
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier: Vfx8Rk3ywuSf/rrgBM0UPcF2oRJOr21+kj9mnRHI4uc=
Subject key identifier: 8F:1A:CF:CF:CC:8C:6C:40:F7:16:AC:D8:DE:C5:97:C8:7A:A2:FD:E0
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 08AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number: 07F3
Signing time: Fri 12 Jun 2026 22:13:44 +0000
Manifest this update: Fri 12 Jun 2026 22:13:43 +0000
Manifest next update: Fri 19 Jun 2026 22:13:43 +0000
Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: ispoXBq3gt9ArlPyhz/onifMRIRswZOZ9Wpqs1Sh3mA=)
2: 632982C478E411F0B36C2173C4F9AE02.roa (hash: cFCH+NfdcPbE/C4X/bhECB2fPxHMgBj4PKDN/L6jhnI=)
3: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: /xTj7xTsm7Y+p1ZvSo9zIww3Yk7EBjybsYmXsD416bI=)
4: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: JPCOlxoIy+z2DNQ0BspzKR/Qwx0mCFczeUvb2HAlSEs=)
5: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 5MPW02+FWtp87+3JRBALYbpeia6WJ5SPfWoB7PVlecg=)
6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: eh1uTKC6tkVJRkq8RjBwWq9qkvsNHm4pUfLbgOMIN2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222 (0x8ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Jun 12 22:13:43 2026 GMT
Not After : Jun 19 22:13:43 2026 GMT
Subject: CN=6a2c8498-635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:c1:c6:dd:40:db:54:2b:82:b3:cd:41:fb:
54:7e:51:32:42:82:bb:da:61:28:42:db:d9:2e:d0:
49:32:c9:37:a4:3c:4d:8a:74:68:ee:32:cb:a7:18:
80:6d:f3:1c:8a:23:a0:98:11:6e:18:4c:40:de:0f:
f3:3d:32:76:e0:19:d5:98:53:fc:97:aa:15:e6:58:
95:ab:1f:39:33:9f:9b:9a:27:81:84:d6:b7:b7:f0:
5c:81:a9:25:7d:24:66:9b:3d:56:b7:3d:e4:8b:ee:
32:fb:4f:6b:14:86:6a:2a:3a:9b:8b:f1:84:77:52:
ec:67:19:9a:46:be:00:15:40:33:76:c9:de:15:bf:
5c:2e:d8:3d:3f:c6:ee:b6:9c:77:c0:39:2e:bb:6c:
63:04:2e:8c:ca:89:86:cd:1c:73:45:7a:56:93:73:
4f:80:08:74:80:ce:fb:91:70:1e:91:2f:20:69:6d:
42:d8:7f:1b:45:7b:d4:0a:f1:4c:13:01:a9:33:49:
01:39:5f:ae:c5:e4:9b:3b:fa:99:25:96:37:dc:af:
3c:24:55:6b:22:54:7d:c6:0a:06:c1:72:32:7d:51:
a9:a9:f9:38:1e:d6:0e:ca:bc:a1:f3:95:00:b4:8f:
dc:fa:9c:04:5f:7e:cb:ed:6b:62:d8:8a:9f:05:2c:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1A:CF:CF:CC:8C:6C:40:F7:16:AC:D8:DE:C5:97:C8:7A:A2:FD:E0
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8b:c2:c3:ff:8d:74:6d:70:cb:8b:d5:fd:fc:3f:b5:ec:b1:
e3:11:b7:aa:5f:40:5a:9c:41:cc:77:a9:18:47:93:f7:2f:2e:
03:7c:6b:2d:19:5d:76:e3:96:9a:55:52:97:bc:40:81:41:ee:
62:f6:63:cf:f6:f1:6f:d9:3e:b4:75:43:1c:39:1c:98:ef:0c:
30:59:a9:bb:a5:8a:22:0f:e6:dd:b6:79:1d:48:ae:6b:83:bd:
d5:a2:97:63:e6:09:59:34:1d:8d:35:7c:08:36:bb:c4:19:0d:
39:57:ca:cc:2a:a4:35:f5:6c:7d:80:28:08:fc:9e:2b:0c:ea:
f6:1a:da:e1:d0:2d:31:06:88:17:46:73:46:0a:41:cf:1d:5a:
42:99:e1:7d:a0:d2:dc:96:09:76:58:43:1b:68:e4:96:26:c0:
dc:ca:ea:5b:ef:2f:52:ad:c2:c7:2b:56:14:de:0b:5c:ac:10:
fe:82:29:7a:0b:56:44:ee:e3:26:71:91:b7:a4:3b:af:34:af:
9e:7f:68:11:df:d4:30:14:27:3b:a4:14:31:1c:81:ab:49:98:
31:d2:82:94:4e:d2:9c:f4:9a:d5:b6:72:61:7d:ed:ef:2b:cb:
d0:b1:d2:00:cf:b9:b3:0b:ca:f0:5d:57:2a:cc:6e:57:92:63:
13:55:89:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx
MjM5MDMzNzkwHhcNMjYwNjEyMjIxMzQzWhcNMjYwNjE5MjIxMzQzWjAYMRYwFAYD
VQQDEw02YTJjODQ5OC02MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuODBxt1A21QrgrPNQftUflEyQoK72mEoQtvZLtBJMsk3pDxNinRo7jLLpxiA
bfMciiOgmBFuGExA3g/zPTJ24BnVmFP8l6oV5liVqx85M5+bmieBhNa3t/Bcgakl
fSRmmz1Wtz3ki+4y+09rFIZqKjqbi/GEd1LsZxmaRr4AFUAzdsneFb9cLtg9P8bu
tpx3wDkuu2xjBC6MyomGzRxzRXpWk3NPgAh0gM77kXAekS8gaW1C2H8bRXvUCvFM
EwGpM0kBOV+uxeSbO/qZJZY33K88JFVrIlR9xgoGwXIyfVGpqfk4HtYOyryh85UA
tI/c+pwEX37L7Wti2IqfBSxyUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI8az8/M
jGxA9xas2N7Fl8h6ov3gMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5
MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx
QS16OFliRmJwTzhTT1FNM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsovCw/+NdG1wy4vV/fw/teyx4xG3ql9AWpxBzHepGEeT9y8uA3xrLRldduOW
mlVSl7xAgUHuYvZjz/bxb9k+tHVDHDkcmO8MMFmpu6WKIg/m3bZ5HUiua4O91aKX
Y+YJWTQdjTV8CDa7xBkNOVfKzCqkNfVsfYAoCPyeKwzq9hra4dAtMQaIF0ZzRgpB
zx1aQpnhfaDS3JYJdlhDG2jklibA3MrqW+8vUq3CxytWFN4LXKwQ/oIpegtWRO7j
JnGRt6Q7rzSvnn9oEd/UMBQnO6QUMRyBq0mYMdKClE7SnPSa1bZyYX3t7yvL0LHS
AM+5swvK8F1XKsxuV5JjE1WJiA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:13:42 2026 by rpki-client