
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
File: QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft (raw, json)
Hash identifier: B7wp+UbJIc6kbT8h/6wYYZZKCJZT8rylPlrqMj/8N6k=
Subject key identifier: B2:A1:DA:72:92:AF:0C:65:BD:F8:B6:8E:56:4C:44:65:E8:FD:7B:24
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Certificate issuer: /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial: 05F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
Manifest number: 0E13
Signing time: Tue 28 Jul 2026 21:26:12 +0000
Manifest this update: Tue 28 Jul 2026 21:26:11 +0000
Manifest next update: Tue 04 Aug 2026 21:26:11 +0000
Files and hashes: 1: QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl (hash: 2sf19QihOB9NzUbTKISqkOD4sIoCU23g+CSVFJLKF0E=)
2: A291634816B711ECBD752D47C4F9AE02.roa (hash: 90gg9p9hqCqXZqb9rZEtlIQBjTiadOFi/oal1s/i89k=)
3: A3E3640816B711ECBD752D47C4F9AE02.roa (hash: f2I2JUyPVwawA2Jitwp6FbWujLi61XO5prWcR/JL+8o=)
4: A3583B2616B711ECBD752D47C4F9AE02.roa (hash: eXwz4PBP+rkDjztNy2SDSGV8UgeMg6eew855+0UUdP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Validity
Not Before: Jul 28 21:26:11 2026 GMT
Not After : Aug 4 21:26:11 2026 GMT
Subject: CN=6a691e74-93a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:e4:45:7d:2f:5f:4d:3e:d7:7d:eb:04:ef:
70:24:0b:03:11:22:1c:e3:7c:da:6c:ab:17:87:43:
93:b6:e1:a9:50:86:70:4a:8d:a2:86:23:65:91:1b:
9b:1a:33:ba:86:3d:45:7e:1b:e3:4f:45:f7:d2:0b:
f6:64:6b:03:fb:77:98:6a:7f:09:df:ea:83:d4:bf:
62:dc:7a:d4:2d:0c:a0:cb:79:58:65:16:21:d7:34:
c0:21:29:d5:83:57:6a:25:65:aa:a7:ec:db:5c:66:
8a:76:25:1e:39:03:5d:33:cf:14:a3:eb:16:92:09:
f5:fe:6d:fe:94:e8:17:36:c2:37:cd:2a:e2:70:2a:
78:04:f7:06:0a:dd:0d:0b:88:2c:a4:af:ed:67:96:
df:b1:d2:23:93:80:7e:73:83:1b:3a:0f:d3:32:1a:
0b:7f:9f:82:fe:d3:1f:58:b4:c1:2d:7a:1b:5d:92:
8a:ff:70:a9:4a:d9:3d:87:c0:de:d4:80:70:ab:93:
fa:18:f8:b8:5b:7e:58:da:00:85:3e:ab:be:d8:bb:
74:47:7f:2a:8e:a0:b7:4f:0a:b8:91:a0:fa:99:9b:
1c:86:53:d1:a6:ab:4e:b0:99:25:37:d8:27:28:8d:
4c:c7:3f:e9:45:5c:27:24:da:6b:cf:bb:d4:e4:74:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:DA:72:92:AF:0C:65:BD:F8:B6:8E:56:4C:44:65:E8:FD:7B:24
X509v3 Authority Key Identifier:
keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:34:b1:9a:8c:be:e0:67:f4:cd:10:9c:c6:e1:57:31:ab:d0:
29:1d:87:05:c4:a9:df:de:be:99:2d:27:39:2a:e3:13:9e:5b:
18:87:2c:19:ac:61:76:0b:51:86:3e:68:49:c3:0b:b8:27:ff:
2c:c8:a6:0e:ca:70:5a:08:0b:d0:e7:c5:40:41:9d:69:d7:12:
fa:cf:c0:ca:9f:66:f2:46:79:d4:58:13:fc:e6:17:5a:ce:52:
16:63:4a:30:00:3f:bb:9c:35:70:29:4f:5b:51:1e:ca:5d:e3:
da:94:f0:bd:8e:fe:f8:45:6e:c8:69:41:3f:90:4c:8e:6c:3f:
4d:9a:00:14:c1:44:03:37:76:95:da:1f:25:82:94:a4:91:f0:
96:97:fa:2b:de:26:f7:06:e5:11:1c:27:ad:3c:b4:6b:52:32:
9b:d2:ff:0b:53:19:7c:a7:79:7f:7e:e3:c9:0e:81:25:c4:c5:
af:7e:68:d2:0c:83:a3:f5:33:16:cf:d6:ea:b5:f5:8b:7b:96:
d5:b9:a9:92:5b:2c:46:4b:ec:12:f7:2b:b8:b2:ab:52:8d:c6:
07:86:09:4b:94:f6:ed:2c:5a:31:70:1d:22:31:af:ad:32:16:
e0:80:95:a8:64:8c:80:7b:6e:6d:0f:91:35:ce:76:64:64:f5:
a8:8f:e1:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg5MUQxMTAvBgNVBAUTKDQxRDI2OEM1MTEzRUYzRUQ3QjE3M0I3ODBFMDE3RUQz
RkU4NTU1RjcwHhcNMjYwNzI4MjEyNjExWhcNMjYwODA0MjEyNjExWjAYMRYwFAYD
VQQDEw02YTY5MWU3NC05M2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJfkRX0vX00+133rBO9wJAsDESIc43zabKsXh0OTtuGpUIZwSo2ihiNlkRub
GjO6hj1FfhvjT0X30gv2ZGsD+3eYan8J3+qD1L9i3HrULQygy3lYZRYh1zTAISnV
g1dqJWWqp+zbXGaKdiUeOQNdM88Uo+sWkgn1/m3+lOgXNsI3zSricCp4BPcGCt0N
C4gspK/tZ5bfsdIjk4B+c4MbOg/TMhoLf5+C/tMfWLTBLXobXZKK/3CpStk9h8De
1IBwq5P6GPi4W35Y2gCFPqu+2Lt0R38qjqC3Twq4kaD6mZschlPRpqtOsJklN9gn
KI1Mxz/pRVwnJNprz7vU5HRJ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKh2nKS
rwxlvfi2jlZMRGXo/XskMB8GA1UdIwQYMBaAFEHSaMURPvPtexc7eA4BftP+hVX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD
QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgtMTdGenQ0RGdGLTBfNkZW
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FkSm94UkUtOC0xN0Z6dDREZ0YtMF82RlZmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9RZEpveFJFLTgt
MTdGenQ0RGdGLTBfNkZWZmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANzSxmoy+4Gf0zRCcxuFXMavQKR2HBcSp396+mS0nOSrjE55bGIcsGaxhdgtR
hj5oScMLuCf/LMimDspwWggL0OfFQEGdadcS+s/Ayp9m8kZ51FgT/OYXWs5SFmNK
MAA/u5w1cClPW1Eeyl3j2pTwvY7++EVuyGlBP5BMjmw/TZoAFMFEAzd2ldofJYKU
pJHwlpf6K94m9wblERwnrTy0a1Iym9L/C1MZfKd5f37jyQ6BJcTFr35o0gyDo/Uz
Fs/W6rX1i3uW1bmpklssRkvsEvcruLKrUo3GB4YJS5T27SxaMXAdIjGvrTIW4ICV
qGSMgHtubQ+RNc52ZGT1qI/hPQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:37 2026 by rpki-client