
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
File: qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json)
Hash identifier: dujof2Sjmj72gq3ixtl9NIvtl1lwTIYuK9Osh11NvD0=
Subject key identifier: BF:F1:78:87:94:E4:93:F4:74:D1:85:5F:38:CE:99:F0:01:05:73:D9
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
Manifest number: 36
Signing time: Sun 23 Aug 2026 08:14:08 +0000
Manifest this update: Sun 23 Aug 2026 08:14:07 +0000
Manifest next update: Sun 30 Aug 2026 08:14:07 +0000
Files and hashes: 1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: pSOUcHAJaRX1Eu4qGoZRZNCrt6QtlpYNHRjHrzaeY/s=)
2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 30 Aug 2026 08:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Validity
Not Before: Aug 23 08:14:07 2026 GMT
Not After : Aug 30 08:14:07 2026 GMT
Subject: CN=6a8aabd0-048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:34:66:2f:60:3c:0e:41:22:62:9b:1b:c7:cb:
54:0f:2b:07:f8:32:a5:5b:e7:67:9b:0a:78:06:44:
40:66:17:a5:36:79:b9:72:be:34:49:5f:90:06:0b:
65:6f:68:5d:bd:b3:16:92:76:fd:cb:b8:ae:ae:3c:
98:4d:59:38:34:4a:51:a5:a3:b3:22:3c:88:bf:48:
35:71:bb:f6:1f:36:ee:bf:a2:cf:6f:0f:de:8f:6b:
87:a1:45:5b:6b:e7:34:73:40:29:ca:89:be:d9:8c:
ca:01:6a:e4:f1:9b:c7:e2:43:56:8e:58:84:c9:6c:
98:2d:19:22:98:63:49:52:6c:65:71:6a:15:3a:58:
55:ab:a0:82:b8:66:77:56:d4:40:1e:1b:0c:73:86:
47:db:08:fa:f0:50:70:e7:2f:5e:5e:4c:99:9a:ac:
6d:71:57:28:b9:7d:fb:c7:f1:2c:f8:b9:9c:83:fe:
59:46:fb:69:55:1c:12:7d:8e:59:6e:a7:bd:0e:ce:
89:09:e6:08:3d:a3:a0:54:15:2c:63:d7:32:31:1d:
81:5e:47:0c:ed:2a:03:5b:d1:d2:87:b6:ff:4f:6d:
0b:b5:9d:b0:ef:38:18:04:62:5b:96:60:29:b0:a2:
aa:74:97:f2:b9:3d:82:c5:a4:ac:a9:bb:42:02:23:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:78:87:94:E4:93:F4:74:D1:85:5F:38:CE:99:F0:01:05:73:D9
X509v3 Authority Key Identifier:
keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:04:ba:f2:26:72:ae:29:1d:59:8e:91:54:ee:f3:33:b9:c3:
be:fb:f1:5c:02:69:e9:6a:05:3b:9e:dd:52:a5:32:ef:81:25:
98:e0:2d:70:b6:a0:48:df:16:d4:f0:82:c3:6f:6e:21:21:05:
38:b0:12:56:03:60:e9:a4:b5:34:8b:4b:9f:9d:a7:6d:db:c3:
f6:e0:30:04:94:5c:0f:58:14:c9:73:fd:7c:96:f1:b2:ad:1e:
f7:94:15:da:40:c8:80:b3:88:ac:77:42:92:85:ac:9e:a3:eb:
d4:5e:bd:ee:0d:45:ba:9a:51:0d:fd:7b:e6:68:81:7a:ac:dc:
25:49:fb:17:74:1f:f6:64:24:0f:48:00:6a:37:4b:84:ee:f8:
83:c4:fa:74:35:9e:98:1b:65:88:e5:0a:39:f4:32:91:1b:cd:
0f:6d:90:98:14:a4:b0:01:15:f4:bd:5b:e9:80:4f:c8:7b:64:
9c:f9:26:85:7c:77:42:84:22:62:1a:96:bd:18:49:86:93:3a:
87:1a:59:fb:e3:ba:41:23:19:c3:6d:75:c6:20:54:10:90:08:
29:ee:8d:58:a7:d9:0d:04:d5:a2:e7:cc:83:71:e6:65:d2:e1:
ac:fb:c5:32:a2:37:da:15:76:36:4a:99:eb:69:3b:df:68:4a:
23:2d:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 10:43:55 2026 by rpki-client