
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier: 7jTruagWS/9MwMj/mM4hk0Rj7by9p3KE30NWNFSuSdE=
Subject key identifier: A1:16:A4:BE:BD:1A:F6:04:A1:34:C1:2A:E9:F8:43:36:D6:79:10:D4
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial: 0D71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number: 0D5C
Signing time: Thu 24 Sep 2026 17:58:37 +0000
Manifest this update: Thu 24 Sep 2026 17:58:36 +0000
Manifest next update: Thu 01 Oct 2026 17:58:36 +0000
Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: FRorPLNnkpx3dKxuU6irNb0Ge58bWY1Kk50f7SfLxX0=)
2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=)
3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=)
4: PtP-fur7WG3ysGUWu5IRviC8kGY.asa (hash: 7LQqZ7Ln2Du4KxmToCpdfq+Si7SKUbeaRwHLgR89/jU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3441 (0xd71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Validity
Not Before: Sep 24 17:58:36 2026 GMT
Not After : Oct 1 17:58:36 2026 GMT
Subject: CN=6ab564cd-f355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e3:0c:c6:e8:97:61:d2:b5:73:28:bc:b2:d4:
84:0f:01:03:59:4a:c2:69:21:97:2e:40:72:8c:3b:
7e:e1:8b:d1:66:aa:65:eb:8d:57:5e:63:3d:b8:86:
4b:59:ff:c0:be:43:05:00:43:56:3a:d0:0e:b6:af:
f3:53:25:88:eb:27:00:d8:ab:ed:64:b1:a3:aa:76:
f3:b8:a0:d4:17:56:44:a7:f8:55:24:fb:60:6c:5c:
f5:d0:bb:29:44:a0:05:04:00:35:41:70:28:70:c3:
cb:7b:a6:df:a0:38:e7:93:9a:ec:6f:f5:f6:e4:78:
e7:11:00:80:b2:eb:3f:e3:52:72:a9:ea:c3:ff:eb:
ab:03:9a:15:d5:4b:b0:56:1f:ce:2d:e3:2a:ce:92:
ab:b4:66:e2:cc:17:76:73:e5:df:b6:4b:f0:aa:a4:
9f:62:f7:6a:b3:59:9c:95:db:3b:2e:8c:87:ab:b8:
c1:0c:21:e9:dc:8e:b8:b3:44:6d:f9:a8:ab:f4:b1:
c0:c2:43:bd:2d:7b:e5:55:32:41:44:e9:a7:1b:da:
db:38:7d:54:17:e8:aa:86:a5:99:98:f1:2c:d7:c8:
86:7c:35:e0:91:5a:b7:6d:7d:31:43:3d:09:a3:fc:
37:60:b4:c9:db:e9:a4:88:55:ee:d9:1c:fa:27:44:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:A4:BE:BD:1A:F6:04:A1:34:C1:2A:E9:F8:43:36:D6:79:10:D4
X509v3 Authority Key Identifier:
keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:eb:fe:fb:e1:d8:27:fc:0c:75:2c:21:56:75:b1:27:08:ea:
1e:1d:a3:a2:52:18:ea:1b:84:f6:d6:aa:d8:6f:fb:f2:ce:0f:
fe:fa:38:6a:0d:58:64:4d:0d:93:bf:dc:29:0a:08:95:31:2b:
76:27:29:e6:2f:4c:69:20:b5:94:b1:8e:8a:3d:26:07:d1:a0:
23:d0:6f:9f:25:b0:45:a8:0c:ee:52:5c:41:0b:77:fc:0a:cc:
6a:0a:0c:28:61:d9:93:24:72:9d:a3:a1:96:cd:8d:9e:3f:ac:
c6:e1:5e:1b:41:80:77:f7:a5:72:2d:29:09:72:36:70:3d:6c:
85:fa:0b:01:db:d7:b9:b1:21:cc:dc:e5:b4:5d:4c:69:dc:0e:
97:73:91:15:32:a2:8e:59:ee:2a:23:bf:40:92:2f:c0:af:df:
b8:36:a4:bd:fd:a5:bc:f3:bb:75:ae:da:45:91:41:0d:13:8d:
05:45:b2:f9:83:f9:32:f7:47:15:69:13:9f:50:f4:95:00:e7:
88:a4:11:c4:7d:72:85:89:77:ec:73:0c:d2:87:9b:ac:7e:62:
bf:05:25:72:a9:52:80:aa:e2:32:1c:43:4a:48:bc:6c:99:23:
da:c4:9a:3e:13:f4:c5:b6:7a:9a:6d:61:a4:16:ed:22:01:2a:
36:77:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:46:36 2026 by rpki-client