
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier: eZo8siATErQ7vKgM8CRxb9UWIt8/RhAi0E3OoGtj4s0=
Subject key identifier: 70:B0:F8:D7:35:AB:EC:52:E0:D2:44:FC:35:D9:99:BC:3C:5C:96:F2
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 3565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number: 3557
Signing time: Fri 12 Jun 2026 14:37:57 +0000
Manifest this update: Fri 12 Jun 2026 14:37:56 +0000
Manifest next update: Fri 19 Jun 2026 14:37:56 +0000
Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: wVCKy53RmEF8o5SuiE9ldUQY0qWDKNKQ1sXObHDghKQ=)
2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: FdyevIyWCMU3BsPK8pup9Daz8b6pCeZZ5abWmPf2d1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13669 (0x3565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Jun 12 14:37:56 2026 GMT
Not After : Jun 19 14:37:56 2026 GMT
Subject: CN=6a2c19c5-c944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:42:eb:5f:18:af:eb:88:75:fc:74:ef:46:
f2:01:e6:a5:68:c4:80:38:5f:2d:21:77:f9:6f:3d:
2d:8b:ab:1e:01:c3:21:9e:a9:8b:ba:c0:8e:41:17:
78:93:d9:89:18:18:30:66:60:6f:bb:7a:52:00:b3:
e2:7a:8a:77:a8:ac:bd:53:fa:4b:54:fe:52:c0:0e:
60:6a:f3:c7:2d:8f:6e:70:6d:5c:49:0e:ff:0f:01:
c7:12:88:22:99:27:b2:ce:71:4e:dc:31:11:f1:fa:
06:52:3c:5b:91:a8:64:e3:b4:fe:0c:d4:02:df:08:
d1:ad:10:58:0b:49:55:2f:79:d8:db:01:65:ef:78:
91:d8:57:68:09:28:b7:96:91:ad:ed:a1:f9:be:6c:
b0:94:e7:34:6e:77:5f:c0:cf:98:f1:62:f8:98:7c:
15:2c:c8:59:6d:bb:47:c3:8c:41:10:58:86:37:aa:
c0:77:ed:3b:8e:6b:02:8f:4f:0a:5e:98:b0:25:2d:
97:ad:20:59:96:6f:00:0f:24:14:7c:dd:25:52:4f:
70:df:28:ca:2f:c3:0d:32:87:88:c2:49:fa:82:15:
a7:6b:96:93:f8:7f:10:1d:33:99:44:cc:a4:a9:f0:
e4:da:b9:f1:ab:49:21:3d:45:f8:2b:09:ee:90:fb:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:F8:D7:35:AB:EC:52:E0:D2:44:FC:35:D9:99:BC:3C:5C:96:F2
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:47:2a:48:47:50:bf:bf:ab:b0:c0:51:c4:61:ae:11:75:d9:
ff:04:78:2b:03:53:3e:a5:fa:49:f0:e4:8c:1b:d7:95:0d:6d:
50:24:38:5c:5c:a2:79:40:65:6c:a5:0b:89:24:be:e9:02:30:
3d:79:24:e3:20:3e:88:15:c1:6b:66:1f:f0:05:a3:8c:fb:5b:
1f:b0:d3:64:d9:35:e5:6a:7c:f2:2f:65:ec:90:ea:52:77:b6:
77:42:77:6f:6d:98:6b:02:91:43:6a:0b:86:e9:5e:cf:ec:7a:
67:fb:fe:51:cd:83:78:47:74:3d:99:13:9f:43:80:c8:88:1b:
53:38:65:0c:6d:87:43:0e:fc:ec:7e:ee:c8:dc:66:5c:f1:ee:
29:f4:5b:b2:98:96:41:6b:6d:15:fa:41:72:b1:b0:5e:2e:3e:
24:86:d1:13:3e:ad:e0:a9:18:6d:51:dd:11:b1:ad:c8:1c:d5:
ed:eb:23:ff:f5:eb:ce:82:de:13:b0:de:e2:39:d8:c7:5b:2c:
d1:8f:72:25:00:c3:8f:dd:91:aa:35:67:19:aa:dd:ae:6f:18:
d0:34:de:df:12:30:51:39:4e:66:ad:68:7b:ff:92:cc:84:5d:
c6:f8:cf:b9:83:1d:d3:7c:b3:35:ed:c0:4b:36:e0:b9:3f:62:
30:53:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:24 2026 by rpki-client