
$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
File: QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json)
Hash identifier: ixEYiXOLF45AriE+XFKvfXyOhekcd0N+aIlz5wcKJKc=
Subject key identifier: 2B:C8:72:30:81:48:47:CC:90:C7:A6:36:03:4D:67:EC:DD:36:3F:91
Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
Certificate issuer: /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
Manifest number: 02E8
Signing time: Thu 21 May 2026 01:23:48 +0000
Manifest this update: Thu 21 May 2026 01:23:47 +0000
Manifest next update: Thu 28 May 2026 01:23:47 +0000
Files and hashes: 1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: I5kpjJHARSrwYOKDo3QUao25ul0wcwXlKKGM793g/CI=)
2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: /KIj4VbCDG5XB/rAb/Z+SKRxFKv9fYPAbyIf2+zzEmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Validity
Not Before: May 21 01:23:47 2026 GMT
Not After : May 28 01:23:47 2026 GMT
Subject: CN=6a0e5ea4-9ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:96:59:24:7b:33:d8:e8:6b:81:16:52:cd:
02:09:dd:ee:8d:6e:fa:4c:0c:fd:ba:b3:d6:58:eb:
31:cf:4a:94:11:76:ab:f2:68:01:10:3b:e7:dc:4e:
49:b3:b2:91:30:28:e1:77:fb:65:68:56:b1:1e:72:
48:09:5f:8d:c3:3f:4e:5b:8b:ae:50:a1:fb:db:14:
2a:1a:9c:d4:4d:f8:81:58:8e:55:97:95:c5:2d:76:
92:94:a4:d4:79:70:4d:71:30:65:1a:a3:51:2f:8f:
ba:22:fe:8c:c3:ee:5e:e9:10:20:f6:8d:5c:d8:ae:
c1:a0:2f:82:8b:b2:47:8a:94:76:f4:f9:af:5a:3b:
4e:9d:50:d9:cf:53:fc:62:f3:3d:3a:78:89:b9:8c:
53:2d:f6:01:cd:33:70:05:59:23:4a:5e:60:af:41:
a8:56:6b:5e:d7:62:fc:c1:9b:2d:a9:69:8c:75:f5:
d5:75:02:71:66:91:1a:65:02:f2:13:f3:24:07:b0:
ca:31:1d:c4:49:d3:6f:4b:68:3b:94:b3:89:b4:96:
0f:bb:fd:be:a2:92:5a:57:6b:e1:c7:46:61:23:da:
45:3a:dd:ef:40:f3:9a:42:b4:e7:43:38:1f:a1:43:
9a:7e:4b:dd:f1:3a:1e:ac:9f:66:cc:4a:d1:b6:a3:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:72:30:81:48:47:CC:90:C7:A6:36:03:4D:67:EC:DD:36:3F:91
X509v3 Authority Key Identifier:
keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:06:ee:24:ce:21:15:de:3d:fb:a5:9f:dd:38:95:f9:cf:b4:
ab:cc:70:87:59:3c:f4:df:47:23:01:bc:7a:bd:ab:e5:6e:e5:
cd:83:36:9c:5d:55:b7:f5:db:6a:83:70:56:e7:95:c7:37:48:
84:aa:81:b6:38:08:1a:9b:58:28:e8:d9:62:ff:0e:3d:24:96:
f1:74:c5:5d:da:7b:ed:b0:64:63:f7:04:4a:28:28:03:02:5c:
86:ff:78:24:4a:14:5e:8c:34:96:5f:50:f9:27:b9:f3:67:41:
6f:8e:37:9d:1e:19:dd:2c:98:9d:ae:b9:34:3a:e7:c0:00:33:
1b:15:ca:f0:09:3a:60:5a:23:5a:93:c3:c0:f0:70:84:8f:e2:
5f:b6:1b:9c:97:67:eb:66:1c:d9:fa:51:97:2b:98:3b:e5:e6:
8d:da:2e:87:c1:15:a0:80:64:4b:9c:df:49:ef:63:20:8b:ed:
02:c8:39:23:0e:9a:51:4c:9e:e0:6a:4e:46:f7:61:25:ec:a0:
95:1c:bd:21:9b:68:a8:d9:50:af:34:38:c2:33:bc:d3:48:05:
bd:0f:7e:51:a8:46:dc:17:da:61:81:fc:d0:80:4f:c8:c4:60:
db:81:25:64:cc:9a:17:b3:35:e1:5c:76:f0:dd:b2:c5:f8:f4:
1e:e7:3a:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA4N0QxMTAvBgNVBAUTKDQyQTg0RDhDMDg4OUFEQzU1ODYwNjYzOTkzQkNDQTgz
NjEyNzFCRkUwHhcNMjYwNTIxMDEyMzQ3WhcNMjYwNTI4MDEyMzQ3WjAYMRYwFAYD
VQQDEw02YTBlNWVhNC05ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mqWWSR7M9joa4EWUs0CCd3ujW76TAz9urPWWOsxz0qUEXar8mgBEDvn3E5J
s7KRMCjhd/tlaFaxHnJICV+Nwz9OW4uuUKH72xQqGpzUTfiBWI5Vl5XFLXaSlKTU
eXBNcTBlGqNRL4+6Iv6Mw+5e6RAg9o1c2K7BoC+Ci7JHipR29PmvWjtOnVDZz1P8
YvM9OniJuYxTLfYBzTNwBVkjSl5gr0GoVmte12L8wZstqWmMdfXVdQJxZpEaZQLy
E/MkB7DKMR3ESdNvS2g7lLOJtJYPu/2+opJaV2vhx0ZhI9pFOt3vQPOaQrTnQzgf
oUOafkvd8ToerJ9mzErRtqP9nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvIcjCB
SEfMkMemNgNNZ+zdNj+RMB8GA1UdIwQYMBaAFEKoTYwIia3FWGBmOZO8yoNhJxv+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDg3RC80QzE1ODU4QzI4
RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJjVllZR1k1azd6S2cyRW5H
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FxaE5qQWlKcmNWWVlHWTVrN3pLZzJFbkdfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDg3RC80QzE1ODU4QzI4RUQxMUVEOEI1OTdCNDBDNEY5QUUwMi9RcWhOakFpSnJj
VllZR1k1azd6S2cyRW5HXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAegbuJM4hFd49+6Wf3TiV+c+0q8xwh1k89N9HIwG8er2r5W7lzYM2nF1Vt/Xb
aoNwVueVxzdIhKqBtjgIGptYKOjZYv8OPSSW8XTFXdp77bBkY/cESigoAwJchv94
JEoUXow0ll9Q+Se582dBb443nR4Z3SyYna65NDrnwAAzGxXK8Ak6YFojWpPDwPBw
hI/iX7YbnJdn62Yc2fpRlyuYO+Xmjdouh8EVoIBkS5zfSe9jIIvtAsg5Iw6aUUye
4GpORvdhJeyglRy9IZtoqNlQrzQ4wjO800gFvQ9+UahG3BfaYYH80IBPyMRg24El
ZMyaF7M14Vx28N2yxfj0Huc6wg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:48 2026 by rpki-client