
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier: dY8hLJhGGDdcH3l5Rdi4X9iHP+KsMVj+RKHCHNbFpzg=
Subject key identifier: 2F:18:4B:41:7E:77:3D:7C:96:74:98:3A:D0:38:04:B7:07:5E:D8:7B
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial: 0D72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number: 0D5D
Signing time: Sat 26 Sep 2026 18:04:54 +0000
Manifest this update: Sat 26 Sep 2026 18:04:54 +0000
Manifest next update: Sat 03 Oct 2026 18:04:54 +0000
Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: EWaiTXaxKoth3vJ4GaCk71FGl/DljERIQskBnmBb/34=)
2: PtP-fur7WG3ysGUWu5IRviC8kGY.asa (hash: 7LQqZ7Ln2Du4KxmToCpdfq+Si7SKUbeaRwHLgR89/jU=)
3: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=)
4: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 18:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3442 (0xd72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Validity
Not Before: Sep 26 18:04:54 2026 GMT
Not After : Oct 3 18:04:54 2026 GMT
Subject: CN=6ab80946-a202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:45:60:e1:91:ad:d3:db:fb:f1:28:12:35:
46:5b:83:22:db:4d:76:82:11:aa:1a:40:f5:23:0a:
7d:99:66:73:57:66:6f:ed:9a:d1:59:35:5e:d4:a5:
fb:82:72:9e:94:54:24:30:ba:11:81:ab:35:de:b4:
56:4a:c0:e5:b7:2e:ef:4f:af:c2:65:89:c3:e8:3c:
88:78:37:bc:3d:57:a5:d0:ad:ff:5a:48:37:49:f2:
2c:9d:e9:ee:17:d2:2c:52:86:74:5b:76:7c:d4:f7:
e7:bf:23:d9:ca:f8:a8:92:ee:e6:20:02:77:6f:1b:
be:06:d3:87:3c:ad:9d:9c:10:be:7b:6a:3a:fb:76:
78:d6:1a:28:4f:94:6d:2c:6f:a8:6b:60:4c:ff:4c:
6d:b0:1a:db:f7:e9:bf:30:1d:25:ec:8b:bd:12:5f:
53:b9:72:4c:c2:7c:bf:ec:b9:d5:75:dc:45:ba:af:
74:39:e6:62:3d:5d:b7:ca:4f:d6:b6:c0:ec:d7:e8:
7a:6a:d9:56:19:6e:46:08:fc:4b:8c:52:fa:b3:61:
60:5f:6b:f5:ab:55:7d:bc:55:46:61:21:1d:98:a9:
b5:63:83:e5:f9:54:2f:aa:3f:31:67:6e:d5:b9:bb:
8e:d3:bc:fc:4f:31:ef:8f:bf:2c:4a:35:ad:50:14:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:18:4B:41:7E:77:3D:7C:96:74:98:3A:D0:38:04:B7:07:5E:D8:7B
X509v3 Authority Key Identifier:
keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:74:cc:ad:d6:50:58:02:b5:ac:97:a4:3a:c0:10:ae:9e:92:
e5:31:db:03:c5:10:82:3b:16:2e:cf:c5:d8:cd:54:1b:52:30:
24:30:c0:fd:68:b5:1d:7e:30:e5:73:2a:63:6b:7f:b9:dc:c9:
41:16:74:c4:1e:dc:1d:b0:5d:d9:b1:14:ff:98:98:26:85:31:
a8:e2:47:c9:8d:eb:27:02:a8:0d:4e:60:a4:8f:73:dd:64:61:
08:80:26:aa:09:7b:0f:19:97:ac:6d:13:66:4d:bc:50:b3:16:
e3:e1:21:da:da:50:54:c8:32:6f:19:34:8a:90:03:4e:f3:4b:
49:fb:42:70:2a:a2:c0:d2:82:12:2e:15:2e:07:42:12:ba:40:
ea:91:79:1a:b3:61:13:6a:ff:bb:56:07:15:0f:37:50:19:7b:
0d:0a:7f:1a:ca:64:26:5f:d4:22:51:4a:6b:63:6d:2b:66:be:
8c:9f:7a:36:fa:e8:17:b3:d0:3a:27:71:8d:b3:ec:b1:cd:a2:
b4:ac:6c:ac:56:5f:67:aa:3c:5a:5a:3c:d0:d1:e7:75:5d:f7:
d2:ae:64:84:d6:33:1b:76:e4:54:c5:ed:23:b2:f5:46:4d:64:
7f:88:81:07:e5:6b:dc:9b:05:da:aa:bc:92:b4:dc:4f:99:01:
9d:5b:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:13:00 2026 by rpki-client