
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier: ZLMPTO3kV6BbjCKuLb57kbBv9WFSqfhmFX3UxkYoQE8=
Subject key identifier: E3:19:A2:9E:D5:6B:C0:8E:A3:11:83:01:10:0E:F7:B9:F5:01:DF:A6
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1F05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number: 336C
Signing time: Fri 12 Jun 2026 15:37:36 +0000
Manifest this update: Fri 12 Jun 2026 15:37:35 +0000
Manifest next update: Fri 19 Jun 2026 15:37:35 +0000
Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: ubutUqigp3PTUztuv7mU0eApxMeflDvIpYZn5W5j9wA=)
2: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: LoSQxFip4nNOrJotlSF6RIr2kx5vjl1KHOV/16F58yQ=)
3: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: a2YIRJWcOj/2F2QJjwyVL+lBSin617P7TaoPIuqLmpo=)
4: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: XKjx+2JVREc1vEzkeaWV20vVw40lW7PDQ/F2fJTa5K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:37:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7941 (0x1f05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Jun 12 15:37:35 2026 GMT
Not After : Jun 19 15:37:35 2026 GMT
Subject: CN=6a2c27c0-248d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:29:7e:f6:6c:a2:a1:d0:aa:e5:0f:fe:45:
cf:35:76:34:7c:d0:39:8b:12:76:55:af:11:f6:b8:
9f:8e:62:c8:bc:98:79:76:d0:54:e7:06:94:85:44:
c1:bd:e3:56:45:b4:d7:34:59:a9:82:a5:e1:b8:2d:
89:04:4e:5a:31:d8:3c:38:e1:26:8c:7d:42:d3:a7:
4c:e2:e0:71:73:94:c9:98:5e:f8:f6:15:8a:c5:f0:
28:7c:33:56:c5:f7:e4:e5:b4:bc:5d:2b:f5:fd:d0:
fc:6e:46:5a:87:58:31:33:e5:9f:d3:c9:12:d8:81:
f5:86:18:ab:a4:a6:b5:a4:37:6b:0a:f5:09:63:51:
ba:65:1c:c9:c4:e2:65:bf:9d:27:c3:02:e3:43:bf:
cc:aa:b2:f8:b1:67:48:6f:0f:de:b4:82:be:3f:af:
e4:96:5e:76:fc:94:e9:46:19:3f:d8:69:9c:f9:cf:
c4:fe:30:40:34:b3:a5:30:a7:f3:30:15:c4:0e:2a:
c3:7a:3e:7f:39:c0:72:c6:dc:e1:87:91:a7:51:7f:
eb:05:58:d0:02:67:f3:8e:12:10:34:3a:16:81:94:
d6:5d:97:a7:4d:17:e0:3a:9e:e7:2e:81:9d:0b:c5:
88:11:0c:9d:76:21:cc:8b:c9:2a:32:07:91:c9:7b:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:A2:9E:D5:6B:C0:8E:A3:11:83:01:10:0E:F7:B9:F5:01:DF:A6
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:13:86:b4:0f:5c:c2:02:fc:ca:3f:0f:48:84:1f:fb:54:ca:
88:76:be:a3:a3:ce:32:02:fe:87:e5:7d:be:4f:d6:45:dc:4c:
52:ef:90:40:02:50:0f:5e:fb:9d:0d:0d:14:08:e5:da:51:df:
81:7f:92:76:d7:61:42:1e:50:2f:8d:d2:f2:31:95:fe:84:6f:
6c:66:e6:92:bb:fd:be:2f:5c:83:e0:1e:e6:f3:5f:91:eb:ee:
74:4f:b7:50:49:2e:8a:9d:0d:7f:7a:24:32:ba:6a:51:ba:77:
61:7e:20:43:5f:ed:46:10:4c:5c:62:80:5f:98:88:b9:28:d3:
10:53:79:2f:fa:35:7b:7c:e9:b9:5b:be:69:60:72:be:1a:df:
e2:63:c4:a2:78:71:a2:7e:af:34:bd:6e:94:0c:df:a1:d4:a0:
f5:ae:fe:14:e2:1e:7e:18:15:1f:70:7a:31:47:d7:8c:b7:ab:
e9:f3:c8:17:66:4e:3b:75:c9:53:6f:bc:de:29:66:fc:8c:c0:
bc:8e:ed:05:f7:dd:b8:b6:f4:70:9d:4c:e2:da:0c:1a:78:12:
6b:56:40:98:5e:c8:19:e1:d0:74:4a:b7:6c:88:91:b0:72:7e:
33:a2:fc:c0:02:1c:9f:c8:f9:33:36:63:c6:2a:89:88:69:b2:
11:78:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:20:52 2026 by rpki-client