
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
File: qPwGNuaBhkdVSHlN36RpC__UzLY.mft (raw, json)
Hash identifier: za4iriK2SrXgr8g5rs8nftqn57YgGnXEPZXjZMHGH5M=
Subject key identifier: 49:82:88:8D:0C:C8:33:7A:C9:F7:05:84:94:04:28:8E:1C:AA:97:7A
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Certificate issuer: /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
Manifest number: 01A1
Signing time: Sat 05 Sep 2026 04:02:06 +0000
Manifest this update: Sat 05 Sep 2026 04:02:05 +0000
Manifest next update: Sat 12 Sep 2026 04:02:05 +0000
Files and hashes: 1: qPwGNuaBhkdVSHlN36RpC__UzLY.crl (hash: UD6esGOvf+/HyrPG+JDrR09TSH6W3Lm9XovpuBOb5YI=)
2: 85C3AC9A39E511EF99FD7A11C4F9AE02.roa (hash: nz3PPCvZn62oE2uMjuHkN8vXygcZxrPBWu4zQKyueQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Validity
Not Before: Sep 5 04:02:05 2026 GMT
Not After : Sep 12 04:02:05 2026 GMT
Subject: CN=6a9b943e-1b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:28:39:51:16:31:95:ea:09:b1:46:90:0f:
ab:df:7a:4c:a8:69:1d:a1:42:e1:ff:2b:a6:f0:09:
48:79:2c:aa:7c:3c:60:fc:24:9f:4d:ef:02:29:64:
85:d2:2e:03:7c:d7:7b:ac:81:90:e7:94:29:33:a2:
9b:d8:eb:3b:07:83:9f:f2:8c:14:4c:89:a4:16:2e:
70:2b:b1:13:92:00:9b:1f:1b:92:a2:f6:96:2d:58:
87:e1:ec:fa:b8:67:65:39:52:a0:c3:58:36:ef:93:
ba:ea:2b:ca:36:ef:5b:3a:dd:a4:5c:7c:28:c4:e2:
7c:4a:7b:d6:85:5f:88:42:7c:5c:54:ad:76:b0:20:
fa:33:13:c4:9a:ad:2d:12:2b:28:84:c3:92:99:6b:
15:b8:fb:61:04:92:db:97:bf:17:ba:e8:53:17:fe:
63:5a:10:e3:db:5a:5f:6e:ff:56:3d:7b:f8:2c:62:
e4:32:75:50:17:6e:49:d7:9d:24:1b:21:12:74:57:
01:0d:98:45:58:e9:ba:06:06:da:2d:e8:7a:15:22:
29:44:86:0c:fd:df:f8:b2:9d:e5:6d:85:34:5e:3d:
7b:c0:4e:57:ca:35:36:40:f5:cd:c1:a5:f0:c6:19:
77:1a:73:56:56:63:32:04:a2:ce:e0:a1:eb:89:18:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:82:88:8D:0C:C8:33:7A:C9:F7:05:84:94:04:28:8E:1C:AA:97:7A
X509v3 Authority Key Identifier:
keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fe:c5:a9:f7:6f:7c:71:61:a6:1a:f9:a8:f4:0e:92:3c:dc:
21:2b:34:94:70:9e:5b:89:17:df:c7:3c:80:c7:eb:dc:71:75:
e2:07:13:ea:2f:9b:c1:bf:95:7a:f2:f4:5b:61:06:b0:b0:34:
40:ca:c2:33:5f:00:c1:aa:d1:cb:4e:cc:68:f4:f9:35:0e:2d:
c7:ee:1d:e8:56:e0:eb:c1:a5:b9:97:ad:fe:9e:aa:d0:00:36:
35:ce:b0:8b:05:8e:aa:7a:f5:ff:4a:ea:a3:83:16:e0:c5:56:
73:63:61:78:a2:23:28:b6:e1:25:55:33:41:39:0b:d0:18:36:
c5:28:3f:ee:da:e4:a5:00:a6:b7:b5:62:14:7b:95:4e:5f:ed:
62:5b:2a:ed:1a:57:3e:39:20:62:cc:d3:20:2f:a8:c9:81:51:
ce:34:ec:9f:01:7c:07:87:8b:79:5d:84:ce:6b:c8:c1:0f:86:
73:9f:77:5f:e9:71:63:cb:fa:83:0c:dd:ec:4d:7a:b9:be:38:
16:f7:b9:99:59:d1:29:05:57:e6:bb:48:19:35:91:a3:6a:03:
0d:7f:86:a5:a7:a4:fe:64:c6:f9:37:4f:9e:28:07:53:4d:06:
d8:58:a5:58:67:95:15:21:3c:36:20:1b:98:e7:eb:20:ff:ec:
ec:90:76:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwMDMxMTAvBgNVBAUTKEE4RkMwNjM2RTY4MTg2NDc1NTQ4Nzk0RERGQTQ2OTBC
RkZENENDQjYwHhcNMjYwOTA1MDQwMjA1WhcNMjYwOTEyMDQwMjA1WjAYMRYwFAYD
VQQDEw02YTliOTQzZS0xYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1BgoOVEWMZXqCbFGkA+r33pMqGkdoULh/yum8AlIeSyqfDxg/CSfTe8CKWSF
0i4DfNd7rIGQ55QpM6Kb2Os7B4Of8owUTImkFi5wK7ETkgCbHxuSovaWLViH4ez6
uGdlOVKgw1g275O66ivKNu9bOt2kXHwoxOJ8SnvWhV+IQnxcVK12sCD6MxPEmq0t
EisohMOSmWsVuPthBJLbl78XuuhTF/5jWhDj21pfbv9WPXv4LGLkMnVQF25J150k
GyESdFcBDZhFWOm6BgbaLeh6FSIpRIYM/d/4sp3lbYU0Xj17wE5XyjU2QPXNwaXw
xhl3GnNWVmMyBKLO4KHriRg9dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmCiI0M
yDN6yfcFhJQEKI4cqpd6MB8GA1UdIwQYMBaAFKj8BjbmgYZHVUh5Td+kaQv/1My2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAwMy8yNkE2QjA1ODMy
QkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhrZFZTSGxOMzZScENfX1V6
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FQd0dOdWFCaGtkVlNIbE4zNlJwQ19fVXpMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzAwMy8yNkE2QjA1ODMyQkIxMUVGQTgzRDYxMkZDNEY5QUUwMi9xUHdHTnVhQmhr
ZFZTSGxOMzZScENfX1V6TFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG/7FqfdvfHFhphr5qPQOkjzcISs0lHCeW4kX38c8gMfr3HF14gcT6i+bwb+V
evL0W2EGsLA0QMrCM18AwarRy07MaPT5NQ4tx+4d6Fbg68GluZet/p6q0AA2Nc6w
iwWOqnr1/0rqo4MW4MVWc2NheKIjKLbhJVUzQTkL0Bg2xSg/7trkpQCmt7ViFHuV
Tl/tYlsq7RpXPjkgYszTIC+oyYFRzjTsnwF8B4eLeV2EzmvIwQ+Gc593X+lxY8v6
gwzd7E16ub44Fve5mVnRKQVX5rtIGTWRo2oDDX+Gpaek/mTG+TdPnigHU00G2Fil
WGeVFSE8NiAbmOfrIP/s7JB2Sg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:41:15 2026 by rpki-client