
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier: QCr00+axQ1+ym2DaHHRIn9fPfrWilwto0TNG/ZFh/n0=
Subject key identifier: D6:72:17:9C:FF:80:97:10:9A:37:20:DF:DB:50:36:AE:5A:B1:1C:20
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 359B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number: 358C
Signing time: Sun 20 Sep 2026 14:37:14 +0000
Manifest this update: Sun 20 Sep 2026 14:37:13 +0000
Manifest next update: Sun 27 Sep 2026 14:37:13 +0000
Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: 7ajCbfSj/w+Kxk7opVhIO37xm3n6Dr2yaMeoTxwj1Cg=)
2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 0OdTWHoxd21Qjwnz0s44P4D4gReHVyaUQbCaa6G9U74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13723 (0x359b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Sep 20 14:37:13 2026 GMT
Not After : Sep 27 14:37:13 2026 GMT
Subject: CN=6aafef99-1e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6b:4c:80:d3:d5:ca:c3:05:d9:64:95:56:17:
e3:f0:10:d7:12:4f:42:22:c4:0d:db:2c:00:54:72:
98:31:e2:74:23:68:c3:da:b3:8d:e3:3c:31:07:8c:
8d:fd:63:0c:6e:8d:03:63:d6:b1:4a:1c:56:7b:ba:
42:9b:ea:e4:7f:5e:7e:67:01:31:64:c4:35:5b:71:
19:20:02:d7:40:06:66:2f:71:02:d2:02:2a:67:74:
87:a8:f1:4a:aa:80:04:ea:51:5f:35:9c:5a:05:5f:
04:28:4e:a9:dc:d8:1d:8c:30:cf:96:3b:ba:09:24:
f6:08:06:34:0e:41:4d:07:e5:51:c9:b1:64:ff:3a:
8e:1f:ae:e2:91:51:fd:8e:94:08:20:5b:9d:02:2d:
6a:49:8b:fa:7c:57:e2:d8:90:6a:24:dd:2f:63:1d:
03:40:3c:b1:8a:83:95:11:28:3f:43:51:9a:b2:4c:
8b:89:01:e7:14:43:e7:c5:cd:92:a9:ad:48:9a:13:
36:90:d1:29:d6:ee:93:62:f8:42:4f:f4:64:c9:98:
f3:2f:6e:0b:c9:b4:db:d0:ae:57:ab:5e:72:35:69:
3e:cb:b8:c4:89:f5:55:5d:77:0a:3b:8a:57:2e:ac:
bc:0e:21:2e:30:fb:b5:8d:54:f2:c6:cb:87:7e:b4:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:17:9C:FF:80:97:10:9A:37:20:DF:DB:50:36:AE:5A:B1:1C:20
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c3:a3:4d:d2:85:e0:74:b0:61:67:7d:35:81:49:26:0a:8e:
e1:02:34:a7:08:1c:40:71:50:22:18:d2:36:97:32:d4:93:09:
6d:18:d7:b0:d7:b8:7d:d2:2d:66:16:89:c9:9c:b8:74:04:c9:
d8:bf:f9:88:3a:07:90:1e:ac:04:34:f3:7e:cf:73:9d:94:d3:
7e:23:da:33:8e:2e:0c:33:db:24:92:c1:d4:f6:35:5a:fc:2b:
e2:71:ff:c5:d7:43:c2:de:df:b7:33:e3:3c:b7:74:75:89:03:
df:77:7c:18:5f:da:46:d8:e2:41:72:29:f0:0c:8e:58:9c:0b:
bc:97:10:29:6f:59:58:0d:c2:6f:f6:d6:5e:bf:79:f6:7b:c5:
00:0a:1a:85:b5:28:c4:d5:3b:1c:11:e6:9f:84:70:cd:67:23:
eb:74:75:26:89:eb:d7:c9:f5:3c:77:cc:5f:9c:f5:e5:a0:38:
a3:e8:b5:0c:f9:01:07:1d:42:af:cb:e8:8f:19:6a:b0:38:66:
df:20:ca:52:3d:94:4f:76:62:36:25:20:2b:c7:5a:bc:9a:ec:
02:73:a5:a0:0d:68:b5:45:bc:be:f3:c4:b8:89:70:0b:58:c4:
4c:ab:d1:6c:94:16:1a:8d:6a:33:1d:12:97:af:50:a2:09:24:
66:e6:8e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:45:31 2026 by rpki-client