
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
File: QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json)
Hash identifier: MEaJkoRHcTeF6HSYXK5x29uR+l/4jW1crZzMcYs8EZs=
Subject key identifier: EF:B2:EF:66:05:26:3B:5D:54:94:97:49:92:CF:DF:96:85:85:63:AB
Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
Certificate issuer: /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
Manifest number: 01CB
Signing time: Tue 24 Mar 2026 16:58:47 +0000
Manifest this update: Tue 24 Mar 2026 16:58:47 +0000
Manifest next update: Tue 31 Mar 2026 16:58:47 +0000
Files and hashes: 1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: cZHoJg0skVtoZK78Plo31AG30gjfcU26cozlrqkbY9U=)
2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: lZdeNyz+yQ1+N9T6p2mJ9QgdtWEB/q61jjm0z2gdcS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Validity
Not Before: Mar 24 16:58:47 2026 GMT
Not After : Mar 31 16:58:47 2026 GMT
Subject: CN=69c2c2c7-c20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:4b:a6:4a:f9:38:7a:1e:aa:48:0a:b2:d4:
c7:ab:d4:c9:90:e3:cb:f5:e7:c6:27:8d:d8:b0:4f:
f9:8d:ac:81:50:23:7a:35:ea:3d:17:49:d8:07:96:
d8:57:b4:7a:44:72:0d:0f:08:56:98:94:13:9f:d3:
46:8d:6c:2f:5f:78:c8:0a:6e:50:78:9a:72:8a:22:
95:d9:f3:12:dc:d8:12:a9:40:f3:f6:01:4b:45:76:
c8:30:29:16:13:d5:9e:08:eb:5c:7e:b8:ff:e6:d5:
e3:55:eb:f8:23:bc:c8:ed:99:69:ad:f8:51:04:00:
59:1e:93:8b:0a:4b:a6:c3:ac:ac:c5:93:17:1d:2b:
5d:e3:61:d2:a8:32:4d:80:cb:09:95:d9:f6:97:29:
21:54:47:76:68:97:41:91:71:18:97:68:12:dc:a3:
86:73:9e:1a:a5:5b:c6:c0:96:f6:a6:56:d4:ce:b9:
98:4e:2e:5b:bb:e2:8c:e4:74:6c:3c:54:7c:3a:dd:
03:9f:24:0a:50:97:13:46:4f:a9:b1:77:89:62:a9:
75:af:ec:1c:bc:ee:bf:10:0d:0a:79:b9:65:69:7c:
d6:d2:39:38:fb:3c:d5:9d:d6:d2:bb:98:fc:7a:04:
6b:ec:0d:60:71:b7:0b:89:3d:67:b4:45:ad:bb:8e:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:EF:66:05:26:3B:5D:54:94:97:49:92:CF:DF:96:85:85:63:AB
X509v3 Authority Key Identifier:
keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:65:86:d6:10:21:f6:bd:9c:7d:d0:83:81:db:02:e4:63:56:
1c:90:ee:8f:b3:d7:89:9d:da:e7:12:ef:80:f3:21:ae:03:f7:
77:48:d5:45:b1:3c:9c:06:c8:d2:0c:80:1f:79:86:41:d0:46:
0a:b2:49:f8:6b:86:71:b3:cd:2c:53:98:e1:f9:11:97:b9:60:
2f:22:42:07:77:d2:bc:f9:b5:ae:49:9e:dd:b6:fe:01:ce:57:
39:a3:2b:08:83:16:66:83:7d:8d:bc:b9:da:a1:e0:7b:29:80:
de:3a:8e:8a:6c:c7:a6:38:09:85:0d:f5:7f:97:57:43:c0:d8:
ef:fc:8e:79:b1:ce:8d:e9:49:8e:0e:c7:3a:4b:26:5c:43:3b:
5b:5e:2d:f8:9c:63:23:3f:f6:dd:61:94:dc:44:8d:8a:93:1a:
32:5e:95:6b:3d:e8:69:aa:31:dd:2e:f1:8c:33:7e:c7:57:f3:
c3:8e:0c:e1:52:0e:a9:c3:00:c5:b8:7b:7a:a3:e3:4f:f9:22:
f3:fe:67:ea:ce:47:bd:92:e0:02:a8:f2:f9:36:92:3b:6f:e9:
6e:cf:03:56:32:ab:53:a0:17:ee:f1:d6:8d:a2:e2:8f:b5:43:
dd:bc:ce:12:99:3d:aa:8b:9a:96:b2:67:24:8a:49:5e:1d:a1:
d6:c3:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:59 2026 by rpki-client