
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier: WaExiqylTD+m9YzKc8hdNmKSs6WN1B62L+QFvabf4Nc=
Subject key identifier: 93:DC:BB:09:36:74:F9:3E:74:4E:1F:E4:BC:25:40:FC:6A:3E:63:F5
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 3548
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number: 353A
Signing time: Thu 16 Apr 2026 14:37:55 +0000
Manifest this update: Thu 16 Apr 2026 14:37:54 +0000
Manifest next update: Thu 23 Apr 2026 14:37:54 +0000
Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: 3RD2WUEUAuboLF0pTvhHDWEZf16R/Oz3+r9NtQtmvH4=)
2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: FdyevIyWCMU3BsPK8pup9Daz8b6pCeZZ5abWmPf2d1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13640 (0x3548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Apr 16 14:37:54 2026 GMT
Not After : Apr 23 14:37:54 2026 GMT
Subject: CN=69e0f443-f0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9f:f9:6c:0b:3d:73:f7:c1:12:28:7d:13:e8:
86:a8:64:42:59:24:88:fd:7e:0a:4b:4e:37:5a:0a:
49:7e:84:a7:a3:51:72:b0:38:3c:b1:f8:e2:3b:da:
42:94:45:7a:af:b6:c5:1d:4c:1c:f4:2f:74:22:21:
d7:6a:7c:e8:9c:31:9c:88:c0:57:ba:01:0d:47:62:
4d:96:e5:93:ed:41:5e:31:e6:f6:20:c2:30:59:66:
da:27:bd:5f:97:be:c5:5d:3e:62:46:46:29:e1:9e:
6c:a2:66:78:44:fc:d6:23:03:2a:30:dc:ac:ae:93:
b0:0a:b8:43:81:bc:7c:92:2b:17:a2:ec:0d:58:2c:
16:02:f1:4c:49:84:b2:03:42:96:f8:c4:f6:68:61:
a3:45:0b:54:15:6d:68:b5:89:cc:9f:b6:69:2c:cb:
aa:a3:c8:15:81:23:28:1f:ea:41:eb:3c:b6:eb:09:
a1:fd:73:03:c9:57:be:17:75:1e:ca:3f:db:04:13:
fb:02:ff:c5:dd:46:ca:65:93:04:99:1b:8b:0a:83:
6a:1e:67:71:4e:fa:a7:e1:c7:7a:48:d4:b6:03:6c:
2f:1d:98:68:ef:a3:33:4c:ff:b2:71:8d:05:28:a6:
89:11:0f:e2:8a:36:a4:80:af:8b:81:1b:89:72:68:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DC:BB:09:36:74:F9:3E:74:4E:1F:E4:BC:25:40:FC:6A:3E:63:F5
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:85:15:95:da:a8:f3:56:f7:86:c5:b9:1f:20:61:2e:ea:93:
06:22:9b:ad:99:72:f7:ab:f8:c7:71:99:82:b0:24:e8:53:86:
0f:4d:3d:61:9a:db:f1:fc:82:38:d0:5a:ed:a9:cd:bb:02:e0:
8c:14:35:d1:43:66:41:ee:6b:65:46:ae:ac:9f:59:6e:0b:63:
b8:1e:4e:d1:b8:a9:7d:e7:b2:af:46:7a:f9:f0:a5:01:c7:0c:
66:bd:9f:ad:da:1e:a0:58:59:17:f0:94:07:4a:f0:1f:f1:6b:
6a:b4:60:f5:8d:d8:a6:cc:8e:72:3c:24:b1:56:bf:7a:f3:fa:
b5:85:b9:e6:af:7d:51:e0:08:f5:84:e2:3d:0d:2b:37:44:c2:
5d:31:a4:80:5f:1d:25:f4:53:eb:ac:d9:1e:a8:5a:a4:e9:f7:
e8:e1:f5:69:d8:4b:e4:57:c2:24:ae:72:ad:98:94:b1:70:7c:
d5:23:e2:ca:f0:b5:b4:9e:e8:35:ac:57:94:ca:2c:0c:cc:55:
12:61:01:89:61:86:e0:78:06:b7:b2:57:5b:65:b7:70:2e:00:
1a:96:85:3d:40:d8:d7:fc:9a:b9:43:b0:d6:0a:06:2a:41:48:
27:ca:c1:b0:9c:7f:2a:b1:0e:ba:28:92:4d:2a:bb:7b:36:40:
63:85:3c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:05 2026 by rpki-client