
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json)
Hash identifier: pBVTBn1lzL/7EViePrBo1oK+F797+IrscVlFGEWrLk8=
Subject key identifier: BC:A5:7E:71:54:AD:C3:D9:E2:C9:DF:98:8D:F3:4B:5B:50:54:35:7F
Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
Manifest number: 01EC
Signing time: Fri 22 May 2026 17:03:40 +0000
Manifest this update: Fri 22 May 2026 17:03:39 +0000
Manifest next update: Fri 29 May 2026 17:03:39 +0000
Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: JKq/kqGPuZiqkb0DeIB0jlMCc+8c/O0Xc6SYA/4H7dE=)
2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: XSrmRnZlMx5Z3Gsv5j+R2nebqshQgxS35JJmLLu9/UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 May 2026 17:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Validity
Not Before: May 22 17:03:39 2026 GMT
Not After : May 29 17:03:39 2026 GMT
Subject: CN=6a108c6c-df2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:52:66:14:d8:ac:4b:f0:3d:2b:18:7b:14:
6c:ae:82:c9:e6:1e:5b:d9:ef:e9:42:fb:7f:57:23:
c7:53:5e:0c:46:4a:28:05:8f:1d:55:09:0f:99:5c:
01:fa:31:aa:10:ca:4e:04:0b:4a:47:e1:72:c7:80:
5a:6c:1b:e9:3f:87:8a:7d:d9:a2:1a:17:a0:4e:9f:
2f:6c:a2:a2:cb:8a:b9:22:18:79:81:06:b4:9f:cd:
e2:92:c1:d4:d3:82:f3:64:80:d0:2f:6c:ef:fb:cc:
19:a5:80:35:39:96:d5:94:08:f3:34:d7:77:11:8c:
fa:94:f9:b7:cd:a5:cb:c7:ce:26:1a:6a:a0:40:b2:
e4:e8:2b:c9:31:45:b6:ba:80:49:ab:68:c5:b1:c7:
c4:fb:c0:db:51:4e:39:45:bc:15:0e:c2:5c:4d:80:
55:3a:ed:74:04:54:71:c7:76:ab:1a:4b:fc:7c:eb:
de:1e:7c:a8:4d:bf:92:6c:d4:e8:11:83:62:d0:7b:
09:92:26:30:29:72:bd:d9:8d:45:73:f2:ba:e3:d0:
88:4a:7f:d8:d9:dc:06:dc:6f:87:ff:d5:d4:55:26:
0d:29:20:9b:10:cc:c1:95:21:7c:d8:24:cb:6a:7b:
c6:91:e0:37:e0:05:c0:ee:72:6f:b3:d0:86:63:18:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A5:7E:71:54:AD:C3:D9:E2:C9:DF:98:8D:F3:4B:5B:50:54:35:7F
X509v3 Authority Key Identifier:
keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:43:d1:4d:53:da:8a:5b:0e:db:dc:e1:e8:d9:5d:da:94:16:
bb:03:ea:55:3d:5f:c4:18:fc:fc:e9:de:88:36:7a:ec:a0:0e:
e9:13:9c:dd:4f:09:7b:9d:d0:76:8f:47:4d:d7:1c:63:5a:8f:
4b:8a:b8:c8:50:78:16:74:6c:6a:f1:98:50:f0:29:dc:62:5b:
b3:b4:da:72:79:af:6b:32:ea:b9:1f:cc:f9:89:8c:c5:88:cb:
92:f0:ec:cb:0e:06:83:15:5e:49:d8:c6:23:f0:7c:b1:0d:5e:
95:32:1f:2d:e7:2d:c0:93:d4:31:62:38:82:e4:32:49:3d:ca:
d3:3e:5c:d5:a0:ce:97:12:e4:ff:8f:61:50:66:9d:77:3c:4e:
c6:d7:f4:38:be:2b:8e:4a:e2:a4:e3:d8:06:c9:e0:5b:b1:85:
7d:df:8f:2c:03:31:cf:17:a9:b4:df:cc:a8:bb:bf:57:17:dd:
a3:d4:27:02:27:6e:c2:7a:9d:b6:38:f8:04:91:7b:d1:fc:4c:
31:12:ed:ad:24:57:08:a4:d8:7b:9d:38:9f:80:bf:b9:2c:ad:
44:9c:1c:b0:35:47:67:33:ca:a2:ab:2c:0b:5d:a8:cf:09:49:
4d:5f:08:98:04:ea:62:ac:0f:f5:fe:f7:12:5f:ec:fc:8a:cb:
56:78:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:11:49 2026 by rpki-client