
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File: QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier: BgMzngID97MuRPw9dOsKe8ZBmE6u1j3BuZ+KuFB/FH0=
Subject key identifier: A9:46:D8:36:5F:B5:2F:CA:C0:BC:4A:4A:88:4D:56:84:03:2F:D0:0D
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer: /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial: 06F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number: 06F0
Signing time: Sat 18 Apr 2026 22:00:17 +0000
Manifest this update: Sat 18 Apr 2026 22:00:16 +0000
Manifest next update: Sat 25 Apr 2026 22:00:16 +0000
Files and hashes: 1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: 3nFtnAStZYzCw0G5WEzzcsCb5VdZJ8oXWupioqSxqEc=)
2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: MHi4TFFkjk45IS82Lk1zkWvvF71n/wv3X8tPB3ZA4gQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785 (0x6f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Validity
Not Before: Apr 18 22:00:16 2026 GMT
Not After : Apr 25 22:00:16 2026 GMT
Subject: CN=69e3fef1-bf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:08:b3:81:98:f4:f6:63:70:79:b2:2c:76:
49:b7:14:79:2b:e9:c0:20:53:d8:17:12:30:84:c3:
8a:d8:0e:80:d5:61:5e:e5:32:b1:e0:38:27:c4:dc:
6c:fd:5c:31:ea:19:a5:50:ef:58:3f:ed:0a:91:7b:
cd:17:db:3c:82:d2:b1:d7:45:17:8b:76:22:b0:d9:
dd:57:e8:e9:b0:fb:6f:25:d8:4f:2b:71:ef:a6:27:
23:53:02:c0:0a:12:dd:e7:b5:8e:47:60:71:70:9b:
b5:67:38:32:d4:31:c9:42:89:bb:51:67:cb:3f:94:
c1:91:45:d7:80:49:50:08:bc:6c:b3:8f:36:cf:1b:
7d:57:3e:59:bd:96:df:66:d8:09:ba:2a:66:a7:a3:
ec:4c:3b:a1:48:8d:c8:2a:e4:a2:77:67:91:6f:01:
12:e7:47:1a:a6:9d:a2:ed:12:4c:89:42:0c:98:5b:
68:62:90:0f:6c:32:8c:e4:77:18:aa:bb:c4:74:b2:
9c:80:a3:36:f4:db:98:ab:9e:8e:e1:53:00:ac:04:
56:da:47:7e:65:07:e1:0f:c9:90:5e:49:e4:93:18:
bb:15:8a:f6:7d:16:04:20:f2:19:f5:dd:7a:d4:08:
05:6e:d6:63:0b:13:fc:bf:1c:40:63:fd:53:78:df:
cc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:46:D8:36:5F:B5:2F:CA:C0:BC:4A:4A:88:4D:56:84:03:2F:D0:0D
X509v3 Authority Key Identifier:
keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:73:0b:c8:08:77:b8:df:8e:28:52:84:e0:4f:93:87:30:68:
a7:cc:f3:bc:5e:18:a3:b6:06:da:9e:51:66:cf:a9:76:4b:8e:
01:cc:f4:63:c1:ca:13:54:9d:36:26:87:ee:04:34:27:69:86:
d8:a5:ff:d3:60:a8:a8:09:8a:bb:2f:af:9e:bb:db:41:70:83:
9d:1b:34:a9:c7:0f:4a:a8:a9:7c:57:a9:21:bd:4b:e7:67:e1:
1f:65:bb:17:89:ee:f2:f1:06:a8:75:3a:3d:c5:7e:78:0b:7d:
a9:ba:c5:84:b4:5c:00:70:f6:f0:f9:e7:d7:03:1c:a9:27:f1:
8b:2c:4f:76:86:78:66:53:07:bf:f1:a8:7a:d0:46:b2:56:71:
f8:d2:2c:f3:a9:a9:60:0b:7a:bc:5d:1a:b5:32:fd:e0:c2:c6:
96:72:11:69:44:1e:9f:e8:71:98:db:53:87:cc:6e:d4:81:92:
64:7d:21:03:a1:c6:24:4d:50:af:05:5c:aa:c9:e1:5d:5a:73:
c7:d9:f6:42:49:a3:50:fe:74:e9:7c:d2:7b:22:34:45:74:51:
f9:b4:4b:0c:2f:18:77:9c:7a:1f:38:67:45:32:7d:4d:90:60:
2c:8e:ee:e0:be:9f:0d:7f:98:a3:43:0e:7d:8b:04:ad:35:d5:
c5:41:be:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:43 2026 by rpki-client