c3:7e:88:13:0b:ae:2b:89:45:11:39:
69:7e:c1:0c:78:e6:9e:cd:8d:67:9f:5e:7d:d4:c3:3c:a8:8c:
22:12:a2:b7:6b:17:ce:9b:2f:6d:bd:ca:56:7a:28:b9:ca:d6:
96:7f:fc:67:27:c9:1d:64:91:e0:31:b7:5b:ae:a4:da:b5:80:
a8:38:c9:58:93:49:d2:76:d4:63:a9:07:c4:d6:fc:16:1b:f5:
ba:af:09:7e:03:c3:e8:85:ce:f7:23:c1:04:6f:73:4d:08:46:
ee:b6:bb:b3:98:50:a9:3b:fe:f8:40:c6:0b:25:4b:1f:8f:6e:
56:c6:b2:5b:dd:7d:ef:5d:5a:80:c3:a4:30:82:fe:b6:b7:88:
50:58:83:6b:f0:89:0f:5d:15:84:81:72:c2:4b:6e:6a:32:dc:
0b:0f:86:7f:b8:68:c3:46:4b:6f:02:ba:86:19:26:0a:0b:02:
89:ba:7b:8b:1a:a3:a9:d7:6a:90:ca:48:0f:ee:2b:35:10:fe:
79:02:77:a2:0e:42:01:46:09:d1:cd:3c:5b:da:d2:63:0f:9d:
f3:41:20:0e:45:c9:26:76:1d:5d:1c:c9:26:93:38:4a:05:05:
a0:c0:d7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:04 2026 by rpki-client