
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
File: qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json)
Hash identifier: Fu8i77edHqFpDnnkJLoAvFI+cde5iRYx2lHoWb4yt44=
Subject key identifier: 9B:9B:7C:B5:45:61:6D:71:8C:D4:8A:CF:50:25:C3:39:B3:74:8F:93
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial: 05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
Manifest number: 04
Signing time: Wed 13 May 2026 09:23:35 +0000
Manifest this update: Wed 13 May 2026 09:23:35 +0000
Manifest next update: Wed 20 May 2026 09:23:35 +0000
Files and hashes: 1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: lGTFmyyxpzk2Re6QYfBr2pvt/dkLSQCnGEc9jdjXB4U=)
2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Validity
Not Before: May 13 09:23:35 2026 GMT
Not After : May 20 09:23:35 2026 GMT
Subject: CN=6a044317-a4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:77:1b:56:f0:85:de:12:92:2a:4f:15:50:
d3:0e:44:7a:16:54:58:79:85:55:79:dd:cb:3a:fa:
62:c1:91:a6:8a:c2:e9:e0:9c:a6:eb:90:d7:98:75:
e4:15:56:45:55:77:8d:5a:e4:9e:38:a9:4b:4c:22:
c9:d4:34:57:3d:37:34:2a:c8:0b:3d:16:88:01:b6:
f0:2b:41:4d:15:ac:88:63:a1:7c:62:2b:88:47:bd:
ff:72:9c:03:e3:09:69:e0:4e:56:3f:e5:b8:f3:5f:
88:45:8f:e3:a0:59:1c:88:6f:bb:39:a7:99:14:97:
6a:c1:99:7c:32:8e:be:b6:fa:1c:42:e1:b6:4e:36:
cd:89:b2:2d:f8:d3:0d:f8:29:b5:fc:e8:e2:34:ed:
5f:30:4c:71:93:79:99:d1:79:f0:cc:e5:d5:aa:0d:
42:58:a6:5a:69:98:9d:27:cd:20:50:a3:a2:11:53:
3e:16:f9:7a:47:a7:14:45:b3:86:0f:98:e1:79:a3:
23:8c:c1:a5:60:0b:80:55:3c:3a:ac:dd:78:24:2c:
68:a1:b1:51:36:9c:08:9a:13:50:62:93:b1:6b:5b:
42:cf:8d:3e:ce:9e:e6:58:ad:d3:21:f4:8d:bd:e9:
10:cd:a6:42:77:79:17:46:8a:ef:80:e2:fa:ab:87:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9B:7C:B5:45:61:6D:71:8C:D4:8A:CF:50:25:C3:39:B3:74:8F:93
X509v3 Authority Key Identifier:
keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:85:34:95:c4:c0:49:8f:98:0a:2e:dd:cb:af:04:6a:3f:69:
04:69:15:56:00:26:3b:b6:62:05:95:7c:ec:a9:55:4b:01:77:
ee:f0:58:e9:bc:ea:cc:17:4c:69:ad:42:62:2a:2f:fb:ab:54:
22:3f:c6:9e:46:0d:12:9b:01:9f:28:83:fe:33:fe:94:91:3a:
a3:7b:05:ee:14:b7:16:08:2b:9a:42:6b:2f:13:8f:be:3c:0f:
7c:7e:14:93:d2:3b:ca:cc:de:53:cb:15:a9:a0:f8:6e:ae:92:
0c:77:a4:5b:81:55:5b:c0:60:71:1a:28:5e:80:15:f3:9e:8e:
a9:73:a1:82:1d:b6:d7:73:40:cd:03:25:4a:ba:5f:1b:c8:07:
40:f8:b6:23:13:89:47:6f:97:e6:bf:99:dc:04:4e:ce:9c:28:
18:c1:7e:b0:43:a5:7c:37:aa:2e:db:98:e8:e7:c5:f9:a4:0d:
7f:59:0a:28:28:91:03:8f:3f:6f:a0:4c:8a:e8:aa:39:0c:e6:
7a:11:f6:9d:45:40:5e:c6:70:62:c7:12:d1:de:ac:c1:59:76:
40:06:61:31:4a:84:3b:17:da:29:bf:d6:32:28:52:c6:c6:33:
56:1f:d6:99:df:e7:92:59:b6:ae:b5:64:40:39:dc:dc:81:34:
e9:a5:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:23 2026 by rpki-client