
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier: 3AFGpehj9Su2LT83EQxerWUl1W2X2Dwm7sdYtOyfjg0=
Subject key identifier: AE:E6:B1:EC:CF:06:7B:9A:0A:AB:77:62:5B:4E:AE:D7:64:7D:10:D3
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1F19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number: 3380
Signing time: Wed 22 Jul 2026 15:43:10 +0000
Manifest this update: Wed 22 Jul 2026 15:43:09 +0000
Manifest next update: Wed 29 Jul 2026 15:43:09 +0000
Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: 8CZ95pwkPZFZ2Cp4lXNdgG6QTfHZo8E/lnma1m6oaXc=)
2: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: a2YIRJWcOj/2F2QJjwyVL+lBSin617P7TaoPIuqLmpo=)
3: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: LoSQxFip4nNOrJotlSF6RIr2kx5vjl1KHOV/16F58yQ=)
4: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: XKjx+2JVREc1vEzkeaWV20vVw40lW7PDQ/F2fJTa5K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7961 (0x1f19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Jul 22 15:43:09 2026 GMT
Not After : Jul 29 15:43:09 2026 GMT
Subject: CN=6a60e50e-9067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:16:8f:74:f3:a4:8e:38:8d:b3:34:41:86:
a7:97:1d:e5:6e:80:be:2b:25:40:d2:9b:b4:0c:16:
a3:04:42:ea:29:f8:6a:f1:dc:12:b9:3e:14:2c:bb:
14:4c:fd:ff:d4:4d:4f:cc:94:fd:de:27:e8:a0:e4:
bc:e7:cb:a2:b7:d2:5d:bf:84:90:a8:0c:e2:79:78:
88:05:3d:95:f4:f1:88:bb:8b:8c:2c:03:ee:ce:d1:
0d:33:c8:c0:28:a6:67:73:f8:96:57:b6:7a:2a:76:
5e:32:4d:7f:69:99:a6:05:cd:1f:1f:46:ee:c2:c4:
25:2d:0b:6e:d9:d7:58:d3:fc:19:4c:30:76:79:16:
08:c7:01:ed:fa:08:40:3c:c6:0d:07:a5:2a:d6:d5:
44:ad:e4:c2:4d:cf:a1:ed:73:50:2f:db:ea:80:3d:
8c:84:5e:a9:2f:5a:99:b4:f8:92:5a:6d:c2:96:62:
1f:c9:6d:49:2b:b0:5a:ec:1f:9a:4c:36:f2:3e:42:
52:6e:e2:e1:08:20:cf:86:58:2b:23:28:72:ba:84:
02:4a:5c:e4:72:97:1d:26:a6:8b:d0:3c:cc:63:46:
13:40:ca:b2:ee:71:7f:09:65:13:1f:3e:72:da:82:
c1:bc:ba:eb:74:91:6f:17:a4:b1:0e:64:45:ca:2b:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E6:B1:EC:CF:06:7B:9A:0A:AB:77:62:5B:4E:AE:D7:64:7D:10:D3
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3c:f1:3a:c5:06:be:75:bd:fd:b8:94:be:aa:f3:37:9c:f7:
9f:a1:43:bf:7b:25:8b:16:63:4a:3c:61:e6:58:f6:16:8f:59:
af:84:00:9e:32:55:79:53:1d:b0:16:00:59:cc:96:98:f6:96:
c0:8f:81:f3:bf:2e:25:ce:a8:a4:fc:5b:72:73:c1:e8:22:b9:
6c:a3:89:33:63:3e:6e:e0:a6:b1:e6:54:d1:af:2c:a6:72:9d:
ff:9c:7a:29:85:a8:00:39:03:0a:72:9e:99:6d:c1:70:54:98:
1a:4a:9b:17:1a:21:50:6a:d2:66:12:55:ad:65:8f:9d:91:84:
10:e4:eb:f0:53:52:2f:58:21:3a:7d:5c:cc:cf:58:31:99:45:
27:89:b6:ec:3e:16:49:a5:10:a5:a7:7a:47:1d:2c:b0:0f:3d:
63:2b:4a:07:23:83:6c:2d:ab:24:bf:25:c8:da:2a:df:e0:56:
7e:d1:0b:a6:3d:63:45:ab:d9:dd:c1:50:73:bd:40:0c:53:9f:
dd:d9:9c:67:f8:7b:b2:4f:95:1a:3a:66:8f:42:58:03:2d:97:
1c:5a:0f:ef:00:0f:98:e8:41:eb:51:5e:4c:38:40:7f:f6:9e:
8a:45:33:7f:72:48:7a:2a:5c:c7:63:cc:cf:62:0a:aa:d8:3d:
bd:00:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:39 2026 by rpki-client