
$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier: uifeN1UKugiflkc8HX5rop8pQQ9hA/yc1ZB0x6f1gGk=
Subject key identifier: D6:B6:B2:FD:0F:E2:3A:FC:CD:27:F7:52:87:04:AA:0E:F0:05:34:C9
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial: 047F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number: 0478
Signing time: Sun 01 Mar 2026 00:49:11 +0000
Manifest this update: Sun 01 Mar 2026 00:49:10 +0000
Manifest next update: Sun 08 Mar 2026 00:49:10 +0000
Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: 4eRHTZLXochO7cHlXgQy2iWHwSNm+Iu+tALr4Q4439U=)
2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: nH/LwYYai4yyYtR5+FsgF3NxGTHmzQuh60VcXhlakk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Validity
Not Before: Mar 1 00:49:10 2026 GMT
Not After : Mar 8 00:49:10 2026 GMT
Subject: CN=69a38d06-5459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:80:ae:c1:71:4e:f4:cf:2f:c9:9f:25:5f:
87:e3:3e:17:31:df:a4:f2:67:b1:3e:7d:be:1c:33:
62:ef:bc:d8:9d:16:78:2d:80:3d:2f:f8:44:a0:0e:
1d:7c:d2:ae:36:19:c5:d8:9c:bb:76:80:cc:dd:59:
a5:1b:98:d1:d4:05:66:79:34:fd:42:02:d3:c3:8f:
82:d9:24:8a:8b:82:a5:f0:bd:29:b6:b3:c8:7f:c3:
68:22:fc:6d:e1:67:31:1f:cd:29:49:a0:95:db:07:
76:82:61:a8:23:21:44:eb:82:c3:6b:ef:da:65:eb:
e2:e6:39:26:63:14:b3:35:af:36:ab:4d:7f:4c:3f:
65:d9:b7:d9:cd:20:8b:47:68:e7:4e:b7:dd:3e:d0:
42:9e:ed:f4:f2:2e:1f:01:a0:38:97:2f:d9:cf:b1:
3e:21:43:e1:70:74:2a:a1:3e:bd:65:1a:ac:49:f7:
a4:09:0e:fd:3b:ab:d3:d6:6e:e1:dd:03:00:b6:88:
f6:c2:4b:c2:4f:8f:09:fc:09:17:d1:e5:30:34:ae:
d2:fe:aa:75:fe:81:cb:97:4b:63:4f:c6:80:8f:eb:
46:4f:3c:c6:33:b5:6a:3b:08:27:ab:21:47:63:b0:
4a:87:f8:4c:97:c6:10:ff:e1:9c:25:0a:10:39:64:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B6:B2:FD:0F:E2:3A:FC:CD:27:F7:52:87:04:AA:0E:F0:05:34:C9
X509v3 Authority Key Identifier:
keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:2b:00:72:0e:11:fc:f0:d1:cb:18:52:ca:0a:46:e2:5e:10:
21:94:14:f3:12:da:c4:af:73:92:c6:56:90:24:67:fb:26:41:
dc:72:60:59:ac:c1:25:42:49:d7:98:67:84:25:ed:60:32:a8:
66:0b:30:97:73:80:ab:84:2e:ba:fc:7f:8b:be:aa:b1:c4:af:
98:9c:db:f9:6f:6f:e6:62:f8:35:44:53:af:d2:78:6d:e6:10:
93:1a:de:3b:cc:25:51:85:16:17:e0:2e:0a:35:7b:5e:4a:37:
fe:fd:0b:1b:23:56:aa:0a:a1:8f:a5:5a:21:2d:56:88:41:4a:
ba:e4:78:8d:28:56:46:4f:09:db:db:83:76:c1:ba:6c:5a:6e:
40:5e:5d:a2:f9:a5:aa:0c:34:c5:89:2a:6f:be:9a:03:f3:5f:
78:d5:98:a5:6d:99:cf:39:49:38:5c:39:71:99:ea:8f:e3:0f:
de:93:3a:dc:71:c4:cb:3f:68:b3:29:0f:c5:7c:98:19:57:4a:
e4:79:b5:e2:d1:46:21:8e:f0:63:c9:30:37:97:d4:fc:9c:c7:
40:a7:fe:a4:b4:fb:85:c4:48:83:1f:b5:f5:c8:96:75:c6:6d:
24:3b:9c:9f:d9:a8:c9:20:9d:cf:0d:fb:b5:38:a9:52:32:39:
61:85:fe:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA4RTExMTAvBgNVBAUTKDQwOUQwMTFFODkzRkQ4QzhGMEIzRThBQzE0NjkyQUE3
QkI5RDAyNTkwHhcNMjYwMzAxMDA0OTEwWhcNMjYwMzA4MDA0OTEwWjAYMRYwFAYD
VQQDDA02OWEzOGQwNi01NDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkpaArsFxTvTPL8mfJV+H4z4XMd+k8mexPn2+HDNi77zYnRZ4LYA9L/hEoA4d
fNKuNhnF2Jy7doDM3VmlG5jR1AVmeTT9QgLTw4+C2SSKi4Kl8L0ptrPIf8NoIvxt
4WcxH80pSaCV2wd2gmGoIyFE64LDa+/aZevi5jkmYxSzNa82q01/TD9l2bfZzSCL
R2jnTrfdPtBCnu308i4fAaA4ly/Zz7E+IUPhcHQqoT69ZRqsSfekCQ79O6vT1m7h
3QMAtoj2wkvCT48J/AkX0eUwNK7S/qp1/oHLl0tjT8aAj+tGTzzGM7VqOwgnqyFH
Y7BKh/hMl8YQ/+GcJQoQOWQ9owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNa2sv0P
4jr8zSf3UocEqg7wBTTJMB8GA1UdIwQYMBaAFECdAR6JP9jI8LPorBRpKqe7nQJZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDhFMS9GOTBGOUU4ODdF
ODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJNandzLWlzRkdrcXA3dWRB
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FKMEJIb2tfMk1qd3MtaXNGR2txcDd1ZEFsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDhFMS9GOTBGOUU4ODdFODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJN
andzLWlzRkdrcXA3dWRBbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARSsAcg4R/PDRyxhSygpG4l4QIZQU8xLaxK9zksZWkCRn+yZB3HJgWazBJUJJ
15hnhCXtYDKoZgswl3OAq4Quuvx/i76qscSvmJzb+W9v5mL4NURTr9J4beYQkxre
O8wlUYUWF+AuCjV7Xko3/v0LGyNWqgqhj6VaIS1WiEFKuuR4jShWRk8J29uDdsG6
bFpuQF5dovmlqgw0xYkqb76aA/NfeNWYpW2ZzzlJOFw5cZnqj+MP3pM63HHEyz9o
sykPxXyYGVdK5Hm14tFGIY7wY8kwN5fU/JzHQKf+pLT7hcRIgx+19ciWdcZtJDuc
n9moySCdzw37tTipUjI5YYX+YQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:42 2026 by rpki-client