
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
File: qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json)
Hash identifier: kOtgm0kDRWzeBfH4EloVUaegUnJqMwoG4zqv4ifTXpE=
Subject key identifier: D7:2C:D0:5B:81:72:B3:A0:F0:77:4B:0C:D1:69:79:F1:55:39:FC:27
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
Manifest number: 26
Signing time: Thu 23 Jul 2026 10:52:36 +0000
Manifest this update: Thu 23 Jul 2026 10:52:36 +0000
Manifest next update: Thu 30 Jul 2026 10:52:36 +0000
Files and hashes: 1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: Zj4y5tHS6JaUj6hdBja2oSgsKN3SNcnTJ80fxwZE0F4=)
2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Validity
Not Before: Jul 23 10:52:36 2026 GMT
Not After : Jul 30 10:52:36 2026 GMT
Subject: CN=6a61f274-85f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:57:23:6c:4f:f3:57:45:a6:fa:3e:a9:ac:
c0:7e:b2:46:1f:2c:86:36:13:50:64:b6:e0:91:e8:
04:65:3c:70:9a:c0:50:84:54:ae:79:dc:1b:f9:83:
45:0a:98:ce:cb:f7:ae:68:f8:16:3c:eb:3f:ba:9e:
4f:6b:b8:6c:86:e1:80:79:eb:25:03:59:da:b0:7d:
38:5b:5a:80:ff:44:1b:e1:c5:0e:2b:b9:a4:9e:f3:
2e:af:c0:37:2a:18:37:db:69:c3:3c:02:e1:2a:81:
d5:9a:7e:2f:83:ba:bc:bc:82:9f:5f:06:17:7c:5e:
6f:db:41:f4:ea:72:bc:12:b4:c5:58:9f:1d:87:d3:
6e:56:4f:ea:29:8f:b2:f9:96:01:fc:cf:42:02:7b:
9e:f0:1b:42:79:1e:42:f0:62:2e:73:53:58:09:3e:
7b:0e:55:44:fe:87:d2:1a:ea:b9:d0:37:d7:f4:eb:
d5:3f:27:3c:45:77:21:a1:72:46:f8:ac:a3:58:91:
05:d0:e1:3e:b0:13:02:97:32:d8:8c:13:6e:83:47:
6a:c5:d1:df:45:09:6a:54:3f:76:41:37:47:9f:9b:
1b:b4:27:53:bf:61:34:99:6e:06:84:10:57:83:d7:
5a:8e:17:29:20:a4:96:39:b0:13:7c:7a:4f:7e:82:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:D0:5B:81:72:B3:A0:F0:77:4B:0C:D1:69:79:F1:55:39:FC:27
X509v3 Authority Key Identifier:
keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1e:25:95:52:16:e1:6f:e7:55:e1:05:fb:09:24:62:28:bd:
a0:79:7a:93:37:2f:73:ae:89:69:8b:e5:9b:f7:f2:44:a9:71:
3c:cb:d9:5c:96:cd:7e:ce:56:1a:09:86:3a:fd:3e:23:0b:e9:
42:ab:0f:06:0f:98:a0:e9:f3:6c:08:34:b3:4b:98:de:6b:54:
da:d8:a0:f9:4a:e4:7a:c1:8f:35:8c:04:ec:6b:a3:cd:f0:10:
80:db:52:2b:63:63:aa:8a:e2:60:3a:b6:64:df:b9:2e:46:39:
db:68:1d:90:a5:89:88:fa:a6:e4:cd:d1:49:70:1d:5d:fc:9f:
d1:68:56:71:ab:a6:1a:c1:18:4f:11:b4:58:6d:a2:59:55:d2:
9b:01:f3:43:db:b9:7b:b6:e6:3d:d5:58:c3:30:40:b2:d8:21:
75:6b:84:22:be:c4:1f:11:0b:ef:98:b9:74:1c:51:f9:fd:d3:
70:cc:ba:e4:ae:fd:d2:bc:4f:bf:f5:62:7d:b8:35:a3:9c:a7:
79:88:7e:1b:b3:83:fa:05:db:35:4e:d7:97:bd:43:2f:0b:7a:
fa:a7:fb:a2:7b:df:28:b3:ac:6e:c1:93:37:f7:2b:11:d5:f7:
4f:db:18:04:16:e2:78:b6:7d:67:d8:29:c0:bb:ef:e9:f1:14:
18:ed:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:38:50 2026 by rpki-client