
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier: kp16O242w/yg+l8YQjT37GxuXsK98g5DPXYNr4sjhMY=
Subject key identifier: D2:13:34:50:E1:F7:56:5A:28:E8:92:6C:D6:C0:62:0E:6B:1A:4B:60
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number: 023B
Signing time: Mon 27 Apr 2026 02:24:29 +0000
Manifest this update: Mon 27 Apr 2026 02:24:29 +0000
Manifest next update: Mon 04 May 2026 02:24:29 +0000
Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: T8y9sxPOyWij7885Qn9liSmA/d4ZukksZF5hrqENZ/c=)
2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: NkxHKbtoUp0+3tPsUIQtJd1qKCp6YkrV3mW/saca7sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 02:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Validity
Not Before: Apr 27 02:24:29 2026 GMT
Not After : May 4 02:24:29 2026 GMT
Subject: CN=69eec8dd-6a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:66:13:06:ec:8d:5d:a6:76:39:37:b0:1c:
04:07:f2:01:13:ea:fe:75:08:ed:f7:f7:c6:1b:f3:
0e:88:5d:0b:ee:2b:da:63:75:6d:40:5d:f1:46:01:
c4:c0:3b:26:36:3b:25:6c:78:45:61:8f:40:1b:69:
31:17:29:7e:b8:c1:6d:a2:88:05:39:d8:9b:90:ed:
b7:b3:48:6a:8e:99:a8:02:68:5d:3d:91:65:69:32:
8e:67:4f:d7:9c:d2:de:bd:6b:7f:e5:2a:c6:e3:c5:
f4:61:e8:3f:a0:70:f3:2e:8f:81:bc:ab:84:a4:5e:
62:53:54:f0:de:aa:5c:83:1f:28:29:31:b5:de:22:
0d:3a:72:05:61:ad:fa:18:c2:09:98:c5:c3:84:83:
37:76:b0:73:65:2a:cc:60:0b:be:32:87:c7:ec:e5:
c4:de:cb:0c:44:8b:65:e6:2e:11:8d:af:f0:66:4f:
ad:d6:05:09:6d:99:43:aa:22:83:87:a5:a7:ce:45:
6a:fa:cc:14:7c:ae:f8:16:42:1b:b3:cd:c3:d5:52:
f8:6c:85:8e:45:b3:30:06:d1:d1:97:13:9a:76:db:
18:35:cb:72:8d:07:02:05:81:dc:4c:10:b7:76:d6:
29:a8:1e:79:13:91:be:37:6e:f6:06:7a:e8:6b:0f:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:13:34:50:E1:F7:56:5A:28:E8:92:6C:D6:C0:62:0E:6B:1A:4B:60
X509v3 Authority Key Identifier:
keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:34:43:75:e6:a2:26:0a:20:c5:e1:13:5e:14:cf:65:af:18:
c0:99:f7:ad:ed:09:2f:c3:8c:f2:f3:22:55:22:75:67:d0:01:
29:50:f1:85:57:ef:99:9b:1f:a5:9f:b9:df:b4:d7:ac:d6:48:
f3:9b:42:3f:2d:e0:eb:e8:e5:d7:f9:b1:f6:19:5d:ff:95:b3:
60:f8:04:5f:a3:98:4a:9a:c0:59:52:c9:d2:30:64:9a:98:80:
85:b8:87:2b:72:c5:88:4d:35:28:06:e7:3f:6e:5f:fe:ea:f7:
b6:55:29:17:9d:14:a1:54:97:6f:3e:e9:9d:81:34:5b:b1:93:
4e:12:e6:25:77:c2:b5:c8:33:36:73:e8:bb:0a:31:0f:9e:35:
90:b5:fc:f4:20:7c:ff:ad:4a:f0:fd:11:6e:82:a2:3c:e1:b2:
28:61:fd:e0:0e:45:cc:58:8f:c9:cb:3e:22:62:4a:14:11:b9:
ad:8a:7b:d9:1d:cb:17:a9:4d:8b:0e:0f:cc:29:f6:c9:83:32:
8a:77:be:33:94:17:1c:53:0f:bc:24:44:59:e3:2d:db:1e:35:
8e:32:0b:45:14:2f:81:84:0a:9e:d9:3d:58:33:d2:ba:41:33:
05:19:57:86:79:92:04:ed:2f:ac:23:05:78:6e:ec:ad:e2:d3:
75:3a:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:28:34 2026 by rpki-client