
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft
File: Qg-DHM6albTzE1seVXeDqyAsa68.mft (raw, json)
Hash identifier: 0duU7TuAyAA/YdGInE2gfWl0rL3vtuMT4j2Tp3VrVN8=
Subject key identifier: 28:3B:16:C6:16:F1:B9:BE:2B:CE:AB:09:02:56:2A:71:CB:B7:D1:38
Authority key identifier: 42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF
Certificate issuer: /CN=A913E614/serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft
Manifest number: 38
Signing time: Sun 01 Mar 2026 09:56:10 +0000
Manifest this update: Sun 01 Mar 2026 09:56:10 +0000
Manifest next update: Sun 08 Mar 2026 09:56:10 +0000
Files and hashes: 1: Qg-DHM6albTzE1seVXeDqyAsa68.crl (hash: Q47TarGgD+jBGuJFMcHVNeSlMR8MFypo58ChY/0kEvc=)
2: CAFFD8E6C6D511F09C4D4F76C4F9AE02.roa (hash: x07sy7Vu8Uw/BjZ2JSklav59awi6rK7vT+EfvI/GcH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl
rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E614, serialNumber=420F831CCE9A95B4F3135B1E557783AB202C6BAF
Validity
Not Before: Mar 1 09:56:10 2026 GMT
Not After : Mar 8 09:56:10 2026 GMT
Subject: CN=69a40d3a-ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9b:62:b2:1c:93:4c:4f:03:20:4f:cb:9f:17:
57:ee:c3:76:22:3b:56:6f:8b:3c:f7:99:9e:4a:5e:
b8:46:9c:24:a5:9b:90:de:26:ae:b1:b8:33:9a:c5:
92:6c:4e:7e:27:50:de:82:da:ba:3c:7a:8d:5a:8d:
6a:1a:fe:23:f5:d4:11:a0:81:c8:04:f1:41:5c:ea:
31:21:8a:7d:45:79:86:76:b6:09:dc:9c:81:67:71:
a0:66:93:a7:2b:82:0a:20:00:55:e5:2f:0c:0d:e7:
0c:7e:24:44:c8:e8:60:f5:4b:fb:cc:74:8a:d2:24:
0b:1a:a0:d0:c1:2c:70:f4:dd:4d:d0:ce:e4:b6:14:
be:49:41:25:7b:4d:7e:93:45:1c:f8:64:25:a9:17:
2f:16:31:e9:91:45:3f:85:24:56:4b:8e:b0:13:07:
8b:a3:bd:6e:00:50:61:d7:b7:e2:af:ba:7f:5d:93:
4a:0d:7e:0f:27:2f:6d:9c:49:ae:87:61:19:57:42:
46:d6:8f:a5:8c:c8:21:f5:6d:97:b6:48:74:e4:5b:
47:95:eb:e6:ae:90:f5:90:06:a4:98:f4:e8:92:da:
22:8b:21:d5:e9:98:37:6d:5c:49:9f:34:0f:d3:5d:
c4:92:75:df:e8:91:9f:09:06:7b:86:1f:fa:45:4d:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3B:16:C6:16:F1:B9:BE:2B:CE:AB:09:02:56:2A:71:CB:B7:D1:38
X509v3 Authority Key Identifier:
keyid:42:0F:83:1C:CE:9A:95:B4:F3:13:5B:1E:55:77:83:AB:20:2C:6B:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg-DHM6albTzE1seVXeDqyAsa68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/38E21D52C3A111F0B744C339C4F9AE02/Qg-DHM6albTzE1seVXeDqyAsa68.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:e2:90:fe:f2:dc:38:41:62:b4:bd:a7:4d:65:f6:a5:c6:
fb:09:99:ef:e3:f0:47:ff:c4:cc:04:03:f9:d3:9a:70:83:55:
e2:58:7b:ad:72:a7:80:bd:28:00:2a:20:c9:f2:50:8a:45:d7:
e3:4a:59:82:c9:d8:60:87:de:d0:1d:a0:22:53:b0:fb:8d:ce:
36:89:e4:f7:d8:e2:b8:31:87:5f:99:54:a5:db:eb:4f:72:85:
88:98:e2:ae:ec:2f:e0:de:d3:88:c7:bf:f4:d4:ea:7c:6b:9a:
09:e3:12:22:87:d5:22:46:49:d0:6c:8a:c1:45:ca:0b:5a:98:
bb:0d:43:84:ff:91:81:2e:6b:23:bd:da:76:d7:09:95:56:95:
f7:48:49:3d:21:b1:c6:ed:13:e0:e7:45:fc:98:c2:65:60:d0:
f4:ea:94:34:0c:88:4c:d3:82:f1:ba:2f:cf:6e:56:05:94:01:
d2:70:ac:4c:a1:c8:15:0e:c1:ab:24:9c:90:e1:20:d8:45:cc:
0a:7e:f2:aa:e4:f3:2c:f0:ed:8c:30:6d:a3:40:7c:14:75:d3:
19:18:0c:f3:bb:a1:5c:b8:a8:e5:f1:5c:68:4f:a6:df:9c:b2:
db:7f:aa:1e:81:32:57:ab:c3:52:26:7d:e3:fd:32:6c:c3:06:
a0:6e:72:36
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RTYxNDExMC8GA1UEBRMoNDIwRjgzMUNDRTlBOTVCNEYzMTM1QjFFNTU3NzgzQUIy
MDJDNkJBRjAeFw0yNjAzMDEwOTU2MTBaFw0yNjAzMDgwOTU2MTBaMBgxFjAUBgNV
BAMTDTY5YTQwZDNhLWVjNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD0m2KyHJNMTwMgT8ufF1fuw3YiO1Zvizz3mZ5KXrhGnCSlm5DeJq6xuDOaxZJs
Tn4nUN6C2ro8eo1ajWoa/iP11BGggcgE8UFc6jEhin1FeYZ2tgncnIFncaBmk6cr
ggogAFXlLwwN5wx+JETI6GD1S/vMdIrSJAsaoNDBLHD03U3QzuS2FL5JQSV7TX6T
RRz4ZCWpFy8WMemRRT+FJFZLjrATB4ujvW4AUGHXt+Kvun9dk0oNfg8nL22cSa6H
YRlXQkbWj6WMyCH1bZe2SHTkW0eV6+aukPWQBqSY9OiS2iKLIdXpmDdtXEmfNA/T
XcSSdd/okZ8JBnuGH/pFTS+3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKDsWxhbx
ub4rzqsJAlYqccu30TgwHwYDVR0jBBgwFoAUQg+DHM6albTzE1seVXeDqyAsa68w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjE0LzM4RTIxRDUyQzNB
MTExRjBCNzQ0QzMzOUM0RjlBRTAyL1FnLURITTZhbGJUekUxc2VWWGVEcXlBc2E2
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUWctREhNNmFsYlR6RTFzZVZYZURxeUFzYTY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF
NjE0LzM4RTIxRDUyQzNBMTExRjBCNzQ0QzMzOUM0RjlBRTAyL1FnLURITTZhbGJU
ekUxc2VWWGVEcXlBc2E2OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBTguKQ/vLcOEFitL2nTWX2pcb7CZnv4/BH/8TMBAP505pwg1XiWHutcqeAvSgA
KiDJ8lCKRdfjSlmCydhgh97QHaAiU7D7jc42ieT32OK4MYdfmVSl2+tPcoWImOKu
7C/g3tOIx7/01Op8a5oJ4xIih9UiRknQbIrBRcoLWpi7DUOE/5GBLmsjvdp21wmV
VpX3SEk9IbHG7RPg50X8mMJlYND06pQ0DIhM04Lxui/PblYFlAHScKxMocgVDsGr
JJyQ4SDYRcwKfvKq5PMs8O2MMG2jQHwUddMZGAzzu6FcuKjl8VxoT6bfnLLbf6oe
gTJXq8NSJn3j/TJswwagbnI2
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:15 2026 by rpki-client