
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json)
Hash identifier: s8TyqmU9zHSdxG8rv5OERfQshEBiVEtSkPPw/SCr9EA=
Subject key identifier: FD:45:94:A3:AE:B5:E3:CD:A9:EC:D2:49:B6:00:32:B5:CB:C2:00:63
Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
Manifest number: 0100
Signing time: Wed 25 Mar 2026 05:33:05 +0000
Manifest this update: Wed 25 Mar 2026 05:33:04 +0000
Manifest next update: Wed 01 Apr 2026 05:33:04 +0000
Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: boZx4SnQsdfvh3O1QnUnSlMCRrIkdLhc2ox8mYck66g=)
2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: AnjAiTf0IpBEVdDJWZEsvOkkZMp+zUd6UgWlYagXJ9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Validity
Not Before: Mar 25 05:33:04 2026 GMT
Not After : Apr 1 05:33:04 2026 GMT
Subject: CN=69c37391-89db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:04:21:47:d1:95:52:e9:63:57:6f:5b:76:
d0:fd:b9:a9:50:bb:5c:ca:ff:2c:07:87:5e:ba:b8:
e9:ec:6e:2d:8d:2a:c3:77:70:78:ca:7c:56:87:da:
9a:ab:81:88:e8:ca:59:02:d8:e1:d0:ba:70:c5:37:
d1:d4:6c:a3:6c:5f:84:f4:4c:a1:82:75:7f:39:f6:
32:7a:14:65:94:75:d0:87:fa:0d:b0:d9:55:a1:42:
e2:36:45:03:2d:dc:86:5d:14:dc:16:a5:1e:b7:39:
61:d8:4f:2d:ad:7f:df:80:98:52:c5:db:40:0d:03:
3c:1e:84:9a:2d:40:e5:82:6a:8a:98:c2:e3:97:c4:
ae:c2:1a:97:39:bb:92:50:be:9b:11:ef:ac:de:96:
1d:b9:50:2e:a3:19:46:bb:2e:94:3d:85:0e:5b:43:
10:15:ed:e3:5b:01:e8:aa:0a:1f:8e:60:18:aa:c7:
7f:3f:b1:76:76:7e:55:1c:30:1b:10:d7:0c:70:de:
91:01:33:8f:da:f2:f1:7c:eb:d6:a7:a6:7a:b3:2b:
38:83:50:d5:bb:24:4b:dd:4b:e5:2e:04:0b:e4:e4:
2a:5e:f0:3f:62:3b:0a:ac:dd:41:10:24:bc:44:bf:
2f:53:42:12:2e:17:0c:97:12:93:04:00:8e:de:b1:
dc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:45:94:A3:AE:B5:E3:CD:A9:EC:D2:49:B6:00:32:B5:CB:C2:00:63
X509v3 Authority Key Identifier:
keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:fa:6e:37:d6:06:03:42:5d:b4:f7:f2:e3:65:1c:87:42:86:
5f:84:a7:22:08:fa:51:59:8c:55:46:cf:69:a6:11:b1:f3:49:
de:8c:c1:e0:82:a5:f0:7d:a7:9f:27:7b:a9:5c:d1:0b:84:65:
33:cb:7a:8b:29:5f:be:4b:e6:95:9d:07:62:e3:30:95:30:4f:
40:82:9d:64:65:f8:c4:1e:ee:37:0b:40:6f:37:f4:1a:41:23:
b7:fc:a1:c7:14:63:fc:b8:a8:a0:83:f8:8d:e6:67:50:a5:71:
c5:80:5c:4d:ed:dd:58:fa:2b:c7:42:03:6f:48:79:58:89:11:
32:21:53:23:09:81:aa:d6:f0:9c:5a:b4:d7:d2:3d:ab:12:5a:
7c:27:64:05:64:27:b1:6b:22:26:7f:76:40:26:a6:b8:a4:20:
3d:d6:43:09:c8:ce:73:28:b4:60:ca:29:05:6f:a2:38:b5:31:
cb:cc:a8:4b:72:a2:68:37:8c:b5:07:2f:bb:91:04:a1:99:a1:
f5:20:60:3c:44:9e:32:ce:71:cd:b1:b6:cd:e8:08:76:fd:ee:
d9:f9:39:d0:74:70:a6:e3:78:82:71:4c:70:e6:97:56:7a:89:
f3:dd:14:f4:5f:48:ed:02:b2:54:f7:f4:54:22:2a:81:dc:40:
ad:c6:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:23:42 2026 by rpki-client