
$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier: o7IPouena3RQOwaMKhsVh0Wm9pAm4uD6AB+zimhuGuw=
Subject key identifier: 1E:9C:67:BA:AE:0A:26:97:69:D6:79:37:53:D0:5D:E0:E3:CF:4E:51
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial: 1812
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number: 1806
Signing time: Sun 26 Jul 2026 16:39:25 +0000
Manifest this update: Sun 26 Jul 2026 16:39:24 +0000
Manifest next update: Sun 02 Aug 2026 16:39:24 +0000
Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: EEZ91h1y3NEkAidVjJkl5kaSRxvimy1R1RTotnZxA9k=)
2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: R19qxLrIh1c+/g96rJpVUSyzG1wIPKCyqhlsnSxYpaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 16:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6162 (0x1812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Validity
Not Before: Jul 26 16:39:24 2026 GMT
Not After : Aug 2 16:39:24 2026 GMT
Subject: CN=6a66383d-369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:fc:78:26:9e:30:99:d1:88:54:cb:e4:e7:
71:08:b8:86:d1:b1:68:a4:a6:75:11:2f:a0:dc:03:
96:09:4d:ad:55:32:4f:ed:60:e2:af:df:3f:09:84:
f2:70:eb:8e:c8:47:c5:44:2b:9c:fa:85:ea:96:52:
1b:1b:a5:50:97:d2:23:88:8d:dc:97:a3:b8:b7:02:
34:78:49:ae:53:10:cf:81:c2:48:9f:57:da:cf:d3:
51:03:1a:53:d2:a8:40:8f:1c:0e:f2:aa:e0:7b:50:
4c:07:7a:50:a8:0d:49:0c:2a:e6:76:b4:77:4a:2f:
c4:5d:70:42:f7:5e:b8:2d:ce:49:68:dc:30:44:1b:
28:d4:28:93:76:59:40:f7:0f:98:44:12:da:b1:6c:
7f:df:71:68:1a:c0:69:e6:4d:3e:a1:6f:e7:92:7c:
45:2a:88:b6:86:64:cd:2f:84:98:15:79:5a:33:25:
ca:17:9f:9f:a2:17:a5:cb:ff:a6:52:60:c7:8f:df:
82:03:63:0b:9b:6a:29:a6:76:0e:93:f3:64:9a:13:
f6:4a:c4:e7:0d:a0:25:d9:7f:0b:ae:41:1e:fe:0c:
2d:03:dd:c7:bc:f6:82:07:0a:9d:79:65:2e:4b:4f:
6f:ea:9f:dc:73:96:45:3d:2c:a4:63:a7:d5:79:db:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:67:BA:AE:0A:26:97:69:D6:79:37:53:D0:5D:E0:E3:CF:4E:51
X509v3 Authority Key Identifier:
keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:82:c3:57:54:11:3a:de:3e:9e:c2:21:3f:f3:f0:e9:35:83:
39:7a:e1:9f:b1:e5:91:de:c4:99:f5:57:3d:e3:b7:ea:f1:7a:
b2:71:3e:78:d2:fe:6c:c6:ab:08:27:e3:ca:3a:0b:f8:c4:67:
a6:8a:7c:35:0a:d2:8b:e9:94:46:3b:ce:c5:47:e1:6f:e6:bd:
a3:e8:85:97:b7:2c:77:74:6e:a3:85:97:32:f0:e3:e9:4f:ef:
c8:04:d6:e5:f8:41:dd:7e:b4:1c:75:7c:67:42:f0:7d:f3:c4:
8c:7e:02:ce:1e:5f:3d:d5:a8:d9:b7:c9:cd:30:58:9e:b2:3d:
91:e3:28:4c:52:a1:27:52:77:07:76:fc:4c:c9:12:c2:43:00:
95:a9:61:85:13:9b:7d:38:9b:95:ee:cb:05:24:99:2e:05:da:
aa:e6:5c:ff:f9:da:b3:f7:d2:d9:76:d6:69:23:71:7e:39:09:
65:a6:37:43:7e:9e:89:80:c2:c1:17:62:50:29:5a:33:4b:5c:
95:4a:1e:1f:54:61:68:d8:a7:50:21:ae:62:35:11:a0:ac:ff:
8c:8d:97:06:f8:c4:47:b6:90:e9:e4:d3:da:50:1c:49:8a:0b:
d8:9c:69:89:1d:01:41:c9:4e:e9:2c:aa:e6:9c:0c:56:91:89:
05:94:d4:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1
QkUyNUIxQjQwHhcNMjYwNzI2MTYzOTI0WhcNMjYwODAyMTYzOTI0WjAYMRYwFAYD
VQQDEw02YTY2MzgzZC0zNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6T8eCaeMJnRiFTL5OdxCLiG0bFopKZ1ES+g3AOWCU2tVTJP7WDir98/CYTy
cOuOyEfFRCuc+oXqllIbG6VQl9IjiI3cl6O4twI0eEmuUxDPgcJIn1faz9NRAxpT
0qhAjxwO8qrge1BMB3pQqA1JDCrmdrR3Si/EXXBC9164Lc5JaNwwRBso1CiTdllA
9w+YRBLasWx/33FoGsBp5k0+oW/nknxFKoi2hmTNL4SYFXlaMyXKF5+fohely/+m
UmDHj9+CA2MLm2oppnYOk/NkmhP2SsTnDaAl2X8LrkEe/gwtA93HvPaCBwqdeWUu
S09v6p/cc5ZFPSykY6fVeduiCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6cZ7qu
CiaXadZ5N1PQXeDjz05RMB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw
QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl
MFhUZjhtUXdIYlJiNGxzYlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq4LDV1QROt4+nsIhP/Pw6TWDOXrhn7Hlkd7EmfVXPeO36vF6snE+eNL+bMar
CCfjyjoL+MRnpop8NQrSi+mURjvOxUfhb+a9o+iFl7csd3Ruo4WXMvDj6U/vyATW
5fhB3X60HHV8Z0LwffPEjH4Czh5fPdWo2bfJzTBYnrI9keMoTFKhJ1J3B3b8TMkS
wkMAlalhhRObfTible7LBSSZLgXaquZc//nas/fS2XbWaSNxfjkJZaY3Q36eiYDC
wRdiUClaM0tclUoeH1RhaNinUCGuYjURoKz/jI2XBvjER7aQ6eTT2lAcSYoL2Jxp
iR0BQclO6Syq5pwMVpGJBZTU7Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:33:50 2026 by rpki-client