
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier: ilU/zFnDfXx9fSgyKJDrrZ8Fpd7GJcTnrRZokFFZrG8=
Subject key identifier: 4A:F3:C5:DD:B6:FE:D4:37:4B:DF:CD:97:A9:C3:EE:04:34:AB:BD:06
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0E35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number: 0DE7
Signing time: Sun 04 Oct 2026 18:00:21 +0000
Manifest this update: Sun 04 Oct 2026 18:00:20 +0000
Manifest next update: Sun 11 Oct 2026 18:00:20 +0000
Files and hashes: 1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: JgtrI+lvT1JqEB4lcnDqM9h1RiZRpQ0tNW8Wob3cBNc=)
2: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WtRbho5g5BDH0VmjD381QM1AFpgUjX2PrH3Z2ld09Yw=)
3: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Oct 4 18:00:20 2026 GMT
Not After : Oct 11 18:00:20 2026 GMT
Subject: CN=6ac29435-c6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:80:b5:58:c3:a6:4d:8f:70:76:40:54:21:
8a:9b:d8:92:b7:47:bb:19:a2:ed:72:0f:15:8b:ce:
22:db:b4:73:3d:47:bb:8e:54:1e:af:98:19:e3:7e:
ef:a7:31:0a:96:65:9f:36:89:d4:c8:ac:86:cd:2f:
2a:ae:3e:60:06:2f:cf:c5:66:7d:4c:0f:fc:29:f0:
39:ff:1d:aa:59:61:68:8c:c1:d9:85:f6:82:f5:58:
ce:45:ec:70:d2:15:aa:b6:20:0c:45:59:ad:8e:ef:
e7:61:32:80:a6:7e:cd:ec:36:dd:00:9e:33:4f:70:
0a:ed:04:e5:d0:28:0c:41:fa:e7:c2:0d:83:8e:79:
ba:fd:8b:5b:d5:5d:11:94:da:d0:bc:47:b3:a6:59:
07:a9:b1:75:79:70:29:c8:32:2c:86:2f:35:f0:fd:
4d:13:f2:94:ee:da:64:71:7d:a4:da:1d:f0:48:b0:
8b:dd:4e:16:52:37:59:2f:2d:d9:82:39:5b:1d:5c:
78:7b:3e:12:2c:8e:4a:f8:e8:7e:1b:04:2f:a3:e5:
41:7a:75:a1:c9:c5:4f:a0:02:f8:1e:e4:66:d0:d1:
49:c6:8f:44:29:32:13:0c:0f:e4:d2:f6:ed:78:e5:
f4:21:85:d6:5a:40:ca:d3:0b:01:ee:a0:8f:9e:8f:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F3:C5:DD:B6:FE:D4:37:4B:DF:CD:97:A9:C3:EE:04:34:AB:BD:06
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:76:6b:6e:89:33:09:cd:fd:80:69:db:8f:b3:cf:6a:56:0e:
56:28:4f:92:85:ec:96:b0:41:9d:c5:e7:a4:af:9b:a4:99:18:
45:57:7f:5f:71:17:ed:20:60:e0:12:63:3a:1e:e9:6d:8b:56:
69:af:e1:02:54:b5:51:5b:9e:5e:05:0f:f8:45:ac:3b:77:bd:
cc:f5:36:69:2e:b4:5d:4b:8b:5b:99:2e:37:ff:30:21:0e:db:
e5:7a:96:bb:b5:45:ad:0d:17:7b:fe:56:e1:2e:e0:9d:95:2e:
5c:cf:f8:f7:c0:1b:4c:87:75:b7:2f:04:dc:94:5b:7c:6d:c3:
32:b7:3a:71:6f:c3:6d:ea:69:a2:de:f4:7f:b6:8e:6c:ff:7e:
65:32:8f:5b:16:0e:87:0b:36:50:60:28:69:e7:fe:15:6b:9e:
65:0d:bc:6e:1e:31:3f:fa:df:65:39:d9:a8:02:62:29:cf:0f:
42:b8:54:91:73:9e:01:db:61:35:19:2a:8f:64:e1:48:89:3b:
69:8a:82:14:61:6f:86:09:bd:4d:97:93:61:a8:07:60:78:9c:
0c:d9:d5:a5:95:4f:e0:97:94:f8:df:13:20:80:01:ff:88:db:
86:38:27:56:fd:e0:39:9b:02:85:a8:32:94:07:6f:4e:20:75:
95:fb:f7:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhGNkQxMTAvBgNVBAUTKEZEMDZCMTUwODU1N0Y2NUY2OENDQkEzQzIwM0VDQUFE
MDc1REQxOUIwHhcNMjYxMDA0MTgwMDIwWhcNMjYxMDExMTgwMDIwWjAYMRYwFAYD
VQQDEw02YWMyOTQzNS1jNmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25yAtVjDpk2PcHZAVCGKm9iSt0e7GaLtcg8Vi84i27RzPUe7jlQer5gZ437v
pzEKlmWfNonUyKyGzS8qrj5gBi/PxWZ9TA/8KfA5/x2qWWFojMHZhfaC9VjORexw
0hWqtiAMRVmtju/nYTKApn7N7DbdAJ4zT3AK7QTl0CgMQfrnwg2Djnm6/Ytb1V0R
lNrQvEezplkHqbF1eXApyDIshi818P1NE/KU7tpkcX2k2h3wSLCL3U4WUjdZLy3Z
gjlbHVx4ez4SLI5K+Oh+GwQvo+VBenWhycVPoAL4HuRm0NFJxo9EKTITDA/k0vbt
eOX0IYXWWkDK0wsB7qCPno8luwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErzxd22
/tQ3S9/Nl6nD7gQ0q70GMB8GA1UdIwQYMBaAFP0GsVCFV/ZfaMy6PCA+yq0HXdGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY2RC85QTVCMUE5RUY2
NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDlsOW96TG84SUQ3S3JRZGQw
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19RYXhVSVZYOWw5b3pMbzhJRDdLclFkZDBacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEY2RC85QTVCMUE5RUY2NkExMUU5QkY1MDY5N0FDNEY5QUUwMi9fUWF4VUlWWDls
OW96TG84SUQ3S3JRZGQwWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW3ZrbokzCc39gGnbj7PPalYOVihPkoXslrBBncXnpK+bpJkYRVd/X3EX7SBg
4BJjOh7pbYtWaa/hAlS1UVueXgUP+EWsO3e9zPU2aS60XUuLW5kuN/8wIQ7b5XqW
u7VFrQ0Xe/5W4S7gnZUuXM/498AbTId1ty8E3JRbfG3DMrc6cW/Dbeppot70f7aO
bP9+ZTKPWxYOhws2UGAoaef+FWueZQ28bh4xP/rfZTnZqAJiKc8PQrhUkXOeAdth
NRkqj2ThSIk7aYqCFGFvhgm9TZeTYagHYHicDNnVpZVP4JeU+N8TIIAB/4jbhjgn
Vv3gOZsChagylAdvTiB1lfv3rA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 16:03:17 2026 by rpki-client