
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json)
Hash identifier: V2FfH5H5LZYvwtul6jjbhZIwSKpWgWZxBU5cQ5IwwUA=
Subject key identifier: E8:C8:38:82:40:78:FB:B7:2B:C4:A3:71:CC:BE:34:F8:44:96:54:9B
Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
Manifest number: 021D
Signing time: Wed 26 Aug 2026 16:59:59 +0000
Manifest this update: Wed 26 Aug 2026 16:59:58 +0000
Manifest next update: Wed 02 Sep 2026 16:59:58 +0000
Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: Uk6rNkC/m1bP32pVq7T4QAkrJx9extjsg131MYeVbko=)
2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: XSrmRnZlMx5Z3Gsv5j+R2nebqshQgxS35JJmLLu9/UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Validity
Not Before: Aug 26 16:59:58 2026 GMT
Not After : Sep 2 16:59:58 2026 GMT
Subject: CN=6a8f1b8f-1896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:fb:03:53:16:13:91:20:50:cd:08:f8:6a:
13:0d:35:39:d5:d5:12:8a:53:a7:63:84:fb:2d:53:
c7:c9:f8:8f:60:f7:44:24:6c:4a:d2:1d:6e:b1:e1:
f1:bb:12:dc:ca:fc:ab:87:cc:60:c7:ed:8c:a5:fb:
a3:da:c9:55:b6:cc:fc:a7:e7:5d:5c:73:7b:1d:e6:
e8:70:f3:67:b9:b3:be:3e:7f:82:1a:b3:df:57:35:
8a:d5:5e:bd:f2:43:a5:01:83:6f:7d:78:39:43:c8:
84:8f:44:1d:05:2b:db:27:cf:27:02:d4:0c:63:7d:
0d:91:ea:6e:fa:0b:5c:87:96:ca:9b:c7:97:8b:74:
61:f8:44:a2:5f:40:89:a8:cc:c9:03:08:8f:a3:f4:
41:f3:55:32:a4:7c:66:1e:59:49:f8:45:36:a1:69:
a8:77:96:8e:38:7b:11:a1:71:e3:1b:5d:b7:d6:0c:
df:9c:2a:d9:05:23:3b:a4:75:ad:7f:cf:dc:7b:30:
bd:d3:fc:fe:da:2c:23:ee:53:4d:61:4c:84:c5:bb:
a9:0b:13:de:76:ca:6d:4c:7a:00:1e:12:91:1d:8c:
24:0e:ed:5b:72:d2:92:da:7d:3a:5c:50:03:77:2c:
00:be:6d:7b:97:a5:6b:b0:ff:c4:1c:00:4e:81:2d:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:38:82:40:78:FB:B7:2B:C4:A3:71:CC:BE:34:F8:44:96:54:9B
X509v3 Authority Key Identifier:
keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:22:5f:39:35:b4:d0:bc:51:d5:61:5e:88:ed:ff:79:5e:0c:
03:66:50:74:53:ec:73:4f:07:90:d6:6e:bf:b3:6e:96:88:17:
db:18:cc:40:a4:60:38:84:21:cf:cf:dd:06:d0:c9:6a:6e:41:
5d:a4:e1:3d:4c:48:df:bf:17:8e:44:c0:f1:d6:1f:c5:5c:2f:
8b:eb:63:a8:7b:4a:e1:18:49:f6:fd:dc:b6:84:53:16:ff:5f:
51:48:91:db:a5:32:de:cc:cb:7a:c1:13:e1:1a:a8:c4:fd:6b:
19:72:09:8e:cb:1a:46:d0:c9:d3:95:3c:af:8e:9e:2d:05:64:
9f:0c:a8:ae:0b:02:09:f5:79:6b:79:10:62:05:5b:10:c3:07:
2b:7a:2c:3e:a9:3e:05:e9:03:e2:14:52:a5:68:6e:04:98:34:
7b:59:d3:54:1e:a6:60:8f:78:84:ea:3e:d3:3e:90:9f:02:ce:
cf:4e:63:1f:ab:cf:71:1a:89:c4:d8:d5:ce:49:cd:33:c0:72:
a5:50:bb:36:94:5a:ae:ad:17:09:c3:98:d6:53:fa:b1:c3:2d:
35:ed:b7:ab:e7:51:55:0f:cf:88:53:a3:02:8a:9a:0d:1a:e0:
31:b8:6d:df:4b:cf:d5:92:f2:23:74:bd:70:87:d5:5b:d2:7f:
3c:2c:a9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:35:21 2026 by rpki-client