
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: T2fAKKUg7ei2nrXdmsDIDarUjCIpsVj9QWtgkJGxziE=
Subject key identifier: 5F:1B:36:51:13:A7:24:C0:56:F3:EC:1E:D7:8B:E4:8C:7B:DD:06:9F
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 060A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 05F9
Signing time: Fri 02 Oct 2026 23:14:57 +0000
Manifest this update: Fri 02 Oct 2026 23:14:56 +0000
Manifest next update: Fri 09 Oct 2026 23:14:56 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: O7xiOPjDj/J6I/aa3AiVKYsmC3uWzBqatm48+QEI3+Y=)
2: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
4: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Oct 2 23:14:56 2026 GMT
Not After : Oct 9 23:14:56 2026 GMT
Subject: CN=6ac03af1-0158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:20:e5:ed:5b:1d:2e:1d:f2:c6:3f:38:2e:
64:e9:1a:f8:9e:e0:0a:15:96:ba:06:89:f4:fc:fd:
74:b3:12:3f:7a:bf:03:8e:ff:d3:32:8c:a6:d0:6a:
73:ee:5d:04:c7:25:85:ea:a8:b3:7f:36:14:a2:09:
a5:5f:3c:63:0e:de:d4:36:07:58:3e:54:4f:13:5f:
15:c0:f7:32:10:77:02:51:48:9d:05:a1:a6:fc:16:
b5:32:f7:58:af:0c:32:14:9a:b9:61:c5:8a:5f:0d:
42:b9:c6:34:08:3d:86:01:d9:33:37:17:78:65:b2:
fd:69:a8:6b:40:2d:76:a2:78:f9:41:11:48:0b:2e:
8c:1f:53:a6:88:31:09:be:52:7e:26:1b:b5:b6:97:
45:40:44:69:27:ec:e9:3a:d9:dd:49:da:be:a9:75:
66:94:16:98:9e:3d:ea:20:82:27:7b:28:8c:6a:a9:
dd:8b:3d:ad:ed:8d:b2:ef:7d:86:a3:c9:8b:00:9e:
d3:84:8a:68:77:4d:25:19:95:5a:92:68:77:3a:1b:
43:0b:7b:b3:77:68:43:89:c7:3e:d7:1f:44:70:74:
88:c0:51:f4:73:70:49:63:e0:69:3d:f9:c8:29:cc:
d3:96:67:b7:03:93:0a:4e:ca:87:16:63:f9:73:16:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1B:36:51:13:A7:24:C0:56:F3:EC:1E:D7:8B:E4:8C:7B:DD:06:9F
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:30:e2:af:a1:6e:24:be:32:16:9f:fc:dc:e7:f5:5d:54:0f:
9f:ae:12:2d:ee:1a:8d:f6:b4:5e:e8:2d:ee:22:09:f4:00:6b:
9c:f6:f7:61:90:e2:5a:f0:39:f7:49:f9:6d:df:6d:50:84:65:
5d:ad:a1:2d:0e:d6:b1:ce:04:01:97:9d:bf:6a:0e:92:6a:ad:
72:b5:c7:1c:8f:d9:1d:b4:d9:c2:c9:8e:ab:16:c2:34:33:57:
9f:21:e0:ef:db:8c:6a:5a:9a:e4:0b:d5:84:e9:e7:f7:5a:a6:
9c:3c:5c:5d:8a:63:9e:20:10:b8:bf:b3:ba:80:10:33:c6:b2:
ed:51:a8:15:0c:0d:ee:01:82:61:87:26:ed:c7:e1:0a:3b:ff:
bd:49:fb:ef:ed:c4:25:0d:3e:90:17:72:3b:b3:36:d3:31:54:
8c:e6:76:12:05:76:25:3f:06:59:8d:b7:46:63:b3:d1:53:57:
9e:03:14:25:74:a2:7f:ee:ac:72:d8:ef:de:ca:0b:8e:7a:7e:
55:d0:bd:5a:b4:49:26:fa:55:68:78:1e:74:04:c8:e5:a8:21:
38:57:98:17:b4:7b:5a:8c:5a:a7:d4:5c:6a:6a:22:c4:e5:35:
a3:7a:ee:2c:af:fc:20:1f:c6:bb:e4:63:2f:9c:84:a7:84:c7:
76:ca:01:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD
REVDRkRBRjIwHhcNMjYxMDAyMjMxNDU2WhcNMjYxMDA5MjMxNDU2WjAYMRYwFAYD
VQQDEw02YWMwM2FmMS0wMTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5sg5e1bHS4d8sY/OC5k6Rr4nuAKFZa6Bon0/P10sxI/er8Djv/TMoym0Gpz
7l0ExyWF6qizfzYUogmlXzxjDt7UNgdYPlRPE18VwPcyEHcCUUidBaGm/Ba1MvdY
rwwyFJq5YcWKXw1CucY0CD2GAdkzNxd4ZbL9aahrQC12onj5QRFICy6MH1OmiDEJ
vlJ+Jhu1tpdFQERpJ+zpOtndSdq+qXVmlBaYnj3qIIIneyiMaqndiz2t7Y2y732G
o8mLAJ7ThIpod00lGZVakmh3OhtDC3uzd2hDicc+1x9EcHSIwFH0c3BJY+BpPfnI
KczTlme3A5MKTsqHFmP5cxbhXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF8bNlET
pyTAVvPsHteL5Ix73QafMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy
M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay
dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkI4MC9CODY5ODA1RTEyM0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0
SnU2TXZxS2d2YVhON1AydkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtzDir6FuJL4yFp/83Of1XVQPn64SLe4ajfa0Xugt7iIJ9ABrnPb3YZDiWvA5
90n5bd9tUIRlXa2hLQ7Wsc4EAZedv2oOkmqtcrXHHI/ZHbTZwsmOqxbCNDNXnyHg
79uMalqa5AvVhOnn91qmnDxcXYpjniAQuL+zuoAQM8ay7VGoFQwN7gGCYYcm7cfh
Cjv/vUn77+3EJQ0+kBdyO7M20zFUjOZ2EgV2JT8GWY23RmOz0VNXngMUJXSif+6s
ctjv3soLjnp+VdC9WrRJJvpVaHgedATI5aghOFeYF7R7Woxap9RcamoixOU1o3ru
LK/8IB/Gu+RjL5yEp4THdsoByw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:03:26 2026 by rpki-client