
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier: OQA5UqG2NN/oOG+gg/bOIZpfSIWn12vWRF7kyJc5/co=
Subject key identifier: 93:0C:09:22:F0:5C:79:37:B4:44:E9:9F:58:CB:BA:CE:84:DB:C5:87
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0E2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number: 0D0B
Signing time: Tue 28 Jul 2026 18:59:47 +0000
Manifest this update: Tue 28 Jul 2026 18:59:46 +0000
Manifest next update: Tue 04 Aug 2026 18:59:46 +0000
Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: xAB/GlujqNyopPD/PFzKRvHOcAs9m/gz/RJP/dm/+6o=)
2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
3: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
4: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
5: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
6: 6BB6356086F111F19E006003A7EE528E.roa (hash: 8E4lWe8eMXTQftSqErp6AT1u7W/ptR1bQS6g7D5lpVs=)
7: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
8: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
9: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
10: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
11: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
12: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
13: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
14: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
15: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
16: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
17: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
18: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
19: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
20: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
21: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
22: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
23: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
24: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
25: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3627 (0xe2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Jul 28 18:59:46 2026 GMT
Not After : Aug 4 18:59:46 2026 GMT
Subject: CN=6a68fc23-c193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:49:f2:78:29:05:f7:75:65:0c:b3:a9:75:
0e:4f:55:31:29:73:e9:b1:f0:b9:af:bf:71:21:54:
1f:35:9d:a5:9e:0a:cb:b9:56:89:d9:19:f8:5f:70:
d8:88:60:79:56:ce:bf:ac:67:42:aa:d3:66:81:a0:
d7:eb:36:a8:85:22:71:6e:67:83:4a:9e:c2:6b:62:
40:90:5b:59:46:2a:3a:ec:11:95:20:85:f9:99:ea:
14:16:db:f7:e4:a7:db:97:7c:df:18:d2:a1:b3:09:
7a:90:29:bc:2d:cb:df:db:60:2b:55:e1:e0:03:a7:
4e:dd:cc:7f:b1:52:ff:46:84:86:2c:29:5c:90:44:
53:18:fd:71:c6:50:be:da:cb:9b:4c:df:2a:cb:12:
62:f5:f2:78:ef:d4:bc:76:d6:da:fc:83:ec:6f:a4:
64:19:36:68:f9:d3:86:71:f6:ac:9b:fa:02:2f:00:
c0:0e:9a:86:2a:14:dd:f3:72:c2:7b:ba:e2:89:92:
69:3a:22:5e:ef:bf:d4:3c:b4:aa:9a:d5:b6:7b:7b:
30:a5:d3:07:cd:76:0e:97:fb:07:47:d8:93:1f:28:
29:7a:60:a2:a9:a4:cd:86:18:42:c7:cc:91:23:4d:
f3:e8:3a:67:2f:e9:91:05:77:19:43:43:22:4e:4b:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0C:09:22:F0:5C:79:37:B4:44:E9:9F:58:CB:BA:CE:84:DB:C5:87
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:8e:d1:e0:b7:21:74:37:ea:d9:03:44:da:50:f9:02:7c:c6:
68:a9:0a:9a:30:c6:c8:22:13:28:91:27:0e:df:45:38:4b:04:
c0:2a:71:35:aa:04:2e:42:62:f2:db:73:66:db:cf:b9:ee:c8:
9b:94:2c:64:fd:f0:28:b3:3d:50:85:91:ed:04:63:5a:9f:7d:
85:4b:cc:e8:66:08:f0:7e:be:d0:3f:4b:20:f7:9f:dc:1f:3f:
bf:c9:16:a1:b1:8c:04:68:b1:48:f6:ca:d8:0a:f6:5b:0f:b0:
51:5f:e6:f6:9b:35:4c:b2:9b:38:f3:03:a1:47:fa:98:7b:b2:
25:3c:4e:f6:75:e8:e2:ac:5b:62:49:1f:41:87:db:78:9b:b1:
90:97:d4:df:93:32:43:0d:45:a5:23:f1:44:00:7c:32:dd:a1:
18:cb:ec:ff:4c:2c:c6:a2:b6:f6:de:c8:d6:11:84:1d:9b:e8:
4a:8e:17:73:f9:bb:e2:5f:45:48:93:fe:56:29:22:e1:a6:65:
a3:08:6e:c4:0e:83:03:64:3b:53:69:f0:90:a1:01:5c:d5:73:
00:23:44:1a:1b:39:02:94:86:67:ff:86:3e:5f:a2:52:d8:7e:
6f:5f:61:f4:05:5d:7b:45:6b:70:16:c1:be:74:58:d6:84:01:
c7:67:8a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:48 2026 by rpki-client