
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
File: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft (raw, json)
Hash identifier: 2SSTeZ/fHl9j6RMGDnwnGFQsxHc9IErLCW6RzaNqpIk=
Subject key identifier: 4E:78:00:1F:31:E5:F2:AD:DA:38:4D:8D:25:82:DA:EC:17:40:C8:E6
Authority key identifier: AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
Certificate issuer: /CN=A9172CE3/serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Certificate serial: 0586
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
Manifest number: 057C
Signing time: Tue 08 Sep 2026 23:20:00 +0000
Manifest this update: Tue 08 Sep 2026 23:20:00 +0000
Manifest next update: Tue 15 Sep 2026 23:20:00 +0000
Files and hashes: 1: q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl (hash: yS1HTMlPqITu46YR0rOVfXIhYv4RnXkU1OEQsAoL3Zw=)
2: 887BE0D0405D11ECA642D813C4F9AE02.roa (hash: KHvp9huWR6D7V1yi6kkJocjAT/BK4ewK1tFBURi132k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 23:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1414 (0x586)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CE3, serialNumber=ABC6FBA4B784283879190DC717E34B4CD882DA08
Validity
Not Before: Sep 8 23:20:00 2026 GMT
Not After : Sep 15 23:20:00 2026 GMT
Subject: CN=6aa09820-0823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:13:a6:02:b8:01:bf:d3:6d:20:3f:95:21:
48:fe:0d:d6:2d:b8:26:fe:1d:fa:46:5b:9e:0b:6f:
33:74:9b:df:8d:da:52:8b:ba:2d:42:0a:df:1b:09:
da:e4:1f:de:20:b6:4b:61:1e:1d:1a:6f:99:ef:80:
5d:ce:00:2e:fe:33:10:14:5a:0a:f7:27:ff:a0:c5:
e7:f0:6a:cd:39:15:a7:8e:6b:69:7a:8c:ed:4e:6b:
c9:03:5a:ad:36:d1:e7:0b:05:f5:8d:4e:ec:88:fb:
38:f2:f7:da:09:eb:aa:b1:32:9d:50:b8:8a:db:77:
ae:75:ea:71:a1:e1:41:4d:50:90:af:81:4c:40:9e:
0e:c8:27:d2:34:36:21:8d:71:39:4c:60:32:92:4f:
04:7a:97:b9:b5:3f:1a:f9:e2:bb:db:5e:96:6a:fb:
8d:6d:43:8a:65:e7:0d:37:37:6b:7e:fb:8d:24:9b:
0d:07:35:2f:9e:2d:d1:7e:f4:44:91:b7:75:d7:48:
b6:d3:7e:ba:de:4f:58:14:38:94:1f:87:5f:f4:fc:
bf:6b:8e:f9:8e:53:21:9d:a4:4c:59:4b:f2:08:51:
25:52:32:2a:9d:89:9e:64:c2:bc:58:02:92:c1:a7:
3d:2e:3d:cc:f1:f3:c4:78:a1:c7:04:cc:92:d3:22:
bd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:00:1F:31:E5:F2:AD:DA:38:4D:8D:25:82:DA:EC:17:40:C8:E6
X509v3 Authority Key Identifier:
keyid:AB:C6:FB:A4:B7:84:28:38:79:19:0D:C7:17:E3:4B:4C:D8:82:DA:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CE3/5D7899F4405911ECA0AFAA4DC4F9AE02/q8b7pLeEKDh5GQ3HF-NLTNiC2gg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:32:0b:71:36:42:7e:b7:90:88:e5:6b:3e:e3:f2:ea:ac:
fc:4b:31:26:b4:d9:b2:6b:ce:86:f8:86:22:e2:ee:47:7d:46:
18:ce:a8:91:ee:f1:01:be:9d:74:03:04:f1:f1:3a:b8:fa:cd:
14:3a:dc:3c:90:79:64:85:a1:9b:6c:29:ec:4e:23:42:60:25:
e7:e4:d6:d9:6c:34:46:db:20:6e:b0:8e:cc:47:02:b1:e0:a9:
71:cd:91:a9:e2:ef:4e:cd:ac:d3:3c:fb:91:1d:1b:ab:dc:34:
c4:6d:d2:c9:4e:bf:7e:0b:4f:3f:db:26:5d:15:a0:57:13:b5:
1b:6b:72:21:29:6d:2b:cb:b1:c2:e0:e8:96:db:5c:e6:4e:e0:
6d:22:a6:0d:6f:af:6f:09:a7:a3:fb:08:89:5e:8b:59:d9:2e:
ef:23:aa:d9:ce:4a:d5:6f:b3:fa:14:4b:5c:8c:33:f2:32:35:
76:d4:28:bc:c6:ad:b3:d6:b6:10:35:ff:09:11:0b:76:b3:dd:
1a:88:54:09:d6:3b:c0:12:9c:15:7f:ce:18:a0:0c:cb:be:ea:
64:76:1b:5e:01:40:c1:40:54:63:5c:0f:07:91:35:11:c9:d4:
1a:fb:5c:48:cc:4e:d1:5a:57:ab:f8:ee:21:1a:4c:e4:b8:e9:
fe:b9:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 09:53:21 2026 by rpki-client