
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
File: QhQkhj78b5uyGjIfvVA2YeSoo_0.mft (raw, json)
Hash identifier: AwylxozWYxSBCHbXHqk8wgX0NDo19ygX/k/y94DrKKY=
Subject key identifier: 63:95:B1:2F:65:12:EF:EF:C6:42:CF:4F:C1:A7:54:BC:D9:F4:7A:DB
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Certificate issuer: /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
Manifest number: 1B
Signing time: Fri 17 Apr 2026 08:38:00 +0000
Manifest this update: Fri 17 Apr 2026 08:37:59 +0000
Manifest next update: Fri 24 Apr 2026 08:37:59 +0000
Files and hashes: 1: QhQkhj78b5uyGjIfvVA2YeSoo_0.crl (hash: JpYWhlfD5z5bA3lL25WRMK+2nWc4ow4qFwLRe3xKRhk=)
2: 7E43D97816DD11F18A14954A343D8C67.roa (hash: GHvsDod4B4M4Fvy4vn3Fb5pNbSRAj6hWau5NZwFd4IY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Validity
Not Before: Apr 17 08:37:59 2026 GMT
Not After : Apr 24 08:37:59 2026 GMT
Subject: CN=69e1f168-b6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:33:c8:70:af:4b:0d:8a:b7:6e:d6:85:51:
8b:c0:f3:fc:b1:be:64:a0:6d:f0:87:3e:e4:f8:37:
b2:51:cc:88:33:81:f2:c5:39:95:22:85:af:6d:77:
d4:a0:27:2b:7c:e1:69:d9:cf:ae:dc:71:f0:38:d0:
df:7f:b8:4d:c5:c7:53:ce:63:fa:cb:31:f9:11:21:
9f:57:ba:ad:60:d4:7a:95:28:76:e1:4d:09:f3:3d:
3f:cc:ff:ee:78:f2:6a:12:5a:d6:09:04:56:08:06:
c5:4f:52:db:a4:3f:1e:b8:d1:09:e5:43:19:31:9f:
4f:de:c3:c9:ad:59:39:24:5d:dc:1a:03:ec:95:5e:
23:ae:58:b3:66:ab:40:21:19:c9:2b:1d:89:aa:1a:
2e:8e:3c:89:4a:1c:95:84:d7:c5:e5:1a:05:2d:a1:
44:67:19:f3:0c:56:94:5f:80:88:08:f9:d2:73:b5:
27:91:ca:71:12:43:92:b6:8c:ff:d2:eb:0e:8f:6e:
3c:22:45:2d:09:64:86:87:93:27:fc:8f:72:d4:94:
14:78:cb:2a:ca:a4:61:19:83:2a:57:4f:4a:32:a6:
60:1a:3b:6d:bc:b2:09:84:61:43:46:83:0c:26:1f:
ea:4a:0c:65:e8:08:c0:b2:13:34:3c:4b:9f:0b:35:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:95:B1:2F:65:12:EF:EF:C6:42:CF:4F:C1:A7:54:BC:D9:F4:7A:DB
X509v3 Authority Key Identifier:
keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:f0:46:b5:66:e6:34:cf:a1:54:a3:14:cd:2b:78:f9:07:9f:
2b:03:75:ca:14:8a:a8:09:35:d1:a8:6a:83:b9:75:3f:c3:26:
26:40:89:0a:04:ec:e7:01:27:1d:fa:57:6c:ea:4c:93:00:13:
b6:7e:19:c3:af:50:98:95:c5:72:c7:ab:18:ee:80:d8:1b:a2:
6a:6b:dd:4d:ee:ef:58:7e:15:f7:7f:b8:1c:40:af:6e:29:00:
bf:80:7a:f0:9d:01:8a:2a:a5:eb:fa:2b:5c:31:3c:d6:55:01:
10:3d:96:9d:7a:77:1c:15:cc:a7:84:ed:1e:62:38:b1:1e:ea:
fb:f2:05:89:e0:a5:a4:35:39:9f:3b:a4:d3:88:5d:1f:74:4a:
72:6f:99:e9:95:4e:7b:96:ef:25:c8:05:88:60:d6:ca:44:28:
bb:e6:24:9a:2d:70:91:a1:36:62:32:be:6a:a4:b1:7e:85:dd:
1c:b5:08:ba:e1:7d:96:0b:bb:43:73:9f:a1:f2:45:d8:15:21:
ee:a2:2c:7d:ca:8d:dc:8c:e9:45:47:7a:98:5d:fc:1c:c1:ca:
a3:ea:89:b5:86:a6:5c:62:59:0a:d0:5e:79:74:a6:2e:a9:3c:
58:91:75:0f:70:86:b4:64:e0:d1:82:24:1d:d2:2f:61:c9:77:
54:ed:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:47 2026 by rpki-client