
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier: KrkIc+jjhJLLn2GdBOXF7cSuR8el6mpFDryf9oevdwo=
Subject key identifier: 16:32:ED:91:FB:BA:C5:75:32:4B:7D:86:D6:61:7C:F0:1A:C6:18:DD
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1F2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number: 3390
Signing time: Tue 18 Aug 2026 15:42:51 +0000
Manifest this update: Tue 18 Aug 2026 15:42:51 +0000
Manifest next update: Tue 25 Aug 2026 15:42:51 +0000
Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: sZAQBC4M0i6bL81c9PjUoHjVwLbuzkthPUYRi88B1HY=)
2: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: LoSQxFip4nNOrJotlSF6RIr2kx5vjl1KHOV/16F58yQ=)
3: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: vVAx7mq/GHB0XUUsBixM7c7ZrfRCki36JL3tqTMGmyI=)
4: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: XKjx+2JVREc1vEzkeaWV20vVw40lW7PDQ/F2fJTa5K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 15:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7979 (0x1f2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Aug 18 15:42:51 2026 GMT
Not After : Aug 25 15:42:51 2026 GMT
Subject: CN=6a847d7b-1f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:48:99:72:83:48:7b:e7:c5:b6:45:e7:ec:
66:db:28:e9:88:12:d8:fd:4c:9f:13:ad:18:22:51:
df:ab:f9:88:cd:42:19:e5:84:e4:63:c8:12:08:1b:
72:50:61:c1:31:ea:af:ac:21:1b:d6:b2:11:cb:f5:
82:19:8b:4f:73:e2:1a:1d:b0:f3:86:6d:ae:3f:91:
06:dd:e4:3f:32:d2:ae:48:84:51:ea:ef:48:d5:3d:
e7:6c:9f:bc:87:e3:c4:49:4b:11:4b:e6:fc:d0:42:
3e:88:4a:3a:68:95:7c:64:45:4c:a3:2e:c1:af:84:
18:c4:40:27:7d:a4:af:ba:98:16:c7:b7:c4:84:7b:
e1:43:1c:ce:bd:51:10:10:7a:57:2e:90:aa:e8:60:
01:e5:37:eb:c1:ee:3b:ab:ce:6d:49:85:3f:46:2b:
72:58:82:4e:42:c9:04:a9:a4:37:13:39:ad:05:78:
99:42:15:2b:82:fd:44:63:15:75:2c:b3:4e:63:ed:
39:7f:de:2e:58:ff:e3:24:f5:6d:56:e1:2e:9b:d1:
5a:4a:41:39:9d:b0:64:21:b0:6c:a7:1e:36:f9:db:
80:6e:d1:fa:0e:dc:94:94:49:71:01:ec:9e:ef:0b:
07:2a:37:88:a8:88:b9:0a:10:e6:3c:bc:0e:d1:56:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:32:ED:91:FB:BA:C5:75:32:4B:7D:86:D6:61:7C:F0:1A:C6:18:DD
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:dd:40:3d:9e:77:1b:82:24:a2:f0:ec:5e:9f:2b:7a:0c:83:
66:81:33:e7:aa:13:39:ea:ba:08:59:1d:00:b6:17:fc:c3:32:
67:ee:b6:99:fa:44:7d:b7:51:38:5d:bf:38:68:8f:69:d9:9b:
c7:f2:e3:33:a4:49:9e:6e:36:87:13:40:38:f0:c2:6e:3d:c1:
85:d1:b8:32:19:8b:22:d6:36:d6:7d:92:fc:4b:7c:7d:fe:e2:
f8:56:cb:62:86:f4:92:ae:d8:61:98:bb:55:54:a8:d7:ff:03:
20:b8:eb:ba:3d:ca:a0:09:44:0d:ad:5f:d3:8c:29:04:3c:89:
cd:cf:da:d0:a1:3a:df:36:27:30:90:0b:c9:11:b8:82:3a:c1:
c1:37:c4:90:00:61:1f:40:0f:d4:a0:75:a9:3f:a4:20:31:7b:
85:c5:bc:03:44:c6:02:5f:a5:65:54:0f:63:ff:61:38:46:4e:
2c:62:16:d0:a9:1c:43:31:5e:18:cb:30:ce:3b:5a:e8:27:c7:
18:25:69:38:03:89:d8:ec:68:c1:58:7a:71:83:b4:15:4b:57:
a7:62:2a:4e:ed:42:db:a8:28:0a:06:51:0d:7c:5f:98:42:14:
b4:75:b3:7d:ac:99:45:12:28:72:aa:54:03:7c:65:ea:3e:81:
ed:3f:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:01:40 2026 by rpki-client