
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json)
Hash identifier: g2kxUpg58snfXvolHyzDEQGgbuAhMx1FohzQhCTeLXk=
Subject key identifier: EA:18:92:21:DF:56:B1:28:B2:C4:15:05:F0:4A:1A:24:72:AD:3D:F4
Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
Manifest number: 0838
Signing time: Tue 06 Oct 2026 21:14:45 +0000
Manifest this update: Tue 06 Oct 2026 21:14:44 +0000
Manifest next update: Tue 13 Oct 2026 21:14:44 +0000
Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: S/OsMW/wkqhzgaRRNoaOFwK2g13y02rxDVbh1sa4ZMY=)
2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: j8BYrRTXBbaeTTqgpqoP0f1iBbPMGpxA0WeG0MfgZmQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B
Validity
Not Before: Oct 6 21:14:44 2026 GMT
Not After : Oct 13 21:14:44 2026 GMT
Subject: CN=6ac564c5-a2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:4d:2a:28:02:19:16:18:7f:0c:77:b5:2f:
87:79:c7:cc:65:2b:ad:84:21:98:57:eb:ab:d1:08:
b0:70:f6:9b:85:ad:7d:7b:27:b7:3e:30:f6:47:73:
58:34:e7:2f:d7:62:11:c4:10:3d:b7:ac:24:d5:e9:
3c:97:92:f3:8b:46:fd:31:3a:07:cc:0b:84:a3:e6:
c9:e1:50:7e:42:e8:3d:35:29:eb:6c:65:91:7d:63:
fd:aa:e6:97:dc:26:b5:90:55:ba:32:82:d7:e4:86:
0b:3a:ba:7d:be:1e:e9:a6:6d:02:02:dc:db:f8:03:
f5:a9:ef:b1:48:f3:aa:6b:72:4a:44:ca:b9:1c:92:
f1:d2:1e:51:33:d5:ca:82:e7:07:cf:fa:8e:5f:89:
38:a9:40:bf:1a:cd:29:9f:15:14:b5:dc:e9:36:ae:
36:7e:c1:a0:9f:70:b0:4c:a2:7c:5f:5f:8b:b2:b7:
c4:6c:84:71:7a:87:ec:10:72:24:1d:65:7b:94:37:
0a:70:39:52:4e:db:04:9d:0c:c7:ed:4b:23:ac:53:
49:49:08:45:92:6e:6b:7d:bf:3f:e8:22:bb:30:a6:
92:df:40:91:ea:20:18:64:8c:5f:dc:1c:7a:9e:ca:
a4:4d:bb:b5:c2:31:95:f0:33:fb:2b:6b:d6:f8:46:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:18:92:21:DF:56:B1:28:B2:C4:15:05:F0:4A:1A:24:72:AD:3D:F4
X509v3 Authority Key Identifier:
keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:ad:7d:fb:1a:ad:41:6e:6d:2e:76:7d:29:f7:6f:8a:10:62:
a2:ed:4e:dd:e4:db:23:0b:a5:fa:82:8f:50:64:00:e9:26:05:
6b:77:5b:6f:69:a4:62:db:24:3e:58:0c:fa:7b:88:c6:98:2d:
09:3a:96:b2:e4:aa:fb:18:83:92:c8:78:a1:41:06:b5:c0:32:
bb:82:e4:30:9c:6d:9e:24:4f:de:32:73:f3:77:9c:47:2b:61:
9f:5f:ef:c1:a5:e6:e8:ea:1d:0f:c0:dc:a8:9a:aa:11:95:76:
ce:b6:13:41:71:02:70:8f:f6:a1:f4:86:04:8a:60:ff:fa:31:
8f:e1:c7:4c:2f:41:75:63:df:6b:18:b8:eb:0a:07:24:c4:28:
75:20:e1:21:ca:2c:78:82:b8:5d:8d:20:eb:63:4f:52:93:dd:
0e:84:02:8a:c1:2d:55:f0:cf:e1:80:e3:1a:3e:33:89:ea:3d:
63:f2:e5:8c:e3:97:fd:aa:5c:e3:32:be:3a:f7:a5:9e:a2:32:
ce:79:00:57:71:8d:84:96:18:4a:25:7c:50:7c:41:b6:8d:b4:
c2:71:bd:6b:58:7d:6a:8a:2f:3a:85:ec:fc:a7:83:4b:65:dd:
e2:8a:b0:2d:80:ed:1d:60:fc:37:c8:09:5e:8b:0f:9a:2c:3c:
e2:0b:9e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:55:36 2026 by rpki-client