
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier: rJogHR/0moGA1sZ1QA58VVuGjfLnRNgTTymFdeWxYx0=
Subject key identifier: 8F:31:3A:5E:3E:AE:5E:19:D2:B6:D5:BF:8E:CF:77:61:27:CF:C3:20
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0E28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number: 0D08
Signing time: Thu 23 Jul 2026 23:51:32 +0000
Manifest this update: Thu 23 Jul 2026 23:51:32 +0000
Manifest next update: Thu 30 Jul 2026 23:51:32 +0000
Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: /L60BvNAkNea86bAVudOb3HHHVtvfkMc4jJ6p9rMu54=)
2: BB3B63A83A7011F1B365A8EDB1833773.roa (hash: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=)
3: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: pVH2bMGC7+464gDRV/z0xb8UJ/QPCj/ZW97Q6jJEWrE=)
4: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: 0NXtzAL1o+tarKa4oNc7xxhauxSJ0WEZHKYx7ZTMEWI=)
5: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: yc3SgJhB9U1lGAckaKIVNdgap51jHeAdYVySNP13Icc=)
6: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=)
7: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: aJpPvoSGRVMA94Dw8tXt33zHeGMuxciJSkooTeVqXLA=)
8: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: uui58eIkIAuoIfjCf5IA5jNvQTdVLqnOyu4QWW+fdPU=)
9: 6BB6356086F111F19E006003A7EE528E.roa (hash: 8E4lWe8eMXTQftSqErp6AT1u7W/ptR1bQS6g7D5lpVs=)
10: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: wyS0hB9hlamFhnUTh6Gv6KcrrBw3EQZa9bUf+tLTABQ=)
11: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: PCXWhCBdOz3wuM8WU55B1FYMT0DwN0M40X705jCXOcQ=)
12: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: i5ROrzKB1s+VCKVSWpJPv8NGaUfssmlckuMKuKCQzg4=)
13: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: TWadmcrZewtuAgz2VI+NPqZM8R7/PZMSyZJSCwVn5T0=)
14: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: /PC8S/6p0cKFfDtq1mZfKqLDeu+/nUGuOGrYhA617sY=)
15: 5CBF3F2A540B11F1B7C20C5592833773.roa (hash: 1RR4rXrGdgVkusSgQXAk0hFyo7p3RZsSCUOiYGlL9OQ=)
16: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: sHM4xXld7uDeHu4KE4YRCWi+rdXGTKPH7QzaRU3HxOU=)
17: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: eh/7xK3jzeTfsbyM/J4kfcM/+VwQ8Z7/19vJJZdyK1Y=)
18: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: iSPArCekR6M/cWSzzjFrByEv9qSybnPOARzA3B9QRaY=)
19: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: e7VhcfQT9ruvv4CGZkrGsmAxeo+APLPyU8Ze+kwj1t4=)
20: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SvB+QsV4btdCFW7i059dWy1bkAp62n7wxY/pgRJzLzk=)
21: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=)
22: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: Z79rrvAX+MkAU7RIj82HMSiIMnnHt8DRxj3iIlw1SGs=)
23: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: uLT99LvREt6aFgLq+8J5+/4C4Z0AHsSdTIhcGHc+DZg=)
24: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: Nisqq4Q0qjVEubmWisYThrjO8ZKrL4odD75LU3tphLs=)
25: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: C1CK+9M/ckvpPGWd0ysVo6YESQAEhbu/xrQHT/N9P6Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3624 (0xe28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Jul 23 23:51:32 2026 GMT
Not After : Jul 30 23:51:32 2026 GMT
Subject: CN=6a62a904-f779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:68:56:4e:15:06:60:00:1e:81:8f:7f:ce:
67:9e:67:6f:20:00:03:f3:63:d7:77:2e:58:88:c8:
0b:68:a5:7b:2b:f3:29:cf:ce:f1:bb:ba:aa:93:be:
b6:55:cc:5c:10:83:79:e0:91:c7:0a:f3:33:77:6f:
99:59:c2:00:c4:ac:67:91:c0:33:1d:e4:9c:53:67:
21:0f:af:b2:6a:79:32:93:7a:a7:49:7e:f2:7d:b6:
14:03:fe:c5:df:af:76:1a:16:de:59:50:26:22:73:
75:d7:46:ec:f4:a1:6e:67:b8:00:c8:7b:d4:f2:de:
0c:08:77:56:24:ba:7b:6c:eb:f9:07:c5:8a:c2:f2:
12:a7:a7:34:4e:5f:fe:01:fa:e0:a2:f8:85:ab:a8:
17:74:30:42:40:cb:c5:f4:47:60:84:c5:23:c5:47:
dc:83:69:18:28:d7:31:bd:43:28:29:f2:1c:aa:db:
56:33:59:57:cb:1e:43:e0:3d:73:86:53:89:67:fb:
09:4f:99:1f:24:45:b1:70:a4:79:a4:f3:76:28:27:
e8:90:ea:d4:83:6d:96:9c:6f:13:f3:81:ab:d8:80:
de:a3:05:c9:15:00:53:1c:1c:e7:bb:46:94:9a:be:
6c:43:48:7f:cb:8b:cc:9c:7e:2b:43:72:30:ca:bb:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:31:3A:5E:3E:AE:5E:19:D2:B6:D5:BF:8E:CF:77:61:27:CF:C3:20
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:e7:82:9d:9e:85:b0:a7:cb:13:9f:f2:0d:86:87:0f:ad:1f:
29:2d:0e:ee:ed:01:a6:6d:d3:2d:94:04:cf:f0:2a:73:fc:6d:
02:3e:bf:17:86:f5:3a:7c:04:a0:f9:d3:1d:cf:3f:7e:44:53:
13:22:1f:40:ce:0c:42:e4:8a:80:70:5f:c0:ec:cb:15:8e:d7:
b3:30:c4:74:47:1f:98:31:5f:8c:88:6b:f3:4e:30:69:91:22:
79:0c:7d:99:69:7f:64:d7:7e:78:91:61:3e:d2:7b:b7:52:50:
f5:69:a6:aa:77:5f:f5:de:04:10:b3:72:9e:2e:4a:36:06:8d:
4c:84:c1:6a:a6:bf:ea:34:ee:06:5e:db:6a:a8:4b:26:20:93:
9e:d8:d3:ba:62:0d:9f:7a:b7:65:60:4a:87:a2:cd:91:a1:69:
2b:6b:e1:17:06:cc:5c:4f:a1:e4:d6:cb:0e:e2:6f:29:af:05:
98:ba:7a:a4:70:60:12:fe:fc:a5:8d:ed:64:7d:e2:14:78:9b:
7c:e8:bc:30:7a:2d:91:8d:5e:6e:b8:c3:0d:59:20:a8:72:3e:
a8:44:8b:ef:e1:1f:f1:b5:67:94:0c:99:29:98:64:db:e7:3a:
ed:07:89:a3:42:40:68:5d:8b:e2:f6:68:14:46:aa:f3:03:f3:
7b:59:a2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:24 2026 by rpki-client