
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier: f/3zFh+rdJro+0McqZhALNR8pWykzbqegtRHqRLvnyk=
Subject key identifier: 09:F6:B9:81:DE:ED:63:B7:0B:09:0C:78:20:E7:17:C8:96:04:49:FB
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1EDF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number: 3347
Signing time: Sat 04 Apr 2026 15:35:59 +0000
Manifest this update: Sat 04 Apr 2026 15:35:58 +0000
Manifest next update: Sat 11 Apr 2026 15:35:58 +0000
Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: Z/zjiYB2/crjsE176Zl7SLjlAYCpmVwfIO1zsG8pbYQ=)
2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: a2YIRJWcOj/2F2QJjwyVL+lBSin617P7TaoPIuqLmpo=)
3: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: XKjx+2JVREc1vEzkeaWV20vVw40lW7PDQ/F2fJTa5K4=)
4: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: QJ2Et41ySjmnzE4MdkYD7xXGqC9BJjzlZL6AqK+pncY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:35:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7903 (0x1edf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Apr 4 15:35:58 2026 GMT
Not After : Apr 11 15:35:58 2026 GMT
Subject: CN=69d12fdf-c32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:85:84:c1:e4:45:97:06:72:df:8c:94:8e:
b4:03:bf:bf:a1:c8:f8:4e:77:6c:65:50:70:83:2b:
14:c9:59:a7:ef:9c:03:e5:ba:3e:71:c3:00:99:7a:
06:26:1f:6e:6c:a7:ad:33:63:b8:b0:48:1f:0a:aa:
6a:1c:7e:ce:3f:46:63:a0:12:78:3f:36:3a:7f:b0:
2f:5b:20:af:ef:99:b0:55:e8:28:56:38:06:98:fa:
c6:6c:50:4a:02:8e:6a:ab:4a:26:9e:52:2b:c2:aa:
11:80:c0:41:12:46:f1:a3:4e:f0:bc:64:e6:d7:48:
fa:73:7d:d0:e8:26:ca:13:93:2e:69:ae:7e:f2:b4:
3c:b3:74:14:2a:a3:e2:72:da:c5:d6:39:97:e1:d2:
31:1c:c6:aa:73:2c:39:9c:ad:e7:87:05:66:ef:ed:
2e:71:86:07:c9:8b:80:a3:99:74:41:f6:02:0d:d9:
7e:a0:22:25:46:c9:e0:13:a3:33:01:79:d4:8d:13:
7b:0c:a3:01:88:be:cb:a9:b6:89:ab:6d:24:30:c7:
3b:26:dd:a2:4a:f6:e8:85:a3:5a:c5:7f:86:04:17:
b0:04:4d:7d:2f:53:06:12:f5:fc:43:7b:78:25:64:
f3:94:8d:c7:69:03:ae:5c:58:b7:92:ed:7a:b7:6c:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F6:B9:81:DE:ED:63:B7:0B:09:0C:78:20:E7:17:C8:96:04:49:FB
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:cc:b7:62:31:e4:09:e6:9d:93:0a:7c:d2:bb:f6:f4:3f:26:
b0:b8:02:61:ce:ca:49:25:ca:80:93:54:54:d4:4d:93:2d:17:
e9:11:c4:14:f9:a6:a5:4f:fe:aa:44:1a:72:da:98:39:0f:6e:
6c:95:3b:56:a5:0f:59:9e:b6:b8:46:99:96:26:0b:62:0d:44:
e3:e7:65:32:51:09:49:cc:0b:66:98:d0:27:70:e9:5d:4d:66:
ca:13:97:93:ce:c7:7d:fd:89:0b:dc:f0:d8:53:2f:a2:eb:3c:
96:a5:9b:f1:77:5a:09:a5:fa:23:d5:da:4e:8d:81:ea:27:dd:
f6:50:c0:dd:f4:24:cf:4a:22:e0:06:0b:a3:f0:e4:f5:68:ed:
71:96:49:cb:6e:2a:48:05:77:ef:87:70:1f:eb:be:90:d2:c3:
3d:75:3d:45:29:09:cc:90:38:2f:d5:5b:6b:17:4e:2d:5d:f5:
5c:24:05:f4:44:a1:27:bc:2d:29:b7:62:39:2d:3e:fd:19:4f:
82:75:29:2d:99:9c:f0:91:0a:f8:36:ac:7f:93:38:df:c4:12:
28:4e:43:e7:c7:32:dd:43:d8:31:cb:2c:b7:0d:31:28:d6:80:
93:7d:54:c6:80:1d:f7:7c:7f:43:e8:58:04:75:a3:f5:71:90:
41:74:c2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:11 2026 by rpki-client