
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier: hot7mBZTElW1YyI6N6s9lpUMMld+okAh0uG1td9w9Qw=
Subject key identifier: 7A:5C:5C:4D:8E:8C:67:53:7B:65:EC:E3:33:21:44:CF:1A:33:E4:12
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial: 0A61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number: 0A57
Signing time: Sat 04 Apr 2026 19:28:30 +0000
Manifest this update: Sat 04 Apr 2026 19:28:30 +0000
Manifest next update: Sat 11 Apr 2026 19:28:30 +0000
Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: MPWatSIN/SjjzPcrVLIXfkH4ayMoxzTV6gHE2P20X5o=)
2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: FQzUC/UDtRjOVMq3qcWROmK5O0Zj21UozX3EEGahaO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Validity
Not Before: Apr 4 19:28:30 2026 GMT
Not After : Apr 11 19:28:30 2026 GMT
Subject: CN=69d1665e-9a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:16:e1:2b:4d:3e:ed:5a:8a:76:0e:20:99:
08:20:9e:d1:bf:8a:34:1a:7e:5f:e7:1e:ed:93:2d:
3d:16:48:73:72:e9:37:33:a6:99:95:ed:a6:ed:d4:
3c:f1:fb:78:99:31:1b:73:99:eb:6a:55:5f:75:74:
8e:a3:68:0b:67:55:9a:18:74:ad:b9:89:25:4d:36:
64:8b:58:f5:50:92:ca:25:53:1c:b4:d9:26:9a:74:
93:ad:73:97:f2:44:d7:9b:02:7e:da:8e:ba:e8:b4:
e2:d7:45:80:ab:23:a6:8d:39:04:b3:1d:1c:2d:3e:
4c:d9:a0:04:ad:56:79:e1:3a:99:90:86:80:b0:8d:
51:dd:84:0c:91:14:e3:dc:31:f7:69:7e:3c:7f:5a:
91:1a:8d:15:12:fe:8e:be:e3:43:72:41:e4:1f:8e:
97:f5:65:7c:02:3f:c6:3f:b0:96:cf:6e:25:dd:52:
93:31:e4:2a:7f:8c:96:0a:c8:99:6e:88:73:77:b2:
a5:5f:25:64:70:bd:0e:5e:98:51:48:dd:ae:72:64:
f6:34:e8:7f:78:67:db:88:a2:d5:75:3d:7d:9b:8c:
78:82:83:4f:7a:44:45:43:0e:5f:b6:a5:42:5a:2c:
c0:d4:31:89:06:68:63:08:d6:32:d9:46:a5:44:2f:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5C:5C:4D:8E:8C:67:53:7B:65:EC:E3:33:21:44:CF:1A:33:E4:12
X509v3 Authority Key Identifier:
keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:33:8b:e4:3f:85:57:d3:4b:67:09:5a:8d:9a:ad:ae:ef:fb:
41:a3:cd:81:83:25:0b:32:24:27:a5:1c:a9:e4:c5:34:b7:b8:
bd:71:4d:33:20:51:77:73:cf:56:cb:1d:a2:c6:96:8a:a8:71:
d4:6c:ed:28:86:6f:35:27:6c:c7:ff:ce:24:c2:d3:b6:26:9f:
c6:b7:c6:d8:d1:42:ee:f8:b5:a9:d9:ee:12:35:64:28:1a:28:
e0:4d:c5:60:ee:24:92:69:b3:aa:09:e8:ed:f1:3a:e0:37:9b:
1d:d2:7d:15:37:c4:e4:4b:67:4f:58:3d:fc:1d:31:f9:da:71:
e4:41:57:62:14:5d:a1:1c:24:5e:e5:22:30:44:95:20:4b:63:
c6:f3:ac:53:66:74:2f:e0:e7:bc:74:54:61:77:cf:d4:a8:11:
34:52:0a:fc:9d:5b:41:46:4b:0b:cf:69:12:b9:a3:a7:6d:d9:
ed:97:3a:8d:97:e5:e0:62:c1:73:61:d2:f5:e2:c0:1f:d9:2d:
7f:a9:40:8b:31:52:07:c4:a7:75:73:9e:fc:fa:bf:64:85:81:
82:22:81:1d:cc:32:c6:a9:df:f5:5b:5d:18:16:66:51:5a:3b:
00:34:9c:41:87:b3:07:1c:94:e6:45:a0:2b:98:ce:b6:17:53:
f0:df:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:03 2026 by rpki-client