
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier: Wqg/cFbIBKClxL/WjLDv3Mikhtbb/cHQ83Jf5R2iaCo=
Subject key identifier: 7B:3D:9D:2B:4B:EF:9E:09:CE:1F:8F:AA:17:E0:CC:A8:8C:CC:9F:05
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial: 0D2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number: 0D16
Signing time: Tue 12 May 2026 18:07:58 +0000
Manifest this update: Tue 12 May 2026 18:07:58 +0000
Manifest next update: Tue 19 May 2026 18:07:58 +0000
Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: PuwSD44l4s0H0o398mMaDxN7+7aDymsB/3fZ9thOtHE=)
2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=)
3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:07:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3370 (0xd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Validity
Not Before: May 12 18:07:58 2026 GMT
Not After : May 19 18:07:58 2026 GMT
Subject: CN=6a036c7e-cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:2d:92:d8:a0:95:a0:ed:06:aa:9d:e1:be:
29:28:61:09:ee:06:1e:c4:81:59:56:01:db:09:2f:
96:ff:3e:e7:b8:af:da:7d:93:57:c3:c7:70:97:94:
18:db:5d:33:09:cd:f3:00:de:5f:5c:ca:f9:7d:e8:
21:81:42:65:68:01:67:e0:7d:42:a9:91:96:90:56:
a9:8e:39:5b:f9:f4:c0:92:21:54:54:2b:84:ff:a9:
d3:ee:75:5d:89:c9:32:fd:65:e9:83:cc:48:27:94:
b8:27:db:0c:0e:df:a8:4c:d9:57:b7:ee:48:29:fa:
17:d0:97:29:00:f1:61:95:6e:bc:1d:9b:5d:77:ef:
80:c4:19:e4:5b:9c:7d:42:63:af:b4:07:07:c1:e1:
99:48:6f:9b:bd:d5:03:c1:87:cb:e6:f6:64:21:05:
29:5e:35:36:c5:28:ba:28:94:fe:50:aa:ed:95:1e:
03:e5:7f:1d:18:26:43:96:8a:52:ee:28:69:6b:46:
30:d4:4a:5d:d8:38:1f:98:cb:b0:a2:e1:89:0b:71:
3c:39:bd:ed:97:99:5b:dc:b4:23:0c:e6:8f:ad:2a:
e2:a6:3c:b1:b0:ec:b6:2a:2a:94:b1:5a:09:10:7b:
a2:a6:b6:c6:ef:06:70:2c:18:12:b9:d2:7b:31:77:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3D:9D:2B:4B:EF:9E:09:CE:1F:8F:AA:17:E0:CC:A8:8C:CC:9F:05
X509v3 Authority Key Identifier:
keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6a:10:89:91:14:ab:9a:6d:99:f3:7c:bb:e1:e3:f9:3f:59:
39:bc:9c:81:ea:0b:d1:e2:fb:7e:a0:6a:a3:95:33:c8:b1:f3:
59:fd:a2:6a:2c:3b:13:a4:7e:b3:92:9a:93:4a:27:62:a9:0f:
e7:0a:65:09:05:4c:c3:51:54:ef:1e:63:8d:e7:8b:95:b8:1b:
00:25:20:8c:20:70:7f:32:9b:dc:7b:5b:c5:7d:7a:dd:c0:3f:
8e:56:cd:4d:72:a6:64:5d:9a:45:d1:12:9c:5d:b6:56:7d:89:
b8:5a:97:3c:66:b9:4c:5b:7a:e8:68:8e:43:1c:88:93:0d:05:
42:cf:ea:da:ca:03:d8:06:18:87:82:db:25:a3:f3:13:70:34:
4d:0b:de:7f:60:14:6c:f9:91:7d:4d:a7:bd:64:69:0a:63:29:
6d:03:d3:0b:0e:98:9c:0a:15:5b:33:9e:a8:1d:71:9f:8d:19:
ed:06:2c:30:21:3f:2b:96:ae:c8:15:82:d1:11:6a:c6:6c:34:
38:a2:c9:a9:19:02:48:bf:0d:52:6a:63:31:1c:ef:4a:25:1c:
b3:a7:2f:12:51:da:72:86:dc:96:ee:85:18:e2:38:26:da:ea:
f1:75:e7:0d:91:10:ff:b3:ed:cd:d2:e7:6c:d3:79:22:96:07:
99:6d:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:31 2026 by rpki-client