
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json)
Hash identifier: WXdPHXoHQSzTLgpklW7h32YibGiL0bjwXjZNI8/HzRA=
Subject key identifier: 2A:82:36:24:04:59:B8:CD:10:65:19:29:93:D6:32:07:98:05:72:58
Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
Manifest number: 0111
Signing time: Wed 25 Mar 2026 05:08:19 +0000
Manifest this update: Wed 25 Mar 2026 05:08:19 +0000
Manifest next update: Wed 01 Apr 2026 05:08:19 +0000
Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: 5c+dZpIAr62fLzvxtu1zlNYLroQHS+y1jOTsl4BJ/5k=)
2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: /iUDR+GzejkmITAmPKgcB03fXiVvkAuvv4cWd5x9948=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Validity
Not Before: Mar 25 05:08:19 2026 GMT
Not After : Apr 1 05:08:19 2026 GMT
Subject: CN=69c36dc3-7a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:8d:20:2f:6a:04:00:b2:2a:99:f9:aa:de:
50:f7:8b:07:12:a1:86:aa:e4:18:1f:98:e5:e5:44:
fb:1c:bd:70:ac:a6:3d:d1:3e:8f:d5:49:2c:0c:26:
75:87:81:45:5a:ba:38:b9:4e:6e:48:ec:e2:a5:24:
3f:da:00:4d:48:08:69:0c:85:4c:5f:e3:90:db:23:
b2:7e:f9:9b:88:e2:6f:69:78:e8:e0:3f:83:39:41:
a7:04:73:99:b4:15:02:e6:84:85:e2:54:07:b3:41:
1d:d1:a4:53:05:3b:30:86:82:7e:ba:01:3f:ec:80:
70:ef:3f:33:cb:16:fb:b1:f2:98:06:42:0d:32:93:
db:e5:f1:43:9a:7f:aa:2e:f9:9c:11:ca:39:fb:31:
2d:2e:14:21:e6:43:9f:d3:76:6e:32:e2:4b:38:da:
95:df:28:48:86:d9:8b:21:71:e1:be:da:20:0a:2a:
72:c5:10:71:e5:5d:6c:bf:75:56:da:9e:9e:21:98:
c1:23:b8:21:cf:05:15:75:1d:d6:dd:ff:3d:08:1b:
ef:65:39:4d:43:e2:d3:c3:17:a1:36:e4:13:6b:6a:
60:d8:e9:b2:04:c6:6d:15:d9:3c:57:20:f0:95:b4:
1d:cf:76:ed:b8:f4:df:24:3c:f7:27:59:fa:16:1e:
3e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:36:24:04:59:B8:CD:10:65:19:29:93:D6:32:07:98:05:72:58
X509v3 Authority Key Identifier:
keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:66:27:82:0f:b0:27:fc:88:0e:49:49:e5:76:b3:23:ca:54:
f0:1f:aa:84:f4:b4:7d:29:71:38:82:21:ed:b9:d5:31:fa:51:
da:6d:53:0c:43:83:22:02:45:72:0f:e4:84:f4:9d:f5:3f:b9:
f2:5d:97:dc:08:72:42:fa:76:e1:c5:4c:d3:5e:f2:fc:76:9f:
6e:6f:e8:99:52:48:73:08:07:19:20:55:2e:84:4f:05:8c:35:
7d:7e:db:50:8f:19:6f:38:3f:93:2b:6c:52:53:f1:e2:3d:3f:
f0:3f:77:05:fd:df:ec:2d:86:cd:a6:28:ba:12:07:89:8b:90:
b0:c9:2c:5c:35:d5:71:87:ca:9b:8e:81:05:c2:17:84:3a:6f:
b0:d1:fd:6c:fe:94:1e:43:3e:95:e1:ee:ec:bc:b7:d2:d3:c8:
ee:f7:43:2f:d3:ec:fb:12:1e:46:d1:51:ee:49:2f:ee:c0:cd:
df:99:e9:79:16:c5:5f:1f:4c:53:96:c2:bf:b1:f6:84:e2:3a:
60:39:b4:2a:09:82:95:13:2e:f9:e7:57:35:c4:a4:82:94:64:
fc:f1:65:a7:18:1a:ab:82:e5:54:fe:e7:29:fc:c9:41:fd:6a:
c9:4f:65:49:4d:61:db:44:34:f5:32:e1:0d:d5:7c:27:48:12:
1e:76:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:36:53 2026 by rpki-client