
$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier: Zfyc7B+agqHiaH6TH92735wBBseV9gCQizMFDQ9m4nU=
Subject key identifier: 9E:82:54:21:94:76:D6:47:55:26:71:2B:F1:40:44:4A:2F:6A:CB:0A
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial: 1359
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number: 134D
Signing time: Sat 04 Apr 2026 16:53:26 +0000
Manifest this update: Sat 04 Apr 2026 16:53:25 +0000
Manifest next update: Sat 11 Apr 2026 16:53:25 +0000
Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: MggezEHkdjjHzQhVQzkPcsQabs3JWXLkFYfCpXnq188=)
2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: xtqs23pEGpn+9A+WHIc8NfV6fN9kv4Vyj6xQTqFc8lM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4953 (0x1359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Validity
Not Before: Apr 4 16:53:25 2026 GMT
Not After : Apr 11 16:53:25 2026 GMT
Subject: CN=69d14205-435d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:d3:3e:b4:46:a0:1c:61:a2:56:82:87:7f:
6b:ea:07:2d:d1:2f:e6:60:65:1c:bb:f7:6b:67:27:
b7:17:5a:f0:38:f0:3e:68:22:e8:24:3b:ff:b0:72:
05:e7:7c:1f:bb:a6:48:54:ad:03:ed:d0:cf:8a:a7:
7a:e3:e8:21:6c:95:50:f2:df:29:34:25:c7:0a:d8:
e3:47:ad:96:d3:4c:57:b3:81:32:c2:ca:ef:e7:54:
d9:11:4b:4f:2c:22:dc:f8:e6:89:89:06:47:67:d1:
25:33:57:bd:bc:15:7b:76:ec:34:61:8a:aa:cb:03:
71:9f:c5:b2:33:64:e9:ad:4c:11:97:cc:a1:a7:45:
88:b8:1c:cd:66:ea:de:b1:77:f5:4b:a8:57:34:a9:
97:59:b9:e2:cd:56:b9:27:21:39:35:0e:81:40:9e:
ac:79:a6:0f:32:bf:fc:74:46:90:0d:1b:76:aa:2c:
08:62:73:cb:72:02:39:bb:41:e3:26:91:76:e3:7c:
8e:64:12:5f:5a:b8:9d:2d:4a:53:17:b3:73:2e:37:
e7:55:db:01:bb:25:08:2c:aa:35:4a:c9:3e:c2:d9:
94:17:cc:44:17:46:5e:c1:ff:01:d5:5d:e1:9c:f2:
0c:1e:95:16:96:e2:a0:cd:2d:44:ff:67:d7:fc:21:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:54:21:94:76:D6:47:55:26:71:2B:F1:40:44:4A:2F:6A:CB:0A
X509v3 Authority Key Identifier:
keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:c4:0d:63:d2:f1:45:45:51:1a:4c:fa:43:fb:5a:94:23:bc:
33:2b:a0:66:a0:3e:53:d3:46:45:eb:66:fb:8d:d9:f4:96:80:
6d:a2:71:13:9a:6c:99:25:8d:0b:78:e2:e6:3c:97:5c:09:3b:
4f:fc:65:8c:b6:7a:fa:8c:d5:60:4e:43:4f:b7:d3:08:82:04:
6c:38:58:e1:5c:67:24:2e:84:40:27:e0:c2:b9:63:8c:b7:5e:
f0:d3:2c:d3:80:aa:42:1b:c4:1b:47:13:89:28:6e:c8:04:99:
6e:2e:38:fb:f0:a5:8f:7e:ad:e4:3a:66:1c:59:0a:1e:33:17:
b1:34:35:b0:74:44:f3:b7:58:69:64:88:e0:c2:f3:f3:c5:26:
5d:85:00:c7:b0:39:b9:7d:f7:08:b9:dc:2d:e7:32:88:d6:40:
12:d6:a5:10:56:d7:8d:b7:3f:7d:79:dd:41:67:40:c2:66:64:
53:d4:db:bb:0f:f3:45:5c:5a:fa:25:a5:4c:5d:db:e1:3c:66:
33:a4:a6:cf:d8:d1:da:b7:bd:7a:07:94:58:48:a9:20:df:2b:
e2:16:da:e6:d5:d4:d0:b8:b6:60:36:3b:a8:50:a5:1a:1e:d2:
29:db:82:f2:15:e8:03:73:16:f8:d8:8c:46:ab:bc:a9:5c:dd:
00:a6:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:07 2026 by rpki-client