
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json)
Hash identifier: AtonyURlmqv1wB0GFoZia1gMfDlSWRNXFqbOwCKmm4s=
Subject key identifier: 72:F8:ED:B6:C0:26:82:04:D8:61:99:B2:CF:1D:41:F4:EC:AF:0C:E7
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1C9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
Manifest number: 1C65
Signing time: Tue 24 Mar 2026 16:08:11 +0000
Manifest this update: Tue 24 Mar 2026 16:08:10 +0000
Manifest next update: Tue 31 Mar 2026 16:08:10 +0000
Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: fFlqeTWZ6VfXSF4k0p2LclGgIkOogg5mNQyUAW1/uzA=)
2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: oOMFQEz7Z0dlH9Kxe9lCaXlC2P93gTrGpTMlqfnNL/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7324 (0x1c9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Mar 24 16:08:10 2026 GMT
Not After : Mar 31 16:08:10 2026 GMT
Subject: CN=69c2b6ea-8789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:d0:aa:cc:73:4d:98:73:d6:60:95:a2:7e:
ef:71:d3:95:f4:f4:9b:51:db:e2:a7:76:17:30:f8:
9d:b9:6c:fc:c4:d5:e8:ec:35:ae:19:73:65:34:9a:
5c:89:18:fe:92:f7:d4:cc:be:61:d9:ad:9d:33:23:
56:1e:c8:f8:b6:78:4f:00:8e:c6:d9:c6:d7:f7:f0:
ae:06:7a:2a:22:be:02:43:2a:41:b5:b9:0d:54:29:
45:5e:14:ca:f9:ab:17:53:7d:15:cf:4c:a6:e8:bc:
e2:aa:91:7d:9c:3a:c2:37:e6:0e:86:be:81:bc:d8:
71:f4:49:e2:0e:80:5a:a1:df:e8:d9:0c:79:4e:3e:
96:d6:d8:2b:f1:ba:60:33:f1:29:af:76:be:8f:ae:
6c:71:f8:c7:eb:65:79:aa:2f:f4:7b:e8:ae:ef:67:
df:06:ac:92:7b:75:b2:24:1e:55:4d:1d:27:e3:d3:
6f:69:23:a0:7f:a7:f4:3b:55:33:c9:ae:1a:01:d0:
28:b2:f6:84:af:76:fc:22:f1:7d:4d:4d:cf:31:a2:
54:b8:7a:44:e1:92:fd:b8:9d:97:df:10:78:71:c3:
56:31:46:a0:12:9b:b8:e4:2d:a4:7c:6d:0a:3c:d2:
12:64:9c:52:eb:76:ba:62:de:d8:d1:5e:ff:0a:5f:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:ED:B6:C0:26:82:04:D8:61:99:B2:CF:1D:41:F4:EC:AF:0C:E7
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2e:5d:4b:3b:23:d6:55:ab:8b:47:42:1b:77:60:ab:df:3f:
a5:28:e5:7c:37:06:3e:c8:26:3a:7f:c2:d9:e3:12:ad:9a:ec:
11:68:7c:63:26:ae:fb:53:98:3f:2a:3f:5d:0b:79:d3:54:7d:
4d:25:b5:9a:3f:4a:ee:00:12:a3:9f:30:88:ba:90:c2:18:40:
70:4e:b2:ff:f0:50:d7:30:16:6d:9f:b5:ce:40:9d:cc:21:27:
35:f9:43:4f:27:c2:eb:f3:e6:ba:37:b4:6f:5b:b0:68:ae:9f:
09:c4:2e:43:de:7a:19:f9:99:ee:d6:fb:88:a1:64:53:85:cb:
61:b8:37:9d:b3:ce:55:8b:e6:37:d3:dc:8c:35:12:92:95:3d:
b6:7d:ff:80:3d:8a:40:0e:81:1e:90:4a:49:c1:57:3f:c5:a3:
0f:65:67:59:d8:37:32:68:df:db:e1:8e:48:7d:97:bb:10:3f:
99:4f:2b:8a:59:75:94:34:83:ba:6b:91:6f:3f:a0:4a:09:4b:
67:9f:cf:42:66:e6:13:64:79:e7:a6:f7:a0:bf:44:3d:d7:b0:
b3:a3:1a:fe:ed:0d:5d:11:22:19:c0:50:1f:79:e0:14:81:cb:
08:a9:59:d6:f5:fd:71:f3:25:26:82:6c:1d:fe:28:f8:c5:88:
ff:aa:45:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB
RDRGQUExREMwHhcNMjYwMzI0MTYwODEwWhcNMjYwMzMxMTYwODEwWjAYMRYwFAYD
VQQDEw02OWMyYjZlYS04Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyD3QqsxzTZhz1mCVon7vcdOV9PSbUdvip3YXMPiduWz8xNXo7DWuGXNlNJpc
iRj+kvfUzL5h2a2dMyNWHsj4tnhPAI7G2cbX9/CuBnoqIr4CQypBtbkNVClFXhTK
+asXU30Vz0ym6LziqpF9nDrCN+YOhr6BvNhx9EniDoBaod/o2Qx5Tj6W1tgr8bpg
M/Epr3a+j65scfjH62V5qi/0e+iu72ffBqySe3WyJB5VTR0n49NvaSOgf6f0O1Uz
ya4aAdAosvaEr3b8IvF9TU3PMaJUuHpE4ZL9uJ2X3xB4ccNWMUagEpu45C2kfG0K
PNISZJxS63a6Yt7Y0V7/Cl+bVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHL47bbA
JoIE2GGZss8dQfTsrwznMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz
QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjVENy8yNTg3MkJCRTAzQjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxX
ZGlQbllJTTVoR2l0VDZvZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACy5dSzsj1lWri0dCG3dgq98/pSjlfDcGPsgmOn/C2eMSrZrsEWh8Yyau+1OY
Pyo/XQt501R9TSW1mj9K7gASo58wiLqQwhhAcE6y//BQ1zAWbZ+1zkCdzCEnNflD
TyfC6/Pmuje0b1uwaK6fCcQuQ956GfmZ7tb7iKFkU4XLYbg3nbPOVYvmN9PcjDUS
kpU9tn3/gD2KQA6BHpBKScFXP8WjD2VnWdg3Mmjf2+GOSH2XuxA/mU8rill1lDSD
umuRbz+gSglLZ5/PQmbmE2R556b3oL9EPdews6Ma/u0NXREiGcBQH3ngFIHLCKlZ
1vX9cfMlJoJsHf4o+MWI/6pFIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:24 2026 by rpki-client