
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier: +a1loz5bzr5CtczLj2w4HCcgEL07k/OtMr0Cqeao0kY=
Subject key identifier: 4A:6C:65:1A:B5:18:52:F8:FF:41:E8:1B:82:FA:74:A9:99:CB:A6:56
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial: 10FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number: 10E4
Signing time: Wed 26 Aug 2026 17:15:38 +0000
Manifest this update: Wed 26 Aug 2026 17:15:38 +0000
Manifest next update: Wed 02 Sep 2026 17:15:38 +0000
Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 1LZB3B3M6iSHL+u5d0M9CHPYmDt2ad4Yka8oa+vgWg4=)
2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: GDAnZb/56NjHKOSDOXY9bNI/CfCE20/WA0Nzn9nbjnU=)
3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sBJRcb1jeiSo6W9iH/QWFKlKGnbO+XkPqf2UK7Z9wiI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 17:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4350 (0x10fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Validity
Not Before: Aug 26 17:15:38 2026 GMT
Not After : Sep 2 17:15:38 2026 GMT
Subject: CN=6a8f1f3a-19de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:9a:20:54:40:81:44:b1:3c:91:98:65:7d:
8e:08:1f:3f:8b:28:5d:56:34:15:ff:70:27:b1:66:
e9:f0:e6:d3:d3:a0:23:74:21:5e:3d:b0:8b:4c:02:
15:b9:07:63:de:c6:7a:ba:7e:f9:09:96:3b:97:a9:
00:44:db:71:5c:47:b5:22:26:ba:6c:2d:89:d2:ee:
60:fa:ea:91:02:3a:f2:ba:49:83:67:6e:d2:49:db:
74:b9:2e:49:9f:89:d2:63:52:e3:ee:bd:6b:d0:46:
4a:71:4d:a0:36:c7:56:5b:15:ec:68:6f:be:86:ce:
26:c3:00:f5:91:7d:ce:57:64:01:e2:ae:b6:00:88:
b3:fe:b8:e7:d1:7f:ca:dd:4e:d7:87:f4:47:4c:19:
f4:40:df:c5:ec:48:f7:b2:1f:c9:b3:17:1b:b2:21:
a7:5e:90:18:2f:1f:c6:fe:bc:2f:88:f7:26:73:a3:
8e:43:24:25:f1:30:d4:d7:8b:12:ee:b3:fc:2f:c4:
99:25:cd:95:a1:f0:af:93:11:f0:3b:d4:86:8f:c9:
86:45:69:fa:8a:6d:69:b8:10:51:3e:97:fe:9e:c0:
96:5f:cf:65:1a:6c:ff:15:67:30:9f:ec:a9:3e:84:
15:6c:52:da:94:03:1d:f2:1e:f8:24:47:d1:0e:21:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6C:65:1A:B5:18:52:F8:FF:41:E8:1B:82:FA:74:A9:99:CB:A6:56
X509v3 Authority Key Identifier:
keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:17:55:b1:bc:ed:15:44:34:8e:0a:b4:45:37:4d:8b:c2:
8e:32:3a:24:16:69:6e:85:2e:fd:ac:e5:db:e6:80:45:cb:29:
34:15:d3:39:e6:50:5a:aa:c3:1f:06:42:73:90:bb:75:4d:b5:
60:a9:0e:97:94:ba:0c:fb:a9:f5:44:06:d0:5f:e4:13:eb:5a:
15:0c:a7:62:b1:6b:23:25:ed:79:16:fe:84:6b:5e:e6:e7:5f:
cd:85:52:21:1a:9b:17:ea:dd:f1:40:0d:58:5d:53:c1:af:07:
5d:55:84:d4:10:67:d5:60:60:18:95:1c:dc:04:9f:03:2c:43:
e0:16:bb:cf:73:f7:d9:52:d9:86:4f:17:5a:2d:d3:6e:eb:54:
94:5d:55:79:0a:42:d1:e0:c8:eb:0f:fc:88:d3:be:49:71:a2:
4b:cc:43:91:6a:28:c4:cb:e0:66:9d:f0:00:5a:48:bb:f6:d7:
a3:68:5d:1a:ba:d9:f7:fa:98:4c:9a:ca:39:07:d2:e1:87:65:
01:8b:3e:90:4d:43:c4:a1:a0:d9:dd:95:d7:31:70:b3:82:6c:
47:03:34:fe:bd:e5:90:06:00:6c:7f:1c:51:40:e3:ca:a5:18:
41:fd:e5:0d:61:8e:7e:ee:c8:ec:26:66:d8:0a:4d:a6:40:4f:
fe:c4:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:42:27 2026 by rpki-client