
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier: 1QtYCTglKcGeaL1SQIS4XhzXQAsnF/TPgpdFRDDV10s=
Subject key identifier: 38:C1:5D:31:9F:60:D0:C9:98:5D:D6:E0:98:C6:F9:E5:BA:18:F9:8A
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0E3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number: 0D1F
Signing time: Fri 04 Sep 2026 18:40:39 +0000
Manifest this update: Fri 04 Sep 2026 18:40:39 +0000
Manifest next update: Fri 11 Sep 2026 18:40:39 +0000
Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: zXY5lgd3EHtab8bgtfwJYqhiFvZED3Ou2p5dX5u/5IA=)
2: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
3: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
4: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
5: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
6: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
7: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
8: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
9: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
10: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
11: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
12: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
13: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
14: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
15: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
16: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
17: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
18: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
19: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
20: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
21: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
22: 6BB6356086F111F19E006003A7EE528E.roa (hash: 8E4lWe8eMXTQftSqErp6AT1u7W/ptR1bQS6g7D5lpVs=)
23: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
24: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
25: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3647 (0xe3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Sep 4 18:40:39 2026 GMT
Not After : Sep 11 18:40:39 2026 GMT
Subject: CN=6a9b10a7-f168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:79:13:ac:a8:a6:56:b2:67:22:eb:28:62:
aa:e6:c1:90:d1:88:c0:94:f5:cf:78:5c:e5:c3:38:
5c:85:df:cb:44:f3:ab:8c:b6:c7:de:f4:ba:85:f3:
63:23:c9:7f:6a:88:83:75:b2:ad:16:ff:a3:cf:d7:
66:64:26:a1:eb:c8:6c:64:b8:9c:f7:3a:e8:f7:ae:
e1:ab:ff:12:de:97:96:8b:62:7d:a0:cc:2a:23:36:
3c:8e:62:95:04:58:00:2e:23:82:0d:30:f8:34:3c:
c8:54:d6:7d:ae:10:c7:90:61:d9:7a:1a:57:16:64:
d5:b4:c1:c3:4f:f6:e7:b4:80:5e:40:42:05:fa:96:
d7:8b:e0:6f:99:12:1f:41:ab:6a:f7:4f:98:3c:d0:
1a:49:c7:9e:02:2c:8b:16:0d:ec:86:f8:19:8c:49:
9d:77:dd:ac:84:71:03:4c:a3:e3:a1:e5:36:cd:d2:
e7:5b:02:30:aa:e0:40:e8:a9:46:5f:eb:4a:a1:0c:
21:8c:7d:e2:fa:c4:14:47:a9:a1:67:da:70:ba:97:
5f:62:26:50:64:f3:04:c3:a2:7a:c9:12:65:d7:6b:
07:5f:86:8e:c6:9f:54:16:7e:fa:85:25:89:e6:86:
ae:49:c1:42:6d:c7:2c:f8:d6:a8:75:44:53:b0:a1:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:5D:31:9F:60:D0:C9:98:5D:D6:E0:98:C6:F9:E5:BA:18:F9:8A
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4b:0f:21:0a:32:75:a7:f4:ac:ca:e4:42:04:3b:e7:44:82:
77:77:77:44:3b:b0:10:00:4b:a9:24:bc:9b:f3:51:fd:0d:fb:
ec:7a:5f:59:b2:3a:93:82:b4:da:43:b2:70:b8:d4:0c:c6:e9:
76:b1:2c:6e:87:4d:51:a2:d4:83:eb:8d:5f:8a:09:f8:84:16:
f3:e4:27:e9:72:24:f5:60:9a:f2:4a:db:e0:a2:36:3a:66:cd:
e5:3f:1c:fe:3e:e4:2c:3a:7a:f5:88:7e:d6:e8:93:51:fc:b8:
22:8f:cd:f8:72:e9:4c:74:85:82:bf:f4:65:ce:45:2b:09:76:
55:d6:5f:1b:8b:f4:18:02:7e:5b:1e:a0:b7:f3:21:d7:cf:be:
7d:85:c2:a3:17:45:79:fc:77:74:72:d4:98:49:e7:d3:5a:10:
89:63:48:9e:5a:c5:99:d0:f6:5b:60:f4:16:d1:74:6e:d7:ba:
24:82:c7:2b:84:a2:0a:16:44:ee:c3:cc:6a:ea:e6:3e:1e:30:
45:81:6d:7b:76:9c:5b:11:08:a6:6b:dd:72:b3:95:dd:7d:6f:
43:75:9b:dd:32:69:75:77:a7:fe:c0:b1:df:88:ae:9c:7a:07:
ce:0b:e6:5c:21:bf:e4:bf:81:5a:d2:c6:85:b8:ca:7e:12:00:
27:b3:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:32:24 2026 by rpki-client