
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json)
Hash identifier: wtQDoSzSVHEHprlBXh8iq7dLHR6UB7gNrdPNDiqAM8Y=
Subject key identifier: B3:29:81:A2:DD:04:D0:26:44:88:7B:0F:78:A8:B4:2E:BC:2D:88:0A
Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Certificate serial: 0A41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
Manifest number: 1755
Signing time: Sun 04 Oct 2026 18:16:22 +0000
Manifest this update: Sun 04 Oct 2026 18:16:21 +0000
Manifest next update: Sun 11 Oct 2026 18:16:21 +0000
Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: 5gv8SDUs/mQ1jI0Ksf4rkX4WBaAtRa94XzkUsm2/ne4=)
2: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=)
3: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=)
4: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911
Validity
Not Before: Oct 4 18:16:21 2026 GMT
Not After : Oct 11 18:16:21 2026 GMT
Subject: CN=6ac297f6-d9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:3f:00:61:25:60:ed:ec:53:e0:7b:af:c9:
f9:d9:09:79:2f:b6:76:ab:20:52:4f:b5:06:6c:b2:
a8:0f:c7:ff:0e:0c:95:91:16:ec:78:7f:54:6d:dd:
c2:82:7b:f2:6e:3f:ac:59:a5:a2:ef:31:ac:b9:aa:
17:47:85:ea:c5:f1:2c:99:a6:57:1c:c6:de:12:54:
a2:07:c6:e6:d7:72:d2:a6:25:c7:43:f9:d1:67:f5:
c2:eb:d9:9b:63:7a:d2:77:8d:b9:7c:43:eb:f8:99:
8a:c2:e3:a0:72:93:11:15:67:a1:77:b6:b2:fd:e1:
10:b3:64:2b:73:b3:ac:22:f4:64:18:6f:a1:9d:2c:
e8:de:3b:7b:d0:de:4d:3e:b0:8b:83:42:9f:8a:09:
cb:4d:fe:db:0d:8d:62:28:14:57:74:be:1a:90:fe:
ca:78:dc:44:92:cd:7d:cf:18:03:80:ed:44:9d:56:
a1:29:bd:a0:54:d8:d9:03:77:6e:e0:19:12:d9:d5:
6a:fc:d5:7e:fc:40:be:13:a8:79:2b:5f:8f:ef:a1:
89:60:38:05:18:37:73:13:d6:0d:83:f6:16:69:8a:
fc:2f:19:b9:eb:c0:8c:8d:0b:7a:22:03:cf:20:d4:
85:98:98:05:d6:5b:78:ae:7f:72:fb:6c:37:ea:9e:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:81:A2:DD:04:D0:26:44:88:7B:0F:78:A8:B4:2E:BC:2D:88:0A
X509v3 Authority Key Identifier:
keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:18:ab:ac:41:a0:61:86:8f:21:68:52:72:c9:d4:d7:5c:12:
d4:20:c5:cf:9e:4a:1a:30:30:91:65:dd:71:28:e3:94:77:b5:
72:75:45:31:2e:2b:c1:cd:28:50:65:4a:9d:54:91:23:56:6c:
65:89:2c:56:d4:d0:d9:8c:68:0e:99:5f:24:de:57:62:1d:04:
13:67:1d:26:5a:57:ea:2c:48:12:e9:92:f9:c5:e3:9c:fe:fe:
bd:91:10:e1:a8:38:b6:90:fa:b8:46:0d:4b:d0:d1:18:c4:c1:
a5:2a:34:1a:83:00:4d:0d:8a:2d:aa:68:f6:5f:36:ca:03:81:
76:bf:4b:a2:01:61:a3:e4:e6:cf:ed:4b:80:eb:36:43:43:e2:
ce:fa:05:e6:d9:96:7e:28:78:a5:b6:fb:ab:7d:8f:3c:2e:12:
28:55:98:1c:84:de:ff:7a:10:2a:62:a5:a5:69:d2:05:e7:6f:
09:34:cc:9e:7d:9a:5d:9d:aa:91:27:d7:34:6f:09:24:be:0a:
e0:c2:9f:11:77:df:84:63:09:76:f2:05:f4:fe:d9:91:0d:e5:
38:eb:e5:c6:a9:fb:ff:0d:86:72:3d:4d:32:e5:ae:9a:4a:f2:
fd:00:11:aa:b7:5d:13:ef:fe:22:19:c4:36:f3:aa:80:7b:21:
7c:7f:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:17:13 2026 by rpki-client