
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier: cWInuO/SvQhT0YpQdqpgOQGVB2Zuiio8+mTFU2nelxY=
Subject key identifier: A6:0D:A4:D0:97:EC:01:AC:87:F7:61:AA:B1:8D:06:5F:CD:65:A0:3F
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number: 0236
Signing time: Fri 17 Apr 2026 02:22:12 +0000
Manifest this update: Fri 17 Apr 2026 02:22:11 +0000
Manifest next update: Fri 24 Apr 2026 02:22:11 +0000
Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: BPDbOhGtxc6APh4iySHIQeLtWD58RVaoi55S+W6bUes=)
2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: NkxHKbtoUp0+3tPsUIQtJd1qKCp6YkrV3mW/saca7sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Validity
Not Before: Apr 17 02:22:11 2026 GMT
Not After : Apr 24 02:22:11 2026 GMT
Subject: CN=69e19954-a18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:40:93:c0:82:2a:f7:03:23:d5:1c:d0:c8:
dd:13:f2:84:e0:f9:98:15:0a:21:83:33:a8:3c:74:
0a:15:78:f2:aa:64:ea:31:b5:00:12:0b:a6:f7:bc:
19:0c:9e:44:f4:ba:78:13:48:b4:34:8d:5f:9e:42:
2f:5a:88:df:42:b1:87:b9:fb:ad:3d:f5:2e:ad:69:
57:be:ac:d9:ad:c5:4e:15:5a:bb:a3:bf:19:51:fb:
c0:8c:4d:16:6e:c1:c9:eb:78:0b:e1:e8:1f:bb:b3:
6b:4e:e2:21:dd:cd:0f:3f:ba:45:27:a4:06:44:3d:
bb:cc:da:44:31:ba:6e:19:2f:20:32:3b:6d:81:33:
fc:a2:35:ba:dd:ba:46:8d:74:37:b9:dc:f1:d8:6e:
9c:e3:32:a8:f7:6c:cf:8c:61:f0:2c:89:38:5c:52:
43:5c:d8:61:65:ec:2d:41:01:7b:a3:d6:9e:f9:cf:
aa:73:e0:12:1a:1b:57:63:f7:3c:5b:0e:68:e9:15:
b9:78:8c:7d:44:41:f9:27:b2:c3:f6:96:99:5d:6f:
9e:63:54:67:3d:bf:8e:09:c9:00:c5:d2:c1:32:00:
56:b3:09:3e:57:09:bb:a5:2d:fb:a7:3e:d7:f8:2c:
30:56:04:00:53:15:c7:7d:17:24:24:77:40:38:2d:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0D:A4:D0:97:EC:01:AC:87:F7:61:AA:B1:8D:06:5F:CD:65:A0:3F
X509v3 Authority Key Identifier:
keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:d2:8e:20:f7:a2:b9:26:10:48:f1:24:63:61:9e:ab:2c:8c:
e2:94:31:f5:3a:04:17:69:84:fd:00:fb:d5:a7:44:d7:a3:ad:
84:3c:64:2c:47:eb:d3:aa:c8:9a:db:0a:a0:35:83:bb:66:d8:
3f:bb:60:c4:f9:15:b3:73:99:2a:bd:70:6c:d1:83:6b:60:99:
c4:b3:3a:47:bf:12:4b:f6:c6:8e:83:89:e7:75:51:41:3a:db:
4d:0a:c3:fd:69:bd:ea:ee:d9:5e:be:c4:40:ad:9c:de:d9:e3:
af:ea:9a:41:50:dd:07:03:64:80:e7:72:66:34:67:4b:3d:97:
91:d6:cb:2f:e8:cc:1e:e1:a5:f2:87:16:93:8a:a7:1d:eb:75:
b4:69:8e:8a:da:25:46:59:55:fe:6d:f8:dc:10:4e:8a:63:40:
2e:f2:5d:ce:8a:29:b9:43:12:6b:b3:b1:3c:3a:4f:70:0b:f6:
8f:b9:b8:05:84:c9:1e:13:7f:ab:9f:29:96:a2:b2:d5:cb:14:
cd:76:de:9c:ca:23:4a:7a:70:66:bb:4c:ca:90:65:97:f9:71:
f5:16:c6:fd:76:e0:ae:0d:17:70:f1:03:9f:c4:65:21:a5:ab:
5f:f6:73:54:de:a6:2a:2a:ce:13:b6:a9:cf:90:90:73:61:b9:
df:ae:a6:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE
NDcxOTBCMkMwHhcNMjYwNDE3MDIyMjExWhcNMjYwNDI0MDIyMjExWjAYMRYwFAYD
VQQDEw02OWUxOTk1NC1hMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuhAk8CCKvcDI9Uc0MjdE/KE4PmYFQohgzOoPHQKFXjyqmTqMbUAEgum97wZ
DJ5E9Lp4E0i0NI1fnkIvWojfQrGHufutPfUurWlXvqzZrcVOFVq7o78ZUfvAjE0W
bsHJ63gL4egfu7NrTuIh3c0PP7pFJ6QGRD27zNpEMbpuGS8gMjttgTP8ojW63bpG
jXQ3udzx2G6c4zKo92zPjGHwLIk4XFJDXNhhZewtQQF7o9ae+c+qc+ASGhtXY/c8
Ww5o6RW5eIx9REH5J7LD9paZXW+eY1RnPb+OCckAxdLBMgBWswk+Vwm7pS37pz7X
+CwwVgQAUxXHfRckJHdAOC0F6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKYNpNCX
7AGsh/dhqrGNBl/NZaA/MB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG
RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI
ZExNTEdiNWM3MVBVY1pDeXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYNKOIPeiuSYQSPEkY2GeqyyM4pQx9ToEF2mE/QD71adE16OthDxkLEfr06rI
mtsKoDWDu2bYP7tgxPkVs3OZKr1wbNGDa2CZxLM6R78SS/bGjoOJ53VRQTrbTQrD
/Wm96u7ZXr7EQK2c3tnjr+qaQVDdBwNkgOdyZjRnSz2XkdbLL+jMHuGl8ocWk4qn
Het1tGmOitolRllV/m343BBOimNALvJdzoopuUMSa7OxPDpPcAv2j7m4BYTJHhN/
q58plqKy1csUzXbenMojSnpwZrtMypBll/lx9RbG/Xbgrg0XcPEDn8RlIaWrX/Zz
VN6mKirOE7apz5CQc2G5366mXg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:09:57 2026 by rpki-client