
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
File: q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft (raw, json)
Hash identifier: yyJWvLMGQ7E8QixLMWWgBhMD3ROUsxvlMvZ/vASKPs0=
Subject key identifier: 53:ED:B1:F2:F3:48:38:99:0C:1A:60:DD:00:84:0B:A3:91:82:45:AC
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
Manifest number: 024E
Signing time: Mon 05 Oct 2026 02:51:41 +0000
Manifest this update: Mon 05 Oct 2026 02:51:41 +0000
Manifest next update: Mon 12 Oct 2026 02:51:41 +0000
Files and hashes: 1: q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl (hash: iT+xdQt1gBTFsRnnqmDv7DsHVwORSGSokJer/p80wHo=)
2: 0648277C065B11F1BBF0D547343D8C67.roa (hash: tnd3O6X0ks7RgR3+GqtXF3fphQTlyMf6t7mYRYp7hBc=)
3: A506225EB8A011F1BF8519ED6311F970.roa (hash: BAJZ251ivU5vhUR20p0iDiPabAbtJvC9mHhfFGcYa8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 02:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Validity
Not Before: Oct 5 02:51:41 2026 GMT
Not After : Oct 12 02:51:41 2026 GMT
Subject: CN=6ac310bd-22be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:50:d4:e6:b2:cf:c5:a3:f3:48:fc:5b:f7:
f2:85:5b:8a:a8:cb:7e:40:2a:33:78:89:4c:16:4e:
94:75:9b:ba:b4:97:1e:c9:1e:58:72:66:c0:ed:6f:
19:df:cf:e8:ab:8f:ac:86:6d:ff:d0:96:75:79:f5:
c5:f2:a1:e8:42:a0:49:cf:2a:cf:cf:67:c0:65:7f:
0b:e3:44:b2:02:55:63:17:44:74:8e:bb:43:d2:35:
21:2e:4a:4d:6b:27:0b:0e:f2:a4:1c:98:15:3e:d8:
23:76:0f:88:8f:d5:5d:4b:9c:45:2f:14:dc:8a:eb:
51:db:08:7b:a8:93:fe:bc:56:f2:0f:1b:bd:c4:f6:
a1:34:46:44:30:be:ea:9e:4c:4c:0b:a6:b4:c9:ba:
49:bd:a4:47:36:29:c4:53:2b:62:f9:ef:c1:4f:10:
b4:27:e6:11:64:a2:97:02:26:d7:59:17:61:34:1b:
cb:28:f7:f5:9b:1c:ad:27:fe:08:f1:2c:db:84:59:
33:84:6b:21:07:a4:2e:b6:2f:91:99:6f:34:65:01:
27:0c:d9:f0:5f:26:2d:56:a3:12:e5:16:91:f7:5e:
2e:72:a6:de:38:41:14:e7:38:23:8b:e4:0c:61:89:
94:de:bd:1e:10:bd:40:cb:5d:06:8a:f3:4c:d1:89:
d4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:B1:F2:F3:48:38:99:0C:1A:60:DD:00:84:0B:A3:91:82:45:AC
X509v3 Authority Key Identifier:
keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:28:97:7d:f5:ba:47:80:e5:36:d2:03:6e:d0:2c:e0:9a:3a:
6c:6e:56:27:3e:c3:dc:c4:f0:9a:9d:eb:c1:62:c7:91:f8:37:
fb:f6:a1:43:e6:85:11:db:55:a6:72:26:59:2c:bd:02:c2:d5:
0d:f9:5b:8b:95:9d:ab:14:99:01:ec:0a:aa:1c:1d:95:21:7b:
b6:f6:37:6f:b0:59:75:e3:8f:fa:47:20:82:24:7b:98:75:ae:
5f:02:2f:25:0e:d6:a7:a8:c2:aa:36:1a:58:ec:81:47:c4:e9:
43:a6:3c:4d:a6:d2:12:98:22:fe:22:c4:d2:91:8f:48:ce:b4:
3d:67:3e:c9:f0:e1:65:d0:f9:33:e4:42:89:90:bd:e5:55:09:
97:40:7c:90:f9:c0:a6:60:47:70:0d:f8:07:e6:fa:37:c2:5b:
9e:64:b2:8f:51:5c:c9:6c:d4:29:01:49:e0:9e:f8:aa:84:31:
85:c0:25:57:9d:24:58:43:3b:d0:75:28:df:67:37:aa:f0:ae:
06:b9:bf:83:eb:9f:99:90:07:d1:85:68:e6:46:6c:60:85:28:
fa:5e:6c:23:57:f1:82:14:bb:14:60:d9:53:a8:46:55:e3:a0:
37:da:88:b1:35:3a:ba:9a:1e:ae:c6:6a:4d:7f:0e:2c:0d:39:
e4:e8:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:04:38 2026 by rpki-client