
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json)
Hash identifier: sW4zb7N9TCbKAA/+8LsRgiceNocVllxW4OySrz49n8E=
Subject key identifier: 50:84:F9:1C:AA:F5:DE:AD:92:6A:7B:0C:D2:1E:B8:3B:78:BD:D9:3F
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial: 082A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
Manifest number: 081F
Signing time: Tue 18 Aug 2026 21:31:32 +0000
Manifest this update: Tue 18 Aug 2026 21:31:32 +0000
Manifest next update: Tue 25 Aug 2026 21:31:32 +0000
Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: rG3AwRTc5bcjYkQfVFXnvN4P8QbjFLur+4FZJOxfD2w=)
2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: j8BYrRTXBbaeTTqgpqoP0f1iBbPMGpxA0WeG0MfgZmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Validity
Not Before: Aug 18 21:31:32 2026 GMT
Not After : Aug 25 21:31:32 2026 GMT
Subject: CN=6a84cf34-d5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:da:f1:a5:b5:88:1a:d0:f2:0f:81:82:d5:
e6:7e:5a:ad:85:ed:ea:10:b6:b1:4e:99:ba:62:c6:
63:67:cc:00:75:58:b3:32:df:22:54:4e:1e:f9:3e:
a2:75:0e:2a:d0:5e:92:12:5d:1f:e9:42:82:8e:e9:
c6:02:7c:df:b6:2f:80:63:bc:13:36:23:68:c1:96:
aa:0f:9d:2a:1a:a1:72:92:5b:d2:02:9f:eb:9b:94:
34:4f:f3:84:d0:34:b6:25:8c:26:d9:4f:0d:83:c3:
cd:a8:b2:2a:cc:52:80:f3:1f:ab:b7:40:d1:10:a8:
02:ec:26:4c:1e:99:97:25:ec:72:bd:94:cd:69:db:
d7:14:f9:65:5e:ad:91:27:62:b6:0b:fe:98:da:86:
22:70:0c:26:8f:1f:9b:2a:f0:c8:06:0d:87:64:e5:
5e:42:b1:37:e6:a0:5f:24:33:96:5a:ff:5d:b3:6b:
c1:b3:1f:90:f7:22:2c:3e:79:18:f9:20:ff:6d:52:
b2:db:cd:9a:9f:05:11:67:00:fa:a9:2d:ef:27:a5:
bf:50:78:76:b5:f8:34:aa:c2:ce:c4:3b:2b:93:66:
6b:3a:63:d6:94:df:aa:f1:ef:9a:ed:76:19:f2:17:
f1:31:d5:0c:94:f2:d2:de:fe:13:a9:9e:55:1c:29:
2e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:84:F9:1C:AA:F5:DE:AD:92:6A:7B:0C:D2:1E:B8:3B:78:BD:D9:3F
X509v3 Authority Key Identifier:
keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:e3:44:ff:14:6d:1d:55:4f:46:88:8e:8f:a6:22:93:d4:
19:7e:12:24:b0:45:86:38:1f:e9:9a:26:fc:9b:49:11:25:e7:
af:ab:e3:c5:eb:2f:ff:cc:b9:78:72:6b:58:f6:2c:29:a5:d6:
39:0b:89:28:e8:04:8f:0e:5c:1d:8e:04:47:8b:77:ab:0b:69:
9c:5e:5b:4b:bc:27:72:cb:0a:0d:60:ce:20:78:d8:97:be:a6:
7c:24:21:c7:09:c6:1a:38:6c:03:bf:15:29:c7:8c:c4:0e:7c:
b5:dd:27:cc:a3:d5:e1:85:d1:27:2d:f0:f5:de:2f:8d:ba:df:
c5:58:40:d0:59:85:04:33:79:c9:1a:cb:e7:c7:5b:00:5d:6f:
f8:05:3a:50:9f:05:e3:84:d8:9f:29:d2:70:d5:45:ec:5b:ec:
4c:ce:5f:86:98:5b:dc:76:ae:bf:de:83:90:1e:be:e8:b7:ca:
25:6c:3e:1c:1b:fb:b9:14:6a:fd:21:23:f6:bf:cc:3a:a2:56:
46:a9:2a:7c:16:51:55:72:48:36:7d:5f:68:bc:81:b8:e1:2a:
02:a4:72:1b:7a:24:ba:20:42:46:19:2e:a5:ce:3d:a3:2d:a2:
e5:ab:b3:26:1f:73:6a:72:cf:ff:43:73:53:56:fb:64:c8:53:
4b:56:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:10 2026 by rpki-client