
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
File: QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json)
Hash identifier: a8nDWPGsmTwW1saM/n7XcJcSGHIxKsxMApQf7kUMXBc=
Subject key identifier: 41:12:4D:6B:1D:86:06:F7:F6:09:6B:49:75:85:53:72:22:A3:0E:2E
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial: 021D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
Manifest number: 0215
Signing time: Thu 21 May 2026 02:55:36 +0000
Manifest this update: Thu 21 May 2026 02:55:36 +0000
Manifest next update: Thu 28 May 2026 02:55:36 +0000
Files and hashes: 1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: rCYCmaV0ZMKR4mb9dZ1GfAdTNczSL05pXjtIPl94B/E=)
2: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: BEfAitlNjdsT2EjyWQEtL6cOR0dRmY0b35W31biOnxM=)
3: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: qmWL1JJkYDav7PIrJ2q6BDFYEso4lhOhRe8jfWlt3bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Validity
Not Before: May 21 02:55:36 2026 GMT
Not After : May 28 02:55:36 2026 GMT
Subject: CN=6a0e7428-6b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:1a:82:2f:83:d7:43:ab:d8:b7:98:8f:a1:
b0:0f:02:d7:12:37:1c:63:9c:5b:93:78:7e:4a:61:
55:6f:42:c3:d2:2a:9c:3b:83:f2:3d:b6:c7:70:5f:
26:b7:c9:bf:79:11:8b:ed:7b:da:b3:ee:4d:ba:84:
ab:7f:eb:9a:94:ec:14:90:6b:a6:b9:97:be:de:15:
2c:a4:26:82:a5:67:b9:c7:95:39:e4:42:a6:fa:59:
83:fc:31:bf:dd:7c:db:8e:d8:32:95:71:ad:b7:c2:
cc:c4:c3:03:4c:17:e5:e0:0b:68:5e:0b:72:f0:9e:
3e:4d:c3:d9:93:ab:83:f1:1b:48:e3:27:d6:2a:8b:
76:8d:31:68:ae:3a:99:a4:09:0e:18:bf:05:8d:88:
b2:f7:9d:03:c2:2e:7f:92:66:0b:c1:1d:1e:47:2b:
e8:bf:46:30:1b:31:7b:d0:00:80:82:db:d1:59:e9:
3f:30:63:4e:69:7b:06:6d:f4:a8:23:39:4f:07:36:
78:82:f7:87:54:9b:9f:24:03:cc:41:24:3b:e0:8d:
ef:8e:3d:49:b1:6f:b1:f7:94:40:74:c6:d2:40:56:
9a:5d:fa:d6:15:47:78:1d:6b:ff:8a:ae:b7:28:62:
45:90:b7:2e:2d:47:e3:5e:a0:ce:22:25:ba:41:25:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:12:4D:6B:1D:86:06:F7:F6:09:6B:49:75:85:53:72:22:A3:0E:2E
X509v3 Authority Key Identifier:
keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:f4:0c:37:5b:70:55:e7:b4:56:ce:85:df:52:4a:e5:95:
ee:40:e3:18:3a:4e:95:f2:bf:5d:de:11:0f:5d:18:e1:20:b5:
46:a1:21:67:a4:7e:0a:fe:f8:86:d7:42:4b:db:e1:02:64:28:
18:4a:20:11:0c:86:dd:2c:09:e6:fb:3e:3d:71:60:3a:28:dc:
4f:0b:72:a5:82:a0:2c:fa:92:99:7a:07:af:98:d2:57:78:0a:
58:71:27:87:d1:65:b3:ba:b5:53:ad:32:c4:21:e5:f8:40:b4:
bb:2e:c3:06:21:ba:31:0e:5b:9e:a6:ef:a0:aa:46:45:7b:60:
e0:c1:01:f2:12:f8:7a:9e:bc:57:1c:11:3a:26:a0:e3:d7:31:
28:32:22:d1:93:c5:20:d5:0f:c4:5e:4f:0b:33:5c:70:4f:6f:
bb:b8:66:97:2e:a2:22:08:b7:fb:f5:b5:d2:35:5a:d4:2e:06:
ee:46:6a:ab:54:42:aa:27:71:3d:1c:9e:b3:5d:9a:56:c4:5e:
37:20:d7:32:f9:d7:b8:d9:1d:a1:75:5a:a4:64:db:27:ee:57:
73:a0:53:b3:0a:f6:fd:e8:47:ac:14:c8:a2:c5:7f:c4:91:3d:
6b:71:c9:06:a6:2b:24:0c:1f:f0:62:bd:9d:10:e0:48:5c:ec:
f7:b1:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:37 2026 by rpki-client