
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json)
Hash identifier: xaqzLBhh4mhU9Ir6NplVLYE9TAnkN7BGk+2pRoBcbUg=
Subject key identifier: 04:D0:0F:B0:1F:9D:7A:2D:DA:B7:FA:F4:E3:45:A0:77:C5:C3:15:D1
Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
Manifest number: 010C
Signing time: Fri 17 Apr 2026 05:53:57 +0000
Manifest this update: Fri 17 Apr 2026 05:53:56 +0000
Manifest next update: Fri 24 Apr 2026 05:53:56 +0000
Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: jeDnCYA2O5BFvqZ/IT5cvXtI6Gase78nzY7lZ1xdTwg=)
2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: AnjAiTf0IpBEVdDJWZEsvOkkZMp+zUd6UgWlYagXJ9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Validity
Not Before: Apr 17 05:53:56 2026 GMT
Not After : Apr 24 05:53:56 2026 GMT
Subject: CN=69e1caf5-3cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ac:48:52:cf:34:82:97:4f:dd:00:f1:37:68:
f8:8d:e5:f5:ec:1c:5b:f4:ea:64:72:80:fe:a8:11:
0d:1a:9f:8d:48:eb:70:a3:b3:d5:65:12:9a:b8:f4:
5d:ed:76:6f:af:da:12:6e:ac:e9:a3:99:26:4f:1c:
05:4f:1b:2b:10:5a:69:a0:09:38:53:d4:d6:cc:81:
42:3a:2a:8a:a8:99:83:79:fc:e3:0a:65:b9:67:e4:
55:31:0a:96:e0:11:f3:6c:c0:f8:02:09:d2:e4:9d:
83:c3:c9:8d:68:25:d6:fd:7d:a2:ec:52:be:f6:59:
08:40:4f:06:63:2d:ef:65:0f:4b:47:8b:a8:32:35:
5d:01:8d:4d:7a:5b:3c:2b:66:c3:7c:83:9b:bc:40:
9c:27:71:91:32:3b:1b:a5:11:2a:77:d5:2e:1d:5f:
a4:85:d1:fd:3b:cb:cd:1f:0d:75:d2:c3:d4:f8:66:
d3:85:66:50:c5:d6:af:6b:35:00:8e:9f:6d:8e:d9:
4c:41:13:3f:38:50:c8:59:4b:b6:e6:4e:aa:50:7c:
15:37:8a:fd:29:aa:c0:f0:ea:bf:b2:c7:aa:6e:e4:
1c:ff:54:bd:47:fd:21:78:fe:ba:7f:84:e1:62:71:
2f:c7:f0:22:5d:d7:d0:a2:bb:4a:3e:e9:3f:16:6f:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D0:0F:B0:1F:9D:7A:2D:DA:B7:FA:F4:E3:45:A0:77:C5:C3:15:D1
X509v3 Authority Key Identifier:
keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:db:54:b8:c3:4a:29:6e:ec:5f:7a:fb:55:0a:fa:ca:4b:19:
c4:dd:d7:35:95:9a:c1:15:ef:7f:25:71:cb:ca:38:28:69:12:
35:dc:6c:a4:22:54:bb:3e:22:e0:6c:d9:67:7a:23:ce:36:92:
01:6c:60:cc:fb:cf:b5:44:bb:e3:23:02:ac:ea:87:17:e1:41:
ac:4e:8a:6d:68:05:38:44:9b:f6:8b:57:84:7e:2d:8b:28:ae:
6b:31:b1:16:02:d6:9e:fe:2f:01:37:c1:5c:de:7d:16:85:56:
66:8f:c5:85:eb:09:7d:d6:1c:04:26:16:ea:a7:06:32:a6:92:
85:34:99:b8:3b:51:16:04:a1:17:bf:fd:e9:78:2d:25:8a:02:
46:8a:62:e0:e4:63:02:04:12:a4:76:73:89:98:16:13:28:14:
3a:1f:a9:67:e7:57:62:4b:16:c9:6e:15:35:1d:e3:ac:80:2a:
64:26:2a:c5:e5:32:d1:90:18:00:3e:e7:4e:32:17:c6:41:6c:
7d:14:ab:fa:52:ca:a5:ad:c5:db:07:fd:3e:ec:51:4c:0c:22:
9b:be:51:22:cb:c3:4e:f6:c3:f0:57:7c:ad:14:f8:f8:ba:37:
c3:5e:3b:b7:2c:b2:7c:e8:7b:59:72:ca:a2:a0:77:f4:5a:19:
ea:85:de:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:24 2026 by rpki-client