
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier: oqxgbWvfIMWldznD1SotfvYSjNjDg0YfpjEO70kQuZ4=
Subject key identifier: 13:F1:FF:AB:E2:80:E9:5E:04:59:5C:16:39:A3:29:A3:F5:D5:E4:3C
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial: 0D51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number: 0D3D
Signing time: Tue 28 Jul 2026 18:11:44 +0000
Manifest this update: Tue 28 Jul 2026 18:11:44 +0000
Manifest next update: Tue 04 Aug 2026 18:11:44 +0000
Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: VmA4jZXPE+z2DRi8w+KrYR9jmXE3sukpuJLT9T0PrOM=)
2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=)
3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3409 (0xd51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Validity
Not Before: Jul 28 18:11:44 2026 GMT
Not After : Aug 4 18:11:44 2026 GMT
Subject: CN=6a68f0e0-269e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:cf:69:bc:ac:73:38:fc:9f:92:2c:fd:8b:
9b:e0:4d:99:06:d8:51:bb:a0:ca:dc:8e:b8:ea:fd:
d0:5e:42:e3:c7:6b:23:92:7a:d8:4b:8c:21:b0:71:
07:51:6f:5d:06:77:06:a2:f1:c3:a1:6d:a4:eb:bb:
69:f4:dd:17:b1:18:c1:12:eb:a3:a5:b0:9e:b7:63:
b2:85:4d:04:7f:9c:d0:63:c3:bb:e9:df:65:3f:e1:
5e:e2:84:52:0f:38:f2:33:af:cb:a9:99:e7:17:f8:
35:dd:ac:6f:09:b0:c3:1f:b7:fd:f0:69:8e:24:72:
0d:90:3e:a0:35:39:6c:a3:cb:48:51:83:e7:33:6b:
86:97:ad:03:1a:38:21:1a:5d:d2:31:c1:2d:74:19:
01:07:9c:4b:62:43:e1:ed:53:2e:dc:6f:4b:29:73:
dc:c4:61:73:91:b7:4b:35:f2:b1:ae:f3:44:63:33:
36:35:9d:e9:0b:24:52:5d:e8:3c:99:16:f1:22:83:
7f:bb:f3:14:c5:c0:41:f3:87:24:0b:ac:18:04:48:
52:5a:36:2b:63:c4:a9:90:2c:53:da:f3:11:54:8c:
49:aa:ff:66:d0:21:8f:cc:60:4c:6c:98:60:b4:98:
48:fe:2b:ec:36:25:0c:bb:c7:82:cb:57:35:dc:a1:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F1:FF:AB:E2:80:E9:5E:04:59:5C:16:39:A3:29:A3:F5:D5:E4:3C
X509v3 Authority Key Identifier:
keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fa:92:64:13:28:d9:71:c7:e6:76:8b:2f:9a:72:49:3e:93:
fa:34:01:69:96:04:ed:da:97:fb:62:58:53:5e:90:de:e9:bc:
f8:67:88:53:04:32:86:1d:21:5e:0a:38:cb:e5:93:62:08:50:
fa:07:c1:7e:94:01:bd:d8:30:cd:d6:27:c3:e1:8c:e7:12:c6:
11:39:dc:8a:48:73:96:51:58:45:86:7c:ea:ad:6f:8b:85:27:
97:35:62:fb:ed:ab:9e:ee:86:82:2d:37:1c:fb:5f:78:79:24:
c8:8e:6a:86:1d:cd:a2:d7:6f:61:95:84:96:89:7e:7b:bc:41:
08:27:5a:3d:bb:a1:b2:7e:3e:03:78:9c:de:28:c6:45:01:85:
d2:ae:cb:aa:9b:e7:8c:c4:4c:f0:a6:86:f8:06:6f:9a:5a:f5:
b3:2d:25:96:7a:ec:8e:49:e9:b6:f3:93:b8:89:30:4d:b8:ed:
9b:c9:55:13:92:3b:27:42:3e:09:88:42:9b:75:3d:f1:9b:94:
37:89:d4:6d:bc:a0:a8:ff:6d:2f:e6:47:03:d4:bc:fd:41:ea:
96:3f:dc:7a:ec:ae:86:7e:59:8d:13:3c:d8:15:51:91:d2:87:
99:f6:84:d7:bd:67:61:8d:fe:d4:fc:8b:b1:49:aa:f8:07:ec:
b5:da:e3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:57 2026 by rpki-client