
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier: LbxWMuCIA8cX5Hg4SGoIgUp2T8xcCwySEdNKQ9zFLXM=
Subject key identifier: D1:85:F1:57:3E:C7:B8:53:F3:E4:91:B6:39:DD:68:F7:74:F8:93:D4
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial: 0491
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number: 046F
Signing time: Wed 29 Jul 2026 00:56:47 +0000
Manifest this update: Wed 29 Jul 2026 00:56:47 +0000
Manifest next update: Wed 05 Aug 2026 00:56:47 +0000
Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: aiub+ijefPfvYAki6JlbHlNzRs0A0DmJrbcGuX0/jR4=)
2: 7CB87E5C4D7311F1852BB4CA95833773.roa (hash: P09MeZZNI9IoD7N8gzlqtiufEzZ6jxOOO+4cLeCxSQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 00:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Validity
Not Before: Jul 29 00:56:47 2026 GMT
Not After : Aug 5 00:56:47 2026 GMT
Subject: CN=6a694fcf-e551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:b2:49:ea:3f:1c:6c:88:e3:ba:f2:20:a7:
1e:4d:77:3f:51:b2:67:36:c9:97:fe:73:7b:52:7e:
33:0b:2f:87:51:c6:a1:aa:6f:92:80:36:7d:52:5d:
f8:1d:59:22:7a:56:27:87:c8:fc:e7:8d:a3:e0:6f:
a5:23:7e:9e:91:d7:43:94:b6:3d:61:72:ab:0b:f8:
4c:86:fe:d1:7c:a5:11:47:b6:0e:35:20:b7:29:dc:
5f:8a:91:e0:c7:06:ec:3c:a8:22:52:8d:90:e6:e5:
37:3d:58:ef:e2:f4:1a:2b:9a:16:1d:e4:87:7e:91:
9f:bd:09:f0:7f:9e:b4:29:14:de:c5:f2:99:40:30:
a4:c3:bc:12:57:4e:f5:95:02:d7:f9:cf:15:8a:2d:
8c:b7:62:8c:ef:85:c8:e4:ed:d0:97:6b:bc:d8:4b:
19:25:7f:72:0c:1e:c1:03:97:d3:dc:ca:08:bc:c0:
20:bc:3e:4e:00:bf:1a:03:47:ea:17:2a:e3:f2:e1:
9b:4b:2a:92:50:d4:21:cd:b2:57:86:04:e9:87:03:
6e:43:cf:93:dd:c8:39:6c:84:ce:fc:86:ca:cb:4f:
d7:87:87:ed:fd:00:71:62:26:a4:c3:04:95:b2:bd:
8b:22:d6:11:9b:85:12:76:49:af:38:cc:b2:1f:94:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:F1:57:3E:C7:B8:53:F3:E4:91:B6:39:DD:68:F7:74:F8:93:D4
X509v3 Authority Key Identifier:
keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:02:29:1e:01:17:c1:51:4a:ba:bf:53:f4:88:56:4a:bc:e5:
12:50:f8:a6:4c:70:4f:d4:31:f7:95:03:9c:7d:98:a5:2f:4a:
40:02:37:11:8c:a9:00:35:a1:e1:0f:1b:2e:df:15:2f:71:66:
8d:b3:06:5c:7f:ff:6f:87:c5:0a:d5:df:e3:76:b5:fd:29:88:
0a:a2:97:f3:8a:15:d7:e9:93:1c:32:9c:4c:27:ab:af:44:91:
de:cc:7f:63:b4:8d:b4:5f:41:8e:0c:6b:0b:0e:cf:85:db:83:
57:1d:08:f9:93:d2:52:cb:5e:e2:a2:25:d4:93:ea:23:d5:31:
6e:64:32:74:2e:9a:a8:04:a0:c8:c9:68:70:d5:2f:45:41:17:
60:0a:97:5d:96:ac:31:70:78:6a:89:b0:66:48:7a:ff:d1:35:
61:f5:9b:72:76:d4:e2:bb:53:89:81:be:86:62:9f:6a:34:26:
4b:d3:44:8f:ca:f3:3d:ea:dc:e3:a6:71:0d:58:38:00:6e:fb:
7f:d6:3f:7c:dd:2d:21:ba:7d:b6:ae:66:f1:36:8c:38:a8:40:
9e:65:72:8b:f2:76:e8:c4:dc:63:b8:74:30:09:79:0d:14:6d:
83:51:d7:6a:2f:f4:c9:75:24:c5:cb:da:ea:9f:5d:8a:b9:ec:
d8:ef:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:39 2026 by rpki-client