
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier: P+nmtwA2dARWlbX9R0Ev1dJTPoaiYPHvs4yVHrrkLx8=
Subject key identifier: 7C:5A:3C:BD:90:19:E6:18:D8:E7:22:C4:C0:8F:C1:04:5E:DF:5B:0E
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0E5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number: 0D39
Signing time: Sat 24 Oct 2026 18:41:38 +0000
Manifest this update: Sat 24 Oct 2026 18:41:37 +0000
Manifest next update: Sat 31 Oct 2026 18:41:37 +0000
Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: /qdR/UICJj1l5jpuk/CQ/hpm6wlG5qu/Ey1ZRspfzPg=)
2: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
3: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
4: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
5: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
6: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
7: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
8: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
9: D79FB38AAB6511F1A0EA4F9E3B11F970.roa (hash: /w9cMLFs3AmXiKviME1yYbjMu1F1JmT7vGZdeuDc8m8=)
10: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
11: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
12: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
13: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
14: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
15: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
16: 6BB6356086F111F19E006003A7EE528E.roa (hash: 8E4lWe8eMXTQftSqErp6AT1u7W/ptR1bQS6g7D5lpVs=)
17: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
18: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
19: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
20: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
21: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
22: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
23: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
24: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
25: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
26: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 18:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3674 (0xe5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Oct 24 18:41:37 2026 GMT
Not After : Oct 31 18:41:37 2026 GMT
Subject: CN=6adcfbe2-cba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:07:d1:ed:f9:29:95:8c:bc:ee:ac:35:71:be:
f0:9c:6a:67:df:64:28:64:30:51:72:02:3d:ab:8a:
6e:8b:33:85:50:e1:55:49:61:41:e3:9d:9d:91:c9:
4f:c9:b3:9c:63:25:a8:c5:7f:1a:0a:e2:de:67:a6:
3b:da:b8:b6:49:7c:c9:80:ed:9e:00:f3:c4:23:00:
eb:92:08:61:7c:6c:49:17:c9:48:2b:ee:09:d7:42:
0a:a1:90:62:2b:c9:a2:79:ed:f7:13:d1:b4:46:34:
37:44:c6:7b:2c:29:a4:f0:ae:3f:0d:5c:c2:99:02:
53:37:db:21:f0:ae:04:2d:6b:18:a1:66:a5:20:af:
e0:9e:15:0b:8d:33:35:4f:32:f5:1b:26:4e:46:10:
52:73:02:80:49:ad:e9:90:a9:24:27:70:a4:e9:5f:
b2:17:fa:ff:c4:25:4d:7b:ff:ef:f1:93:fd:b0:da:
01:a0:74:fe:12:d3:26:fa:0a:08:89:f7:5f:b9:36:
f3:1a:69:60:69:ae:88:3c:7f:47:7a:90:e8:45:31:
39:fc:ed:b0:e9:96:03:63:e9:55:46:c6:62:62:0b:
41:bb:72:eb:ae:78:ec:f0:a7:ea:81:34:91:c2:ec:
b5:42:ff:ad:bd:c0:0e:7a:cc:54:d2:c3:66:ce:6a:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:3C:BD:90:19:E6:18:D8:E7:22:C4:C0:8F:C1:04:5E:DF:5B:0E
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:da:74:00:aa:0c:5d:17:12:4c:e7:34:f1:66:5d:03:8e:4f:
31:98:e3:af:75:d0:98:42:bf:89:07:c3:9b:a7:7c:e4:cb:f8:
6b:4f:dc:61:70:53:7a:50:d6:38:75:13:3c:4e:18:b3:50:32:
77:60:cc:e9:8f:f5:f1:94:13:1e:60:33:04:fd:4c:b8:5e:5b:
d7:79:b1:92:bf:21:df:dc:09:51:08:62:b7:33:f4:d7:b3:c2:
37:90:2c:c7:03:c7:84:ec:cc:b8:57:d7:03:86:58:f0:33:03:
87:17:a1:56:0c:7f:9e:b9:27:37:2f:98:73:da:06:f4:85:9c:
1d:fd:10:ce:8d:5f:44:f1:ef:69:4b:72:4b:4e:e7:12:ff:12:
05:2d:44:8d:88:c5:5b:35:96:0d:2a:a7:c0:28:92:67:52:a7:
00:7c:ab:b3:6e:29:57:cc:32:7e:90:61:45:00:df:0d:ed:7f:
01:63:7c:9c:14:31:73:59:b8:f4:cd:51:46:97:81:4c:dd:11:
c0:c4:5f:f2:17:e2:b1:48:cd:d9:ee:ed:76:29:c9:46:98:2d:
2f:21:1e:c9:6b:0a:6d:5c:ad:3c:67:61:46:2a:cf:9c:11:86:
ea:dc:bd:89:bd:13:14:90:ae:a0:3c:0d:f4:24:2f:48:84:9b:
dc:3c:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:06:26 2026 by rpki-client