
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File: qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier: 56Qv8u/OyOe0CUxymtld5YMImYhaFtgUuPcEovNdSpg=
Subject key identifier: B6:78:16:5E:65:BD:E6:7E:74:8D:3E:E4:F2:B6:90:3A:DC:9F:56:A4
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number: 014F
Signing time: Tue 27 Oct 2026 05:38:12 +0000
Manifest this update: Tue 27 Oct 2026 05:38:11 +0000
Manifest next update: Tue 03 Nov 2026 05:38:11 +0000
Files and hashes: 1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: w9OOqySWurp3sUSR63Iiq1corQ/BMq1CzYgV4LWvvUA=)
2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: 0yX4Y6lkYKfE7kCaCRC2l6z7yMFuM+BBuRGLdbMCpNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 05:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Validity
Not Before: Oct 27 05:38:11 2026 GMT
Not After : Nov 3 05:38:11 2026 GMT
Subject: CN=6ae038c4-1f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:4b:33:5d:09:a9:7d:35:f0:15:93:4e:d5:
c1:f6:89:4d:50:21:26:24:4b:f7:76:60:b4:c1:d2:
38:da:9a:93:f6:37:88:e0:1d:90:57:72:14:1b:66:
5f:b2:7b:bb:0a:e8:9d:69:dd:98:c9:4b:e2:37:69:
d9:ad:2a:25:ab:2e:53:78:81:2e:e2:f7:95:c8:65:
57:e8:a4:d2:a6:56:1a:cc:29:23:e0:f6:7d:77:fa:
12:b7:40:d8:93:6a:3e:5b:75:28:7c:b1:ce:7d:4c:
de:4a:b1:ba:a8:bd:00:89:d2:fe:73:01:60:fe:c1:
4c:c8:b8:0c:4e:64:d8:72:e0:23:ab:c9:c4:62:54:
9b:81:d3:cb:74:da:1f:46:bf:2c:01:bf:b6:41:87:
a5:f5:d5:b7:ae:0b:7a:3a:ed:8d:e7:d4:82:f0:c7:
2e:94:96:61:30:e9:0e:33:a5:00:b6:9a:9d:cc:ec:
12:b8:99:93:7e:23:f4:b9:39:4d:51:39:03:27:15:
ca:5a:63:e0:1b:aa:3c:f6:d3:92:c0:f9:db:be:07:
34:dc:01:5c:95:7e:1a:00:89:ff:6d:e2:74:6a:7c:
3a:01:70:80:34:c2:c9:26:fd:d1:0a:a5:2f:3b:ab:
e2:11:5c:a5:dc:b6:be:a7:c0:61:a3:ec:73:af:42:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:16:5E:65:BD:E6:7E:74:8D:3E:E4:F2:B6:90:3A:DC:9F:56:A4
X509v3 Authority Key Identifier:
keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8b:64:6d:f0:6a:5f:98:fc:ab:ae:41:37:02:e2:37:3a:c8:
e5:bd:a4:cc:37:02:bd:5c:c8:6c:33:7a:68:3f:08:88:56:91:
ab:25:d9:f2:0f:33:10:48:0c:98:76:d0:b8:fd:a2:ce:b6:da:
5f:e0:1c:85:a2:49:5c:9c:c3:b5:6c:e3:c3:e3:b0:8d:ad:e9:
9f:4e:c4:d9:77:d6:6b:94:78:6f:a1:cd:a6:73:a7:7e:d2:aa:
a2:ef:e0:2a:cf:24:65:5c:7d:95:39:4f:4a:b5:5e:de:ac:3f:
3f:a1:c7:a5:94:82:d3:37:c9:62:92:39:22:90:6f:69:46:7b:
4a:54:74:b6:3d:44:6d:b6:ac:78:85:96:93:08:2b:6e:90:5d:
14:60:c0:73:9c:d4:25:06:77:04:85:17:ec:a6:6e:70:1c:13:
2a:cc:a0:27:18:9a:10:c7:45:39:0d:87:45:b5:d0:83:50:d3:
b3:55:91:12:3c:43:7c:1b:87:1b:7c:d4:41:f3:7b:bc:27:a4:
37:6d:e7:95:37:b3:7b:f7:4e:9a:1b:a1:6d:c0:c7:7f:c9:01:
71:3f:fb:8d:81:cf:15:7a:75:fd:ae:a0:fd:75:8c:72:2e:5b:
6f:6a:8e:f6:af:05:c4:72:e5:23:91:d3:9b:8a:a6:46:2c:00:
ac:88:69:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBNDYxMTAvBgNVBAUTKEE4OEVFMjNGRjhENzA4MjhDRURCQzcwMUU3OEM4MDc0
N0ZGQzExQ0EwHhcNMjYxMDI3MDUzODExWhcNMjYxMTAzMDUzODExWjAYMRYwFAYD
VQQDEw02YWUwMzhjNC0xZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAughLM10JqX018BWTTtXB9olNUCEmJEv3dmC0wdI42pqT9jeI4B2QV3IUG2Zf
snu7Cuidad2YyUviN2nZrSolqy5TeIEu4veVyGVX6KTSplYazCkj4PZ9d/oSt0DY
k2o+W3UofLHOfUzeSrG6qL0AidL+cwFg/sFMyLgMTmTYcuAjq8nEYlSbgdPLdNof
Rr8sAb+2QYel9dW3rgt6Ou2N59SC8MculJZhMOkOM6UAtpqdzOwSuJmTfiP0uTlN
UTkDJxXKWmPgG6o89tOSwPnbvgc03AFclX4aAIn/beJ0anw6AXCANMLJJv3RCqUv
O6viEVyl3La+p8Bho+xzr0LL7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZ4Fl5l
veZ+dI0+5PK2kDrcn1akMB8GA1UdIwQYMBaAFKiO4j/41wgoztvHAeeMgHR//BHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEE0Ni9ENjRFNUE3RURD
ODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWENDak8yOGNCNTR5QWRIXzhF
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FJN2lQX2pYQ0NqTzI4Y0I1NHlBZEhfOEVjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEE0Ni9ENjRFNUE3RURDODQxMUVGQjkwODUwM0JDNEY5QUUwMi9xSTdpUF9qWEND
ak8yOGNCNTR5QWRIXzhFY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqYtkbfBqX5j8q65BNwLiNzrI5b2kzDcCvVzIbDN6aD8IiFaRqyXZ8g8zEEgM
mHbQuP2izrbaX+AchaJJXJzDtWzjw+Owja3pn07E2XfWa5R4b6HNpnOnftKqou/g
Ks8kZVx9lTlPSrVe3qw/P6HHpZSC0zfJYpI5IpBvaUZ7SlR0tj1EbbaseIWWkwgr
bpBdFGDAc5zUJQZ3BIUX7KZucBwTKsygJxiaEMdFOQ2HRbXQg1DTs1WREjxDfBuH
G3zUQfN7vCekN23nlTeze/dOmhuhbcDHf8kBcT/7jYHPFXp1/a6g/XWMci5bb2qO
9q8FxHLlI5HTm4qmRiwArIhpog==
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:29:24 2026 by rpki-client