
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json)
Hash identifier: MAxsV4wrLSE979wwIMqMSIsjkdnzgXTjHcYX64cUA/Y=
Subject key identifier: 0D:7B:F0:BA:31:67:67:66:02:23:B0:39:3F:F0:C4:67:A7:54:20:6E
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0BE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
Manifest number: 0B1F
Signing time: Thu 24 Sep 2026 19:27:39 +0000
Manifest this update: Thu 24 Sep 2026 19:27:38 +0000
Manifest next update: Thu 01 Oct 2026 19:27:38 +0000
Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: 7I0Q7c9pWjH0YI69WriQQoayGIxp20951WlsX86/EaY=)
2: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: wZo18R1LnD+2k6h4J7pMIrHXFSVwyqxLJaqUcBl2koQ=)
3: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: sw6eH1M5hEn6a0pc3B0uLVLZCRXvmEkQN01rQxgEvj0=)
4: 553170245AC511EBA052F663C4F9AE02.roa (hash: NBDkJIuqHlF4I8cMlSivAAbBMzPvILaMaBqKjeLV/KQ=)
5: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: GhZxcNMvyQlSrFSWmku1+ahVlAxZoEGclnQbU2Qrymw=)
6: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: SkOhlI1Sq/LIctQQV3ASYYQ+aRYJDMBcBGKvl4fYf/A=)
7: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: wpGRFC6+DwJQoD/Bm6hMgYO5Gr04EgHxiy8sbfP7iA8=)
8: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: GKBnrOK5UbpE6Y1zn126/+tVLBVe3fXMAkHrduoxCcI=)
9: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: LpUWhMMembbOWPh50IbGhsLcg7v+awk6J0ISPizwZwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Sep 24 19:27:38 2026 GMT
Not After : Oct 1 19:27:38 2026 GMT
Subject: CN=6ab579ab-2d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:51:3b:13:b7:ef:00:38:da:57:83:fa:c3:
17:ee:8e:99:dc:95:32:59:c1:48:9c:63:d5:89:df:
97:f9:ea:15:3e:09:08:45:08:fe:53:0d:a4:fb:f3:
13:5b:38:27:1d:a6:dd:2e:e7:bd:0b:25:24:7c:5e:
15:98:01:3b:5d:92:cb:f5:3d:23:04:4b:09:e8:44:
63:a9:1d:c2:53:67:9b:e4:ba:ed:40:ef:f9:59:20:
a0:a8:43:54:89:a6:15:a1:ff:3e:05:6f:81:ff:13:
a3:28:41:88:fa:de:71:65:01:32:58:ed:51:b7:6d:
62:9e:68:a2:2d:f2:c1:67:97:c4:f5:a7:4c:f4:97:
b5:49:bf:9c:8b:10:09:10:47:fb:32:d1:bc:24:96:
9a:45:a0:ec:ca:e0:67:8b:33:0f:2f:04:45:89:8a:
b3:09:34:df:ce:6e:dc:28:3b:b8:ee:70:f7:82:7e:
0d:2b:39:b6:da:73:9c:05:f3:50:b1:63:5d:be:ae:
c2:fe:ef:5d:6d:e5:4e:23:b4:23:ea:ea:cf:eb:ff:
f4:5c:3b:3e:2a:76:88:c0:52:4e:51:91:59:48:f9:
22:2d:5d:71:d4:8b:36:8c:c0:32:1b:f6:ff:ab:fd:
9a:a7:22:64:04:97:d3:d8:1c:73:b3:bc:4f:64:81:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7B:F0:BA:31:67:67:66:02:23:B0:39:3F:F0:C4:67:A7:54:20:6E
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a4:47:c9:93:7a:07:33:16:b7:44:b9:71:71:b7:3e:64:4d:
00:a4:0e:b0:43:19:04:69:6a:a5:ad:fd:86:6c:42:54:2e:33:
dc:b6:31:64:65:22:6c:11:e6:13:fd:ba:90:a9:ae:45:d7:66:
c0:d2:c4:73:6a:cd:dc:d1:00:79:65:0a:6a:6e:8f:20:da:6d:
e7:60:ca:80:d8:f1:ec:95:08:6c:dc:a9:8c:41:60:54:a7:b9:
f0:8a:9c:a6:2e:c5:4f:3e:a1:1f:0c:92:b0:2b:fd:18:c5:71:
a0:65:c2:6c:a1:3a:a3:45:3f:4a:eb:9f:c2:e2:ab:52:af:3c:
1b:26:90:fe:11:5a:ea:a6:7f:6f:18:b6:15:e9:b0:88:b7:53:
21:e1:db:8b:1b:9a:42:5b:4a:e7:c2:7a:91:32:ce:c4:9c:c4:
ed:a5:2a:c5:d5:9e:b3:32:c8:78:9a:ad:8e:1e:36:c3:7a:47:
fe:30:a4:e3:de:6b:fa:c0:ca:01:bc:3d:06:73:ef:27:b1:8e:
9b:47:94:9b:f5:4a:67:83:70:71:4c:e9:ca:e9:76:17:ec:45:
50:7e:6b:18:35:1f:a8:ed:7b:88:84:34:cf:6d:3d:ac:5a:88:
45:9b:8b:8c:e3:f7:9b:1c:54:83:62:76:36:d5:44:02:41:d8:
1d:e4:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:18:21 2026 by rpki-client