
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier: 2B74zy46WjFCo4qm0mku9zo0P/tJ+RR1b9Mig8uEYzM=
Subject key identifier: BA:44:9F:2D:66:54:25:6D:AA:D4:70:D0:96:EE:A4:96:19:44:F4:3D
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial: 0248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number: 0242
Signing time: Mon 11 May 2026 02:31:16 +0000
Manifest this update: Mon 11 May 2026 02:31:15 +0000
Manifest next update: Mon 18 May 2026 02:31:15 +0000
Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: N2bN3TCmCzapMeuh58iZsJ7V0C8khhy5nGJsV3R6A4A=)
2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: NkxHKbtoUp0+3tPsUIQtJd1qKCp6YkrV3mW/saca7sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Validity
Not Before: May 11 02:31:15 2026 GMT
Not After : May 18 02:31:15 2026 GMT
Subject: CN=6a013f74-4b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:72:12:97:00:07:22:da:f3:f0:de:fe:14:
3a:1b:d1:24:ee:40:50:75:cd:24:bc:6a:ce:7b:1d:
75:5a:4e:f5:03:e8:9a:49:0c:52:ee:73:89:22:e1:
97:d1:aa:e7:e1:9a:77:a8:1d:8e:33:99:89:3d:78:
81:26:e2:86:f0:24:41:42:31:20:a0:b6:72:e9:66:
9c:c6:d9:48:ae:9c:8b:54:1e:34:4e:b2:b4:6f:13:
c8:8c:99:0f:4a:7e:f7:da:c4:a1:57:ff:ee:90:5d:
23:81:8e:f0:42:3e:fa:b8:c4:2d:83:6f:28:0b:27:
95:3c:42:7c:9e:71:2b:30:49:18:27:5b:1a:93:73:
55:78:1a:73:02:e7:6d:cb:87:48:0d:c9:07:75:99:
9d:ef:0c:19:7b:77:34:ac:9c:cf:41:a2:6a:1e:ea:
05:22:eb:4d:52:2b:4b:aa:3c:77:86:06:8f:77:8b:
27:78:bf:df:8a:0f:3a:3c:77:68:48:0a:7e:02:9a:
2f:ac:b9:a1:31:e4:6c:2b:2f:d1:c3:d0:c6:16:04:
5e:7a:2c:3a:79:c3:3f:d1:27:c4:09:ae:a2:0b:e7:
b5:05:d1:1e:4b:ea:20:14:ef:98:73:53:63:3f:d4:
13:1f:8a:5c:9d:36:64:de:c3:4d:69:14:14:5c:e5:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:44:9F:2D:66:54:25:6D:AA:D4:70:D0:96:EE:A4:96:19:44:F4:3D
X509v3 Authority Key Identifier:
keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:16:19:96:56:6d:39:99:16:0e:80:f7:ec:ca:9a:59:8b:
61:eb:3f:a7:5f:59:29:af:95:ae:a2:33:48:fc:1c:39:7b:f5:
fe:74:65:59:8e:be:59:d4:ec:a3:15:2f:cc:34:4e:5f:2d:e1:
f5:ae:fc:89:85:a2:b3:cb:73:15:8a:1a:e3:35:11:c3:cc:48:
d9:6e:7c:a0:64:72:b3:52:d3:52:ec:b5:1d:92:17:78:cb:c7:
57:38:da:3d:68:50:75:3f:c4:73:aa:af:c2:73:cf:1b:76:0f:
71:cf:d9:7d:ac:c3:5c:54:94:f7:3f:5b:74:30:85:85:76:f8:
e4:d5:fc:73:27:94:66:5b:9a:a3:da:ab:73:07:53:53:90:a2:
ed:e4:3b:80:55:ff:13:63:53:26:b6:71:99:1d:4a:fe:6c:92:
ff:e0:e7:fe:c4:61:43:b7:ab:c5:aa:1b:1a:84:df:eb:d0:6e:
9c:05:8a:4a:97:4d:44:1c:ab:0a:a8:5b:f6:8d:d7:f3:c9:cd:
ef:09:36:73:e0:83:d0:bd:ae:7b:b6:66:53:be:0b:51:98:54:
34:b8:f7:cd:4e:00:0c:10:dd:86:e6:06:71:42:a6:2a:d3:60:
f9:7a:ce:da:c4:c9:b9:42:27:b0:92:31:1c:2b:25:d2:cf:a1:
20:87:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:26:14 2026 by rpki-client