
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
File: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json)
Hash identifier: gRI62D0afYkX7Nq9HigAs+20i0E6KDs/W6qhzBcefNE=
Subject key identifier: 3C:5E:54:D8:B0:D3:A9:83:1D:12:BB:3E:F3:5B:35:C4:BC:A6:6D:D3
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial: 21BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
Manifest number: 572A
Signing time: Sun 04 Oct 2026 14:53:20 +0000
Manifest this update: Sun 04 Oct 2026 14:53:19 +0000
Manifest next update: Sun 11 Oct 2026 14:53:19 +0000
Files and hashes: 1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: lWx9kaSVos4X2fwEfOYkIj1kJW4zvlKoVZTsSLVvwoI=)
2: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: eXbj2/2PGJubPsuJy/6g3AgLU0HNFQl847an+DeMHhU=)
3: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: N4+8fycTDr0KyyL1T8BnM1QnlOy4E1P+9kvY0kSTWus=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8638 (0x21be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Validity
Not Before: Oct 4 14:53:19 2026 GMT
Not After : Oct 11 14:53:19 2026 GMT
Subject: CN=6ac26860-5792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:aa:b6:c1:d1:c9:43:ea:c7:a3:da:97:08:
36:68:71:43:5f:d8:18:89:34:04:37:5a:89:1d:fc:
85:18:c8:18:e8:ed:d3:05:b5:d7:6d:13:62:29:fa:
ce:35:24:8d:97:4f:8b:07:ce:8d:87:e7:d3:10:14:
f7:0e:79:83:be:40:f1:ed:00:77:61:28:a0:31:c3:
a7:de:05:b9:fe:4a:8a:34:00:c1:9f:ea:90:0c:26:
63:b7:2b:9e:33:39:11:19:15:fa:51:08:38:55:1d:
46:50:5f:89:7c:22:27:a8:84:69:d0:e3:52:e3:40:
d1:95:00:c6:5d:80:26:03:77:be:8a:32:3d:ce:6e:
b0:7d:72:e3:ad:f6:ce:2b:32:8f:97:83:da:92:55:
ae:ca:8b:61:24:28:b1:6a:1a:80:9d:fe:21:df:f3:
45:fb:c2:d0:b7:1d:c8:00:94:00:d3:a1:ba:ed:79:
20:ed:59:c7:74:f7:9a:69:46:9e:c4:35:fb:e0:65:
3d:83:66:4d:33:77:b9:61:8d:ab:7f:f8:ea:1d:bb:
e2:38:a1:e2:05:05:52:d9:63:1b:48:d6:1e:18:35:
76:75:f7:5c:b8:b4:f0:46:04:14:29:b6:15:65:2b:
6e:55:4f:80:52:84:70:c5:a8:f0:99:7d:84:c0:42:
a5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5E:54:D8:B0:D3:A9:83:1D:12:BB:3E:F3:5B:35:C4:BC:A6:6D:D3
X509v3 Authority Key Identifier:
keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:a0:2a:12:11:7a:0e:97:94:02:20:52:40:4d:ba:07:14:
9c:24:44:9a:f8:a0:46:8e:5c:54:e3:fb:1f:43:5e:96:63:e1:
c6:6f:c8:a4:7e:e1:e6:b4:92:36:a8:2e:ab:a7:ae:f2:65:c3:
d8:63:9a:c6:ee:5b:8b:ae:95:9b:eb:fc:89:e4:a6:5f:fe:dc:
34:f6:a8:97:9a:a1:ca:45:79:02:e1:4e:56:3d:85:7d:df:48:
83:22:16:c9:f7:d6:a2:20:f4:c8:79:60:ad:9e:70:5f:0a:45:
09:df:97:d9:de:b9:6f:a1:8f:53:53:6e:dc:6d:55:85:52:c5:
b6:db:3d:1a:ea:a7:d5:1b:52:03:07:ee:27:80:12:d1:4b:7a:
13:49:4f:e2:f4:f1:38:a2:6c:c2:d7:12:0e:6d:bd:08:72:1b:
17:dd:3c:0f:6b:29:09:56:87:90:df:ad:93:2e:a8:e5:3a:ce:
f5:82:d9:07:6c:d9:11:83:74:74:7f:1d:28:3d:d3:68:6c:fa:
d0:1c:61:5f:e7:21:a0:37:7e:bb:58:a5:6a:b8:cd:f8:fe:78:
da:1f:5a:c8:32:aa:bd:63:bb:31:a5:1d:bb:77:dc:21:e8:17:
62:b5:63:af:d7:91:1e:0a:5d:49:49:94:af:92:be:8b:99:39:
e9:bc:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:37:33 2026 by rpki-client