
$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier: CEyfdPd0oV+STfCWz6crMtqQYZBEaDvhJcpmJJmWywQ=
Subject key identifier: 0C:C6:A6:7C:09:69:07:AF:7A:BF:7C:FE:60:7A:FF:4C:DB:B1:3F:BB
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial: 04DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number: 04D1
Signing time: Wed 19 Aug 2026 00:09:21 +0000
Manifest this update: Wed 19 Aug 2026 00:09:20 +0000
Manifest next update: Wed 26 Aug 2026 00:09:20 +0000
Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: +HlXR9r6UiQFG1lt22Zt3q+TEUgoWZYLGK9XZm4AzRw=)
2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: UDGIexCjWZjf9oWBoZsn81ywHvMY4QFQvNjug6FA+Yo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Validity
Not Before: Aug 19 00:09:20 2026 GMT
Not After : Aug 26 00:09:20 2026 GMT
Subject: CN=6a84f431-d8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:ca:4c:0c:08:06:5a:40:e3:5b:9d:8f:f5:
f1:01:07:51:e0:0e:32:15:a2:cd:e8:e8:dd:63:0c:
30:f9:f2:48:37:1c:fe:af:66:ac:28:0b:58:a4:9d:
af:c2:de:1c:b4:7d:92:68:03:b3:c5:b1:9e:4d:76:
07:77:ab:80:74:ea:72:88:00:3f:67:b5:e8:e4:f4:
b1:4c:ea:72:5e:02:af:86:4a:cb:03:f8:58:92:1a:
3d:98:79:72:b4:88:3e:25:b3:f3:69:e9:e6:ae:52:
ec:43:d9:76:77:5e:7d:a5:d2:00:0e:2c:03:b0:52:
20:12:2c:45:c4:ca:b3:53:d1:8f:af:df:3c:f1:47:
0c:b6:68:76:ac:cb:83:d5:4a:8e:b6:cb:28:02:b3:
5f:e8:03:92:58:79:ad:09:20:27:0f:5c:ca:f3:bd:
6b:5c:a9:6c:40:fe:dd:d7:49:5e:cb:3e:36:cc:8f:
af:a3:d6:46:18:74:e2:9c:53:77:35:e3:18:64:46:
7a:09:3e:24:f4:9e:e8:4d:21:98:36:45:80:f0:85:
0f:b9:13:35:68:a0:8d:14:91:42:3a:ef:5b:0a:46:
ff:30:de:6f:63:8a:09:b2:99:02:88:41:d4:44:8f:
7c:97:c3:0f:b3:a6:e5:ae:98:0f:c4:7c:d6:eb:67:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:A6:7C:09:69:07:AF:7A:BF:7C:FE:60:7A:FF:4C:DB:B1:3F:BB
X509v3 Authority Key Identifier:
keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:5c:7f:f6:70:c6:eb:d9:71:ee:1f:f3:e4:8c:53:1b:f8:
2c:51:e9:f8:54:ca:10:15:b3:a8:07:9e:91:16:87:be:12:42:
fa:c2:e4:d5:9c:02:dc:2c:3b:fc:4c:b1:c1:19:1e:0a:6a:21:
e5:e4:f4:f7:90:4e:11:ab:f9:47:08:2f:3a:4d:65:f2:fc:8b:
74:3b:f0:a4:5f:ab:39:5a:30:f8:8b:26:39:93:47:83:fe:c6:
37:22:6a:6e:76:68:8b:77:6d:60:18:68:0e:8f:5d:5c:a2:0c:
47:a4:de:81:ae:97:c2:dc:5f:e5:91:85:bf:12:0c:61:f9:99:
86:b5:ad:82:a8:ed:f2:07:1c:0d:54:69:32:3e:4e:8b:29:8b:
84:f6:8e:e9:6a:66:fd:3e:fd:c3:81:b4:9d:b7:8c:e1:48:79:
3f:96:b2:55:e6:19:1a:1c:c9:32:dc:e4:6a:04:0f:4b:dd:88:
d0:34:73:a9:6c:53:3e:0e:17:89:da:2f:aa:31:b1:29:06:86:
f9:ad:74:df:e1:bd:3c:81:84:96:b6:d8:18:4d:5e:2b:a9:41:
5a:6e:83:d6:4a:0f:f6:71:63:0a:85:f5:df:62:0b:61:2d:6e:
99:33:1d:e4:62:4d:1a:d5:1b:f8:9d:17:d3:31:86:bd:45:2d:
3e:cb:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:02 2026 by rpki-client