
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier: mwXRdoNPvc6RDa8s3yZ8VwCcf1EdOI9YBrAnQASVTFw=
Subject key identifier: AC:B8:90:AB:C8:21:8F:51:F6:B3:4D:79:5E:52:08:B0:13:4D:A3:D7
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial: 10B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number: 1099
Signing time: Sat 04 Apr 2026 17:14:34 +0000
Manifest this update: Sat 04 Apr 2026 17:14:34 +0000
Manifest next update: Sat 11 Apr 2026 17:14:34 +0000
Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: 20iAICyQTbwlRr0yp1umJEFP18OIYIDanSS523WhkOY=)
2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: na3agWbpkvvPPGYrDAzu2fpB/eIpBQi6AGL/7SLQlTY=)
3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4273 (0x10b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Validity
Not Before: Apr 4 17:14:34 2026 GMT
Not After : Apr 11 17:14:34 2026 GMT
Subject: CN=69d146fa-189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:2f:d4:8b:8f:56:73:4a:97:bc:25:8d:8c:
0d:fc:62:45:07:d1:88:83:4e:22:56:0f:5f:8c:70:
1a:40:6d:f6:8b:da:20:66:a3:0b:98:54:2d:78:42:
56:a4:27:57:48:57:e7:6c:92:bc:5c:90:cb:96:f8:
96:62:9b:e7:ab:10:a6:ed:9e:60:0a:7a:07:9e:2c:
3a:7d:fa:19:6b:1b:04:73:04:63:aa:1b:69:35:34:
5f:5c:24:05:37:38:ca:fc:15:24:9c:b3:38:d0:48:
ce:e4:39:8c:68:72:a7:c4:b9:d5:72:26:29:17:79:
e4:17:e1:6b:93:b6:36:be:f1:bf:fc:44:9b:fc:c3:
3f:3b:0e:52:6d:17:b8:d9:45:37:b2:5b:14:1c:58:
cf:f5:f3:1a:a7:86:30:97:80:bb:73:25:33:4e:4f:
9d:ab:52:2c:87:a4:1e:11:06:d5:ac:5f:0f:2a:00:
71:6a:b2:f1:ea:43:c5:af:5c:19:24:e2:d0:08:aa:
0b:7e:00:28:11:98:ac:2d:bb:1b:d1:18:fd:7d:5a:
46:ca:6e:1b:6f:92:2e:78:35:f2:c0:9c:fd:2f:b2:
32:a4:5e:0d:a8:89:fc:7c:61:20:eb:d8:29:49:a0:
dc:03:a1:2b:9b:e6:12:74:7e:9a:93:cc:b7:4b:77:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:90:AB:C8:21:8F:51:F6:B3:4D:79:5E:52:08:B0:13:4D:A3:D7
X509v3 Authority Key Identifier:
keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fd:25:25:b9:84:3e:21:17:25:00:11:ee:c9:2b:58:4c:26:
8f:5d:c6:46:ea:03:46:af:c7:d0:9e:ba:00:a1:29:3f:60:aa:
64:ec:f4:76:aa:8c:48:78:c5:46:f9:d2:12:3d:9b:a9:1a:77:
bb:e9:f0:d7:72:f7:0c:5e:d0:58:7d:6f:df:b9:de:11:7f:58:
bb:85:03:d3:c6:97:0f:08:25:0c:d7:f6:76:eb:5a:a6:e7:76:
c8:1c:6c:5a:da:7a:94:8c:9c:bd:9f:68:dc:1f:8b:0b:5c:61:
39:83:62:3e:33:14:e6:1d:5d:24:ef:45:6e:1a:9a:16:e9:52:
eb:7b:0f:3e:af:1b:c7:e2:5b:33:e7:58:d5:cf:7b:ad:f9:9f:
fb:c9:d6:00:14:ec:b1:1c:8f:30:9f:62:56:bd:ba:b2:fc:9f:
1d:bd:8f:47:da:44:f5:5e:8b:cf:ab:c8:2f:fe:c6:a1:65:9c:
db:c5:84:7a:43:67:b1:e5:c8:b0:5f:31:d1:34:2f:dd:5c:bd:
a6:7b:ad:85:ff:d3:28:d8:88:e2:77:67:3f:09:fa:69:80:6b:
9e:43:80:35:81:79:80:02:b4:f8:14:9b:33:ea:2e:e4:50:7b:
4b:5c:2f:e5:af:11:b0:7b:e5:b9:90:ae:85:04:6e:12:72:86:
51:e1:dd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:42:26 2026 by rpki-client