
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier: xCSOg+wiOASvDSHYTZzYYRpYOrQ2CPQr4JFvhaH+eqI=
Subject key identifier: C5:2C:5F:4B:A1:65:1B:E6:02:8F:AE:6C:CE:0E:80:EF:AA:85:E4:16
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 08F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number: 0831
Signing time: Thu 24 Sep 2026 21:56:00 +0000
Manifest this update: Thu 24 Sep 2026 21:56:00 +0000
Manifest next update: Thu 01 Oct 2026 21:56:00 +0000
Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: Fe5/OWTYh7D68ZvAiS0D1LToToA9l8N3inrughl3KaE=)
2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: fu29/u9VpVu7rmcHbFU0N0wrb7076t3GVXEP5c8rVMA=)
3: 632982C478E411F0B36C2173C4F9AE02.roa (hash: qJHNInkkLUDjF8Std1fFlLs2dkTvsMn5hYhhfgfxfDk=)
4: 03BA8B36824411EF94479387C4F9AE02.roa (hash: yblVKBomAmKdFLx7E1GhA7lmIOLPIfTo5ijL1IDIgeY=)
5: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: VwsX+aayGFk3FRmuL/HgkrJaCVx405LJHEL44d7J7/w=)
6: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: SldeaCZGSwTt8m25XecGitCIUSJt0D3MD87GNQPgihE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Sep 24 21:56:00 2026 GMT
Not After : Oct 1 21:56:00 2026 GMT
Subject: CN=6ab59c70-b8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:00:22:90:4e:73:ce:9f:53:65:22:88:97:
24:11:39:16:99:e5:47:79:78:6f:cd:de:c1:fb:39:
50:e4:13:a8:e1:f9:5c:67:af:40:a0:f4:c2:f9:fa:
10:f5:83:5d:67:6c:42:32:d6:f1:f0:25:f1:df:8d:
ba:98:0b:25:b4:25:fa:49:59:b7:3b:9f:0f:d6:a9:
d7:e4:b2:57:23:ef:66:36:7c:50:5b:1c:72:18:5a:
4c:bd:84:05:36:67:94:d0:c6:dc:81:12:ca:cc:c6:
09:b7:95:71:13:c0:22:3a:3b:7f:ce:3b:3e:bf:eb:
96:c9:41:79:fb:53:54:18:83:c9:d6:f2:23:87:21:
64:28:cb:70:37:a6:c6:bd:18:2c:de:46:46:4e:e8:
46:92:e2:45:e4:df:b5:f0:aa:c7:fa:96:67:ef:a8:
2e:2e:13:ee:1d:69:f4:4e:2f:3d:fb:17:b2:54:e5:
a1:7b:c5:8e:e5:d5:49:42:30:ae:e3:78:e7:e8:55:
91:8d:18:32:31:c6:26:23:a7:80:49:c8:a1:f9:3c:
7a:a9:17:e4:47:89:dc:9d:82:15:3a:d5:5b:e6:19:
88:88:ae:dd:06:8d:01:e2:95:be:96:b2:d4:79:a1:
4a:60:b2:2d:27:2e:42:e2:e6:fa:d5:ec:bb:de:78:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2C:5F:4B:A1:65:1B:E6:02:8F:AE:6C:CE:0E:80:EF:AA:85:E4:16
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:52:64:e9:99:71:db:2f:4c:3c:bf:71:f1:de:d8:b9:c8:3b:
ba:58:32:ab:d3:d7:4b:c0:61:0e:f7:ac:4a:3d:bf:79:f4:a7:
19:e4:ba:af:80:d6:45:96:e1:d2:b7:0a:7a:76:3e:55:e9:22:
c7:43:e7:2e:dd:54:57:ba:36:1c:6f:c3:93:cc:1f:f7:93:b0:
fc:84:88:ae:41:c7:53:a3:5e:1a:b1:39:45:0c:7f:a4:f4:0a:
9e:dc:af:a7:df:76:ac:5a:54:a3:4f:1d:f4:ef:21:87:6c:45:
63:69:2f:75:85:d2:6d:a2:fb:1e:cc:9c:a5:ce:e2:40:74:76:
82:2b:da:fd:2b:80:ed:25:53:90:b3:28:3d:17:d7:8c:0b:ee:
00:7c:92:97:d9:04:9e:78:e3:45:0e:6f:42:d0:91:e4:3d:24:
c2:8e:07:66:b5:16:ae:77:b7:ac:7c:50:4c:26:0e:1d:4c:0c:
5c:8a:52:9f:31:b4:d7:c6:c4:ab:13:b9:b0:56:80:8e:34:b3:
64:d3:2a:e9:6d:e2:0d:df:d5:13:2c:4c:e3:ec:c1:18:90:f5:
f4:d6:be:f7:6d:f1:13:40:32:4a:23:d3:c0:9c:84:fb:0a:55:
da:03:04:e7:76:b9:d2:9c:4f:2a:65:d0:b8:c0:4a:7a:b6:e5:
b9:de:10:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:48:34 2026 by rpki-client