
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier: 4lKxSv5YkvDrx2pCIaT7KjGHMpOE1BPDbbaJtQWtxxk=
Subject key identifier: 85:07:82:DE:64:F2:5A:24:28:73:1E:55:56:8C:35:7B:33:9C:36:3B
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number: FE
Signing time: Tue 19 May 2026 06:06:41 +0000
Manifest this update: Tue 19 May 2026 06:06:40 +0000
Manifest next update: Tue 26 May 2026 06:06:40 +0000
Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: P0uKXClWl/9lmKNNArTsnbBElJblfv7mRHskl3VoVb0=)
2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: 0yX4Y6lkYKfE7kCaCRC2l6z7yMFuM+BBuRGLdbMCpNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 26 May 2026 06:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Validity
Not Before: May 19 06:06:40 2026 GMT
Not After : May 26 06:06:40 2026 GMT
Subject: CN=6a0bfdf1-744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:0d:8d:1f:88:59:8e:9e:1a:0e:5a:b0:c7:
b3:5d:b8:36:52:66:3e:6f:fc:73:a8:eb:d2:98:4b:
b8:46:d1:97:58:6c:f4:4f:7b:aa:e7:1a:78:ac:ad:
d2:89:60:15:11:d4:96:de:2f:26:71:0c:6a:d5:ec:
f6:cb:f9:d9:60:8a:7f:1d:b4:db:74:b6:ba:e2:f0:
24:b8:e4:9f:5c:46:28:12:9b:fb:1f:a1:5d:ac:7f:
52:d8:d6:e1:4c:f4:d2:3f:a9:ee:5a:cc:94:4c:88:
54:a6:0c:e1:a6:22:d2:07:b3:cf:9e:2e:71:60:0b:
87:0a:9e:e3:74:1a:a4:a3:b1:ee:3f:85:c0:92:78:
22:f0:da:26:72:bf:1e:55:f4:07:ce:e9:64:9f:e0:
12:a3:86:55:10:5e:a8:b6:04:00:fb:85:ce:6c:1e:
ff:5d:87:90:13:8f:69:e3:bb:2f:26:f9:f5:bb:cb:
89:69:8d:0a:33:71:00:64:b0:09:9c:a4:02:e4:f1:
14:b0:54:72:76:d9:e9:c6:69:9b:e6:de:a7:23:3c:
3b:56:11:fa:01:dc:15:82:de:1c:cf:27:61:9d:bb:
53:db:58:16:ba:7a:a5:24:1b:d7:5e:86:86:7a:fc:
fb:87:c7:c6:ec:5d:44:31:1e:bc:82:4f:5f:6f:1b:
53:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:82:DE:64:F2:5A:24:28:73:1E:55:56:8C:35:7B:33:9C:36:3B
X509v3 Authority Key Identifier:
keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b4:6a:4d:84:b8:79:26:1f:f4:0b:53:c6:00:6a:2d:00:f4:
45:1a:9f:5e:c3:33:d3:d1:2b:27:00:82:80:04:26:2b:34:1c:
39:2e:a4:f7:48:b9:49:41:06:8d:c8:dc:65:28:9c:3a:b2:ad:
30:de:b4:4a:58:fd:a5:5c:d4:9c:9b:37:22:0e:a1:08:a1:a6:
3d:4f:57:56:87:f6:25:30:6b:ec:04:40:6c:28:d4:a7:1a:63:
15:c7:03:bb:95:20:94:ec:6f:70:40:9e:32:6f:02:4d:c7:9e:
e1:ff:2d:31:e9:83:57:af:98:9c:31:e9:01:2d:6c:9b:e6:04:
b1:ab:3d:32:35:20:7f:62:f6:45:a0:d0:8b:70:c9:4d:ff:7f:
11:16:8f:29:9f:09:7e:19:83:35:3a:38:5a:53:09:78:b7:0e:
7a:ff:55:01:c5:d1:4a:fd:e2:82:ac:b2:28:59:3a:98:bf:7f:
8f:af:91:9c:81:ee:ef:a8:06:c0:d4:e9:21:c6:da:70:b0:d9:
03:b9:a7:53:e3:aa:36:f1:c8:33:c7:b7:3b:28:b7:7a:e3:f2:
c3:b0:43:10:7d:bd:42:97:c9:a0:be:0e:90:53:76:e9:d2:35:
d3:d7:b4:79:b7:83:2e:28:cf:71:a4:73:b5:dd:4d:c9:29:b4:
c7:6a:13:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBNDYxMTAvBgNVBAUTKEE4OEVFMjNGRjhENzA4MjhDRURCQzcwMUU3OEM4MDc0
N0ZGQzExQ0EwHhcNMjYwNTE5MDYwNjQwWhcNMjYwNTI2MDYwNjQwWjAYMRYwFAYD
VQQDEw02YTBiZmRmMS03NDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuIYNjR+IWY6eGg5asMezXbg2UmY+b/xzqOvSmEu4RtGXWGz0T3uq5xp4rK3S
iWAVEdSW3i8mcQxq1ez2y/nZYIp/HbTbdLa64vAkuOSfXEYoEpv7H6FdrH9S2Nbh
TPTSP6nuWsyUTIhUpgzhpiLSB7PPni5xYAuHCp7jdBqko7HuP4XAkngi8Nomcr8e
VfQHzulkn+ASo4ZVEF6otgQA+4XObB7/XYeQE49p47svJvn1u8uJaY0KM3EAZLAJ
nKQC5PEUsFRydtnpxmmb5t6nIzw7VhH6AdwVgt4czydhnbtT21gWunqlJBvXXoaG
evz7h8fG7F1EMR68gk9fbxtTeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUHgt5k
8lokKHMeVVaMNXsznDY7MB8GA1UdIwQYMBaAFKiO4j/41wgoztvHAeeMgHR//BHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEE0Ni9ENjRFNUE3RURD
ODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWENDak8yOGNCNTR5QWRIXzhF
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEE0Ni9ENjRFNUE3RURDODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWEND
ak8yOGNCNTR5QWRIXzhFY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmrRqTYS4eSYf9AtTxgBqLQD0RRqfXsMz09ErJwCCgAQmKzQcOS6k90i5SUEG
jcjcZSicOrKtMN60Slj9pVzUnJs3Ig6hCKGmPU9XVof2JTBr7ARAbCjUpxpjFccD
u5UglOxvcECeMm8CTcee4f8tMemDV6+YnDHpAS1sm+YEsas9MjUgf2L2RaDQi3DJ
Tf9/ERaPKZ8JfhmDNTo4WlMJeLcOev9VAcXRSv3igqyyKFk6mL9/j6+RnIHu76gG
wNTpIcbacLDZA7mnU+OqNvHIM8e3Oyi3euPyw7BDEH29QpfJoL4OkFN26dI109e0
ebeDLijPcaRztd1NySm0x2oTXA==
-----END CERTIFICATE-----
Generated at Tue May 19 10:22:12 2026 by rpki-client