
$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json)
Hash identifier: 7RsI7vLn9KmKU6tlck0Iq/twXlkPi+H0QTOt/p6RYe4=
Subject key identifier: 1F:15:D9:4F:6D:6A:4C:83:1E:8A:17:FA:13:77:FE:58:FB:AC:81:BF
Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Certificate serial: 028F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
Manifest number: 0287
Signing time: Sat 13 Jun 2026 01:53:27 +0000
Manifest this update: Sat 13 Jun 2026 01:53:27 +0000
Manifest next update: Sat 20 Jun 2026 01:53:27 +0000
Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: lg9YTugIYrlssr7VZA7tC01Gzw41QQfUm1iIq1WQfNY=)
2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Validity
Not Before: Jun 13 01:53:27 2026 GMT
Not After : Jun 20 01:53:27 2026 GMT
Subject: CN=6a2cb817-88e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:9e:89:77:7f:3f:d5:e6:06:ea:e4:f3:ca:
32:54:e6:a9:2b:1e:be:52:63:7c:75:e9:a0:20:77:
d6:f5:01:00:42:e9:5b:fe:ea:22:d1:7d:d3:41:7e:
3a:af:0e:c8:7d:1f:d6:d4:96:4a:d3:65:17:6d:97:
9e:35:cf:f1:5f:bf:e6:1e:45:cb:39:50:ce:f8:9e:
1f:c1:6a:8a:e3:8c:c4:83:68:f8:f6:02:52:4b:50:
53:be:e9:94:5a:38:3b:a9:6a:b3:de:5d:b6:8d:c4:
9e:2a:82:3f:0f:af:dd:37:cd:22:da:5f:4b:ea:8f:
08:a4:ab:ff:9a:00:60:09:42:2e:bd:51:87:70:ef:
b4:15:35:8c:77:25:e7:e7:c4:fb:04:f7:1c:f3:e3:
bc:38:66:f6:5c:68:d9:ff:5b:c9:75:24:4e:ad:df:
6b:23:d3:01:6d:b1:95:35:2b:ab:b8:1d:7f:19:00:
e4:61:eb:5d:2e:f6:ff:69:b7:e6:10:72:98:e9:ff:
60:b4:49:0b:d5:11:80:75:a2:04:93:8b:56:21:21:
e0:ec:e5:ec:b7:e1:fb:1f:8e:2f:a4:74:b2:c1:b9:
8b:77:09:80:16:5c:59:83:e4:89:d9:16:d4:34:62:
16:22:c8:fc:8f:d3:b2:8b:a6:37:6d:2f:e9:b0:a7:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:15:D9:4F:6D:6A:4C:83:1E:8A:17:FA:13:77:FE:58:FB:AC:81:BF
X509v3 Authority Key Identifier:
keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e4:27:0f:7f:fe:d6:79:85:4a:cf:c7:fc:29:1f:60:6b:44:
a4:17:7c:a7:ca:b9:b5:65:7c:3d:b0:d1:0c:2b:ff:19:e2:ef:
cf:a5:68:3f:d5:bf:d8:50:91:6a:20:0c:44:3d:80:a2:93:85:
0b:6e:dd:d8:e7:8b:6b:69:0d:c1:9e:e1:5f:c8:dc:d2:ef:2d:
f2:90:f8:59:5f:8d:50:f3:9f:1e:d7:de:b1:6c:e8:04:a1:fd:
8c:aa:dd:e5:91:db:78:85:2c:c2:c0:50:e5:b2:fc:0b:84:c2:
b0:35:85:fe:fd:13:d8:55:b2:22:19:f9:39:29:51:3f:e8:e2:
cc:7c:3f:88:b7:92:07:9b:2c:e4:97:39:c7:51:0a:c8:48:61:
16:48:89:fd:d8:e1:a1:c0:93:f7:60:db:80:3e:30:df:3d:79:
be:61:da:08:3c:d7:7d:5a:bc:98:26:ae:6e:d7:c5:8c:72:1e:
41:3d:46:75:15:96:c6:4f:70:6a:1b:d0:4f:f0:18:69:77:ae:
81:67:40:6e:fb:32:7d:2f:58:9c:df:54:44:54:98:5c:86:45:
0a:19:1d:60:00:96:7c:50:6b:3c:8b:b2:3d:d1:ad:fa:12:9b:
1d:08:a9:81:ef:0b:7b:5a:17:be:ab:06:a2:dc:7d:b8:6f:ff:
5b:c9:0d:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky
QjI1Q0RFQ0YwHhcNMjYwNjEzMDE1MzI3WhcNMjYwNjIwMDE1MzI3WjAYMRYwFAYD
VQQDEw02YTJjYjgxNy04OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscaeiXd/P9XmBurk88oyVOapKx6+UmN8demgIHfW9QEAQulb/uoi0X3TQX46
rw7IfR/W1JZK02UXbZeeNc/xX7/mHkXLOVDO+J4fwWqK44zEg2j49gJSS1BTvumU
Wjg7qWqz3l22jcSeKoI/D6/dN80i2l9L6o8IpKv/mgBgCUIuvVGHcO+0FTWMdyXn
58T7BPcc8+O8OGb2XGjZ/1vJdSROrd9rI9MBbbGVNSuruB1/GQDkYetdLvb/abfm
EHKY6f9gtEkL1RGAdaIEk4tWISHg7OXst+H7H44vpHSywbmLdwmAFlxZg+SJ2RbU
NGIWIsj8j9Oyi6Y3bS/psKebrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8V2U9t
akyDHooX+hN3/lj7rIG/MB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE
REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s
WkNUMTdxSlBZcWtySmMzczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACuQnD3/+1nmFSs/H/CkfYGtEpBd8p8q5tWV8PbDRDCv/GeLvz6VoP9W/2FCR
aiAMRD2AopOFC27d2OeLa2kNwZ7hX8jc0u8t8pD4WV+NUPOfHtfesWzoBKH9jKrd
5ZHbeIUswsBQ5bL8C4TCsDWF/v0T2FWyIhn5OSlRP+jizHw/iLeSB5ss5Jc5x1EK
yEhhFkiJ/djhocCT92DbgD4w3z15vmHaCDzXfVq8mCaubtfFjHIeQT1GdRWWxk9w
ahvQT/AYaXeugWdAbvsyfS9YnN9URFSYXIZFChkdYACWfFBrPIuyPdGt+hKbHQip
ge8Le1oXvqsGotx9uG//W8kNDw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:17:26 2026 by rpki-client