
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier: +ViwBx7USqqqOFoR+oVAZ+8iGMPO8769SyaLYLgWohc=
Subject key identifier: BE:4E:79:72:F4:37:07:7B:2A:DB:35:48:F2:E8:AE:B6:A0:4C:44:87
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial: 04F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number: 04E8
Signing time: Sat 03 Oct 2026 00:01:08 +0000
Manifest this update: Sat 03 Oct 2026 00:01:08 +0000
Manifest next update: Sat 10 Oct 2026 00:01:08 +0000
Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: pkPmVp30eKC0JnyrIyi4F/3i/7PRtwVvjpzi2uD0lfI=)
2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: UDGIexCjWZjf9oWBoZsn81ywHvMY4QFQvNjug6FA+Yo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Validity
Not Before: Oct 3 00:01:08 2026 GMT
Not After : Oct 10 00:01:08 2026 GMT
Subject: CN=6ac045c4-95fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:f5:48:09:5f:b8:f1:ee:cd:5e:dd:54:19:
e3:bd:4e:53:bd:eb:2c:33:c0:03:7c:5d:15:99:ae:
4b:a7:a8:db:20:b4:37:c5:78:c4:ae:02:74:90:29:
0a:a4:75:a1:dc:83:32:8c:1a:df:ed:b4:8b:43:1c:
42:fc:f0:d3:d5:de:16:7c:79:76:35:35:ed:1a:7b:
6a:83:33:52:c2:eb:8c:54:1e:09:fc:64:ee:b3:8a:
1c:e1:f2:74:f0:d7:ef:0e:65:d7:22:94:a5:93:61:
9e:3a:62:20:bf:28:be:03:b2:dc:d5:d6:32:3c:2b:
78:6c:34:3f:58:22:28:81:65:db:60:32:dd:80:b6:
26:ab:bf:e1:e0:10:4e:32:79:7b:4c:43:8d:8c:fd:
5e:28:d1:ef:5a:cf:b2:03:bb:5b:a8:5f:ec:a9:37:
f3:8a:6f:2b:11:dc:0d:7e:e1:bb:df:b4:81:65:c5:
5e:74:9a:95:46:77:30:6c:29:e4:00:40:be:9e:a1:
d1:0c:f8:46:76:b0:49:01:a3:67:3f:43:48:6c:6b:
d1:12:70:9f:2e:1c:a1:76:87:78:bf:6a:af:2a:2b:
de:c4:1a:d5:76:7e:80:d6:9f:d3:33:04:a2:fe:cc:
db:0b:ef:f3:71:0f:ac:53:c2:20:39:f4:40:07:e2:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4E:79:72:F4:37:07:7B:2A:DB:35:48:F2:E8:AE:B6:A0:4C:44:87
X509v3 Authority Key Identifier:
keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:af:70:36:56:03:29:ec:7d:06:34:c1:94:37:20:00:42:10:
ab:55:18:4c:f3:1e:41:2e:a4:65:d6:26:70:4e:69:0c:a3:09:
d6:28:0a:16:bf:7a:86:3d:54:bd:a3:61:4f:38:15:73:f0:6a:
5b:7f:1f:e6:05:a9:7e:9c:7d:ab:8f:a5:9f:93:f0:9a:9a:84:
16:28:7b:65:63:de:77:42:22:34:7d:02:5f:e6:ca:1c:c1:2c:
87:e8:a4:b0:2c:99:74:0d:e3:51:e2:d8:bd:47:d3:6a:dc:d5:
23:88:15:ca:9f:22:83:18:0d:2c:5b:61:fa:57:2d:11:34:99:
cb:f2:7a:e2:96:f6:b6:51:68:2c:d9:0f:98:85:2d:c1:d4:e8:
fb:7e:c4:b7:67:e0:c3:0a:75:9a:c0:37:42:8d:64:3a:76:d8:
c5:28:1a:b1:55:bb:4f:d1:0e:3d:3a:5b:3d:45:19:f1:97:f7:
86:fb:bc:d9:44:ce:2d:c0:0f:4c:39:e6:21:fb:85:fa:4b:9f:
ef:94:4b:e9:c0:00:2c:d0:f0:77:a1:d2:a0:bb:cb:c8:f0:c6:
8d:4c:c3:e7:57:17:76:ce:69:51:96:98:d1:8e:d6:9e:fb:68:
32:79:2f:33:19:a0:b6:07:dd:80:d4:ce:a0:93:8e:da:96:d8:
ec:09:24:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA4RTExMTAvBgNVBAUTKDQwOUQwMTFFODkzRkQ4QzhGMEIzRThBQzE0NjkyQUE3
QkI5RDAyNTkwHhcNMjYxMDAzMDAwMTA4WhcNMjYxMDEwMDAwMTA4WjAYMRYwFAYD
VQQDEw02YWMwNDVjNC05NWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvb71SAlfuPHuzV7dVBnjvU5TvessM8ADfF0Vma5Lp6jbILQ3xXjErgJ0kCkK
pHWh3IMyjBrf7bSLQxxC/PDT1d4WfHl2NTXtGntqgzNSwuuMVB4J/GTus4oc4fJ0
8NfvDmXXIpSlk2GeOmIgvyi+A7Lc1dYyPCt4bDQ/WCIogWXbYDLdgLYmq7/h4BBO
Mnl7TEONjP1eKNHvWs+yA7tbqF/sqTfzim8rEdwNfuG737SBZcVedJqVRncwbCnk
AEC+nqHRDPhGdrBJAaNnP0NIbGvREnCfLhyhdod4v2qvKivexBrVdn6A1p/TMwSi
/szbC+/zcQ+sU8IgOfRAB+IwUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5OeXL0
Nwd7Kts1SPLorragTESHMB8GA1UdIwQYMBaAFECdAR6JP9jI8LPorBRpKqe7nQJZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDhFMS9GOTBGOUU4ODdF
ODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJNandzLWlzRkdrcXA3dWRB
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FKMEJIb2tfMk1qd3MtaXNGR2txcDd1ZEFsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDhFMS9GOTBGOUU4ODdFODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJN
andzLWlzRkdrcXA3dWRBbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvK9wNlYDKex9BjTBlDcgAEIQq1UYTPMeQS6kZdYmcE5pDKMJ1igKFr96hj1U
vaNhTzgVc/BqW38f5gWpfpx9q4+ln5PwmpqEFih7ZWPed0IiNH0CX+bKHMEsh+ik
sCyZdA3jUeLYvUfTatzVI4gVyp8igxgNLFth+lctETSZy/J64pb2tlFoLNkPmIUt
wdTo+37Et2fgwwp1msA3Qo1kOnbYxSgasVW7T9EOPTpbPUUZ8Zf3hvu82UTOLcAP
TDnmIfuF+kuf75RL6cAALNDwd6HSoLvLyPDGjUzD51cXds5pUZaY0Y7WnvtoMnkv
MxmgtgfdgNTOoJOO2pbY7AkktA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:52:02 2026 by rpki-client