
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier: uUod6s70sxtDVX9CTkYobKzXfmJiGvJ/aea5E2kzxbA=
Subject key identifier: 40:9E:2A:82:C0:F0:D7:DF:0F:5F:1B:75:65:53:D4:67:DE:29:64:8C
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 353C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number: 352E
Signing time: Tue 24 Mar 2026 14:37:46 +0000
Manifest this update: Tue 24 Mar 2026 14:37:45 +0000
Manifest next update: Tue 31 Mar 2026 14:37:45 +0000
Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: pUqvD59Hs/go4NTnZqcrRdlZEMOTeRaBQgRtzcIkdx0=)
2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: FdyevIyWCMU3BsPK8pup9Daz8b6pCeZZ5abWmPf2d1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13628 (0x353c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Mar 24 14:37:45 2026 GMT
Not After : Mar 31 14:37:45 2026 GMT
Subject: CN=69c2a1ba-d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:80:f9:c1:56:9a:70:36:9e:60:b8:89:92:
af:5b:91:89:61:bf:5a:d1:2e:25:a1:51:10:b4:b5:
26:48:9a:89:fb:e0:1f:bb:11:b1:b9:5f:03:c8:ac:
e5:7a:5d:77:2c:e8:f5:06:aa:44:f6:b9:da:c1:1e:
16:df:50:87:cc:57:4f:aa:ec:2f:82:99:02:ce:82:
af:2d:ad:c4:5b:f4:a9:13:da:b7:43:f3:b3:36:33:
b1:89:8d:82:d0:f6:1a:33:d6:16:9e:ae:e3:ce:24:
e5:dd:5c:b1:84:ef:ad:db:52:34:70:a1:57:bc:e1:
8d:8f:fb:41:07:04:85:78:4c:39:9f:3a:6e:8c:03:
ab:05:35:be:c1:d1:65:a9:77:d5:b6:f0:6e:4f:f5:
44:94:5d:6a:84:09:61:9b:94:e5:dd:e4:c4:3e:a0:
33:86:35:59:66:cf:03:a1:7d:d5:7f:59:ac:c6:de:
2f:fa:7a:4b:89:64:85:9f:68:dd:5c:8e:19:35:30:
d7:78:76:b8:a3:b1:a9:be:cd:09:0f:1b:5d:26:a2:
ae:3c:42:7c:5b:3b:d7:90:83:3e:94:6f:cc:e7:b6:
65:50:6c:a0:b5:8f:f5:6a:ab:2e:75:6c:9a:bc:34:
b8:4e:62:8d:97:ac:13:34:9c:2f:89:4b:6e:ac:5c:
cd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:2A:82:C0:F0:D7:DF:0F:5F:1B:75:65:53:D4:67:DE:29:64:8C
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:2c:69:59:49:50:09:4e:23:c7:7f:a3:15:12:9b:3d:26:8e:
08:15:af:b2:5f:c9:40:a7:68:d0:0c:2b:1d:df:29:cb:2c:a6:
5a:1b:36:4e:88:cf:73:95:c5:55:5e:4b:98:ba:2d:bc:22:30:
d5:22:d5:ca:e6:94:a1:ba:93:a1:6e:d4:29:0f:ad:ec:0f:91:
03:e5:49:5f:78:55:66:c2:59:e6:09:9e:ce:e7:36:63:69:d0:
3e:f3:b0:3c:1b:6f:fa:6e:65:df:0c:e1:ea:b7:2f:5f:f9:9c:
68:d3:81:b3:52:23:f7:66:2a:11:7c:6b:db:31:40:a5:06:9f:
56:f4:a4:5e:dc:af:67:15:ad:b2:1e:7e:45:cd:08:af:06:c9:
e4:98:96:ae:68:73:18:90:5f:c9:e9:7d:40:04:c4:19:c9:49:
90:19:68:79:87:ad:70:fd:2b:8f:82:08:9e:e3:ca:93:1c:ef:
da:aa:61:c7:7c:dd:3a:65:0b:06:b8:61:d5:e3:4d:e6:40:4b:
88:c0:20:a2:4b:1f:98:59:62:6b:4b:db:15:8d:9b:02:23:b7:
c4:37:8f:a6:d8:69:2a:a4:90:a3:67:a8:1d:25:78:7e:2e:48:
db:d6:08:12:6e:44:c2:9d:02:f9:15:97:c7:9d:14:b8:57:1d:
08:05:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:37 2026 by rpki-client