
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
File: QoezMyF220hqLLxCVAL6nIa23Eg.mft (raw, json)
Hash identifier: nWmtlUC2HoOfayaFBW4cwDM1cp4zi9oL02XzQdQC/qg=
Subject key identifier: 21:FE:F5:09:BD:E3:3B:BD:BA:E0:E3:EF:08:5F:B1:03:E3:F9:6F:C7
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1EF5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
Manifest number: 335C
Signing time: Tue 12 May 2026 15:39:25 +0000
Manifest this update: Tue 12 May 2026 15:39:25 +0000
Manifest next update: Tue 19 May 2026 15:39:25 +0000
Files and hashes: 1: QoezMyF220hqLLxCVAL6nIa23Eg.crl (hash: 6iZtdmdi1I+DTlyFg7r4o8RBXz4iXpdBeDhGk0Oeraw=)
2: 4BDAE70EB7A911EF9D4E880CC4F9AE02.roa (hash: LoSQxFip4nNOrJotlSF6RIr2kx5vjl1KHOV/16F58yQ=)
3: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (hash: a2YIRJWcOj/2F2QJjwyVL+lBSin617P7TaoPIuqLmpo=)
4: 4EB814BA8F6711E6A509C92DC4F9AE02.roa (hash: XKjx+2JVREc1vEzkeaWV20vVw40lW7PDQ/F2fJTa5K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7925 (0x1ef5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: May 12 15:39:25 2026 GMT
Not After : May 19 15:39:25 2026 GMT
Subject: CN=6a0349ad-6df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:d4:b2:c1:e7:42:4d:1f:ab:0a:c5:5c:0a:
13:bb:8c:a7:c9:08:0e:38:7e:ec:7b:16:1a:da:1e:
a7:ce:c3:bf:6f:a5:d4:72:6f:36:af:2c:75:23:93:
fc:b3:5d:e9:0f:ae:55:98:e8:9f:17:7a:59:e1:7c:
42:06:ef:d7:dd:e2:fc:44:6b:27:60:dd:0b:5a:62:
9b:5a:1d:a8:48:bb:c9:f0:e6:4d:80:2d:a1:85:5d:
f3:7d:45:c4:99:73:f1:eb:df:bd:89:20:07:89:4a:
fb:c9:39:54:86:d4:b6:8b:34:b8:84:1b:84:d7:d3:
5f:ad:e0:52:34:95:d7:9b:f5:49:2f:a8:58:2f:83:
23:06:4d:55:de:e0:78:29:61:23:20:cd:77:50:e2:
c7:fa:61:33:4c:fd:01:e6:74:e0:8f:aa:95:17:f2:
4d:61:11:e5:9e:d2:37:97:93:c0:8b:bb:9c:24:cc:
93:0a:8b:ba:83:53:d5:b3:ce:41:65:10:e4:a3:66:
4e:15:93:ff:1a:cb:31:c8:3a:b4:66:b8:ea:6f:ae:
46:91:4f:d7:15:b3:1e:80:e8:6f:27:e3:64:19:e3:
c3:47:80:da:12:f7:85:73:87:11:0b:1e:4d:80:fa:
22:78:1d:d5:41:c0:42:d4:84:36:12:ec:1f:fc:d6:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:F5:09:BD:E3:3B:BD:BA:E0:E3:EF:08:5F:B1:03:E3:F9:6F:C7
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:5d:dc:9b:ff:83:b2:b0:38:4b:fe:61:88:c4:2e:fc:b8:07:
1a:74:af:0d:f0:37:57:51:1b:c3:86:75:54:3c:06:4d:b2:4b:
9f:19:0e:f2:f7:dd:92:a5:3a:6e:97:f7:f3:89:1d:7f:78:d8:
95:d6:f9:09:7b:b3:a8:f3:9e:fb:b2:44:bc:73:87:02:61:26:
c4:8b:9a:37:29:2a:9b:ff:e7:2e:7d:6b:e5:fe:1b:f2:fd:aa:
25:d1:de:11:a8:9f:d2:66:5d:d5:95:ec:03:fe:21:2c:f5:59:
e2:c0:77:1a:64:5d:e1:ad:aa:e7:95:8e:99:63:bb:24:0c:4f:
ef:33:00:84:ae:fa:d1:c3:be:63:6b:72:55:5f:17:ac:e1:ba:
7c:b6:65:c9:8a:82:fd:6e:1a:d8:27:e1:84:d2:79:5c:4a:a4:
95:aa:40:b6:c9:56:cd:16:f4:9a:2a:70:3d:36:5a:b6:db:e0:
89:12:8f:19:6c:8b:24:ad:93:af:38:3d:dc:fc:e2:a2:70:04:
5b:b3:da:3e:cd:f7:b8:26:4f:9d:f2:77:d1:7f:1a:81:ab:49:
30:b6:5a:a3:78:3f:c0:2a:3b:0b:17:06:0f:67:a1:fe:43:79:
52:c6:fd:7a:5c:df:70:dd:ea:30:f0:5c:9b:d3:92:dc:e3:9e:
29:b4:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:38:07 2026 by rpki-client