
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier: 2YhRcM8ezSULYbpQRWJrFqwC5QOcnMpIWrW4JPGbSPs=
Subject key identifier: DB:6F:E5:76:F5:AA:9C:1D:41:27:C4:C2:B6:55:DE:C0:72:1B:67:EF
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial: 0D1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number: 0CF2
Signing time: Sat 18 Apr 2026 18:20:04 +0000
Manifest this update: Sat 18 Apr 2026 18:20:03 +0000
Manifest next update: Sat 25 Apr 2026 18:20:03 +0000
Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: HG8thYqOOgR8+fPa1bNx3QgGL2e4xq9zxfOhD6hWvN4=)
2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: fs8vNdHPTeEjIkaHFCo8i9QI5xttWL2wCiA1UOJja1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3357 (0xd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Validity
Not Before: Apr 18 18:20:03 2026 GMT
Not After : Apr 25 18:20:03 2026 GMT
Subject: CN=69e3cb54-cba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:74:03:87:91:07:39:3b:f6:64:a4:66:5b:
ca:20:a8:c0:c3:ef:c4:a9:58:66:47:93:7d:16:a5:
cf:7c:27:47:62:19:6a:02:1c:88:52:25:67:e6:06:
12:e8:c7:69:92:67:15:29:22:d2:81:25:c5:52:91:
e4:1d:df:61:86:bc:dd:e1:fb:2b:e5:01:b3:30:b8:
42:67:67:3b:66:69:76:c1:8f:30:24:08:f3:5a:03:
af:1e:73:5c:d8:96:f2:62:3d:c6:5e:51:b6:3c:88:
4b:3c:98:c2:ec:1c:df:92:6f:d8:0c:a2:b0:ca:d8:
13:b3:12:6b:8e:ed:55:76:4a:5f:79:bb:fe:67:27:
0a:9e:31:2c:bb:f8:52:ab:73:37:d1:6c:26:ca:22:
84:17:f7:d2:ec:af:8d:12:89:29:03:f7:fc:5e:8a:
f5:86:5c:b7:7b:90:69:56:73:d5:b2:ff:35:07:26:
0a:ac:47:62:9e:29:53:21:03:c5:98:33:1f:9e:87:
39:c1:06:4e:3a:08:6f:d2:6d:ea:67:67:58:35:40:
90:5a:ea:3a:d4:fb:e6:e8:b1:95:47:6b:c3:eb:04:
26:6f:c0:da:9b:c0:18:76:f3:4e:a4:7f:f5:7b:72:
8e:26:6c:de:b5:84:67:91:13:1e:ac:9b:74:d3:09:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6F:E5:76:F5:AA:9C:1D:41:27:C4:C2:B6:55:DE:C0:72:1B:67:EF
X509v3 Authority Key Identifier:
keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:15:eb:d8:dd:f2:e2:9d:3a:2d:81:e1:09:f2:eb:eb:6f:d3:
ab:70:f1:61:2f:f0:a7:69:db:b6:af:ce:9a:44:ad:97:fd:c9:
47:ed:a8:48:03:5c:bf:13:e6:24:41:36:6f:96:78:42:b9:67:
b3:7d:62:32:19:3a:38:e2:6d:a5:cf:b6:0c:22:50:85:07:96:
c9:cf:79:e8:19:d6:06:50:bb:60:29:72:04:e6:1c:da:e0:dc:
f6:72:b7:f2:c6:6f:fe:57:53:ac:ba:5d:6e:a3:c0:64:50:d7:
d6:94:69:eb:34:1c:6c:b4:7c:57:80:47:be:dc:5e:5f:a8:23:
6f:14:45:20:e0:0c:23:66:dd:15:78:60:0f:43:23:66:ce:8e:
6e:c1:18:6b:e4:8e:65:3d:f3:da:59:7b:a9:13:3f:49:11:5a:
d9:91:17:ea:ee:a7:35:d5:8f:25:77:9a:ff:a6:48:92:c4:5d:
7e:d5:62:61:7e:53:72:f6:0e:15:9c:d2:df:1f:ce:df:e7:a8:
de:64:31:f4:76:2e:3c:c7:29:17:0c:70:40:f7:23:c3:fc:9f:
e7:38:d5:d6:b0:43:f6:1b:a3:c0:ac:d0:2b:77:d5:a7:e6:a8:
ef:60:68:d3:4b:8e:61:2d:6c:f9:b2:75:14:02:d4:6b:96:0a:
5d:b1:4c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:29 2026 by rpki-client