
$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json)
Hash identifier: l35xDHhpBz96+d4LIswO4CCW0Hpil4+s01YtAYQyyqA=
Subject key identifier: FF:58:F6:8A:8D:EE:E4:0D:B8:F0:86:F0:55:3C:93:E3:6D:D7:29:C2
Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Certificate serial: 0261
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
Manifest number: 0259
Signing time: Fri 13 Mar 2026 01:31:10 +0000
Manifest this update: Fri 13 Mar 2026 01:31:09 +0000
Manifest next update: Fri 20 Mar 2026 01:31:09 +0000
Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: LKdB8smlqZw5K+tNSyW319qtBCZQddLQJaf/0WGXWu0=)
2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Validity
Not Before: Mar 13 01:31:09 2026 GMT
Not After : Mar 20 01:31:09 2026 GMT
Subject: CN=69b368de-4c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:93:4e:2b:bb:6c:bb:29:b4:c8:8b:65:30:
fb:2b:f1:33:c7:b9:1c:bb:83:74:1d:1a:88:58:c0:
f1:58:bd:1d:69:85:31:c7:d8:f3:31:9d:ea:b7:c5:
4b:17:98:1e:5e:58:7c:33:e1:25:4c:d2:47:12:44:
91:b1:db:1f:48:93:6e:03:3d:06:12:d5:57:20:ac:
ce:0e:33:43:4b:27:58:fe:f1:0c:8c:bd:ac:15:a9:
db:0a:b4:49:f1:09:a8:1b:a4:96:e6:33:b7:3f:ca:
b5:1d:7a:c7:60:1a:13:5a:5d:fa:8a:b4:c7:c5:51:
39:ff:fc:18:f4:7f:32:c1:f7:cf:6f:33:5b:8a:3a:
ff:a1:21:60:a6:43:8c:82:b3:fb:c3:8b:9b:5d:c7:
2e:31:d4:a3:f4:3f:70:65:bf:0a:14:5e:c8:ef:2f:
16:3e:1d:1a:f7:40:02:2a:da:65:27:47:82:76:fe:
76:92:a3:28:36:db:85:07:9a:4c:0f:f6:c5:86:22:
df:7c:76:5b:de:23:db:f2:3c:b2:de:e7:23:d8:34:
20:9a:78:42:91:0a:1b:bd:21:1b:50:4d:4c:24:32:
49:b9:48:63:0a:17:03:d3:bf:99:d6:c3:cc:2f:6f:
5c:b5:29:81:93:2f:31:05:ae:af:dc:3e:44:09:44:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:58:F6:8A:8D:EE:E4:0D:B8:F0:86:F0:55:3C:93:E3:6D:D7:29:C2
X509v3 Authority Key Identifier:
keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:72:7e:ae:de:a8:22:cd:c9:5e:24:c1:1e:cc:87:17:3f:8a:
17:b2:43:a2:ff:1a:7e:16:0e:db:31:7f:1e:f3:73:93:86:d6:
65:47:c2:e2:af:b3:b6:50:cd:67:05:45:97:67:ef:40:56:08:
b8:f4:e6:d0:41:1c:ae:87:16:70:c4:25:eb:67:d3:8e:fb:d9:
aa:63:bb:b9:f1:56:f9:53:49:fb:3e:e8:05:1f:51:09:78:35:
c7:a9:e5:22:a7:4c:6d:9c:6e:b1:b3:51:ce:4d:ef:c6:8e:8f:
c4:a4:e8:b0:5b:23:4b:83:0e:3e:3e:0e:37:54:27:01:c6:49:
30:0a:aa:1d:53:1a:23:df:8f:bf:33:26:8d:55:36:82:59:42:
61:86:36:60:ff:cb:a4:00:d1:bb:d1:de:50:23:30:50:86:c6:
ad:2b:2b:64:12:1b:37:2f:38:63:1d:c6:51:db:52:b2:df:15:
56:98:2b:c0:ca:56:05:23:1a:33:7e:03:0f:69:c6:47:51:ce:
37:69:07:f4:82:3b:5e:05:ea:9d:1f:46:d3:17:e5:ae:28:ed:
70:8a:f4:32:dd:6a:c4:d2:38:5d:9c:b8:15:4f:85:8c:4b:ea:
d1:4a:78:79:ce:6b:25:f6:6f:ac:74:1e:48:7f:49:a5:4e:f6:
2f:87:2c:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky
QjI1Q0RFQ0YwHhcNMjYwMzEzMDEzMTA5WhcNMjYwMzIwMDEzMTA5WjAYMRYwFAYD
VQQDEw02OWIzNjhkZS00YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA40STTiu7bLsptMiLZTD7K/Ezx7kcu4N0HRqIWMDxWL0daYUxx9jzMZ3qt8VL
F5geXlh8M+ElTNJHEkSRsdsfSJNuAz0GEtVXIKzODjNDSydY/vEMjL2sFanbCrRJ
8QmoG6SW5jO3P8q1HXrHYBoTWl36irTHxVE5//wY9H8ywffPbzNbijr/oSFgpkOM
grP7w4ubXccuMdSj9D9wZb8KFF7I7y8WPh0a90ACKtplJ0eCdv52kqMoNtuFB5pM
D/bFhiLffHZb3iPb8jyy3ucj2DQgmnhCkQobvSEbUE1MJDJJuUhjChcD07+Z1sPM
L29ctSmBky8xBa6v3D5ECUSGiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9Y9oqN
7uQNuPCG8FU8k+Nt1ynCMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE
REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s
WkNUMTdxSlBZcWtySmMzczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARHJ+rt6oIs3JXiTBHsyHFz+KF7JDov8afhYO2zF/HvNzk4bWZUfC4q+ztlDN
ZwVFl2fvQFYIuPTm0EEcrocWcMQl62fTjvvZqmO7ufFW+VNJ+z7oBR9RCXg1x6nl
IqdMbZxusbNRzk3vxo6PxKTosFsjS4MOPj4ON1QnAcZJMAqqHVMaI9+PvzMmjVU2
gllCYYY2YP/LpADRu9HeUCMwUIbGrSsrZBIbNy84Yx3GUdtSst8VVpgrwMpWBSMa
M34DD2nGR1HON2kH9II7XgXqnR9G0xflrijtcIr0Mt1qxNI4XZy4FU+FjEvq0Up4
ec5rJfZvrHQeSH9JpU72L4csVQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 02:23:16 2026 by rpki-client