
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier: 3dDE9kBxZWvyVCHz9r5n71DligcCz1+kGfyoVm8WtiM=
Subject key identifier: 81:34:0D:8A:6D:F9:60:92:96:E8:A9:7A:6A:62:85:D5:5E:26:A8:D3
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial: 042A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number: 0415
Signing time: Mon 02 Mar 2026 01:46:26 +0000
Manifest this update: Mon 02 Mar 2026 01:46:25 +0000
Manifest next update: Mon 09 Mar 2026 01:46:25 +0000
Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: rJ2kcHj/EfIiqsgSunqbSdgFiroSVczo8y620AqMlLM=)
2: 332B4C6ABA7011F088893F1DC4F9AE02.roa (hash: 0Sm54IRiiNJRyYTIMOY3l4XXUfmKddVszLFvgn4oy1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Validity
Not Before: Mar 2 01:46:25 2026 GMT
Not After : Mar 9 01:46:25 2026 GMT
Subject: CN=69a4ebf2-bb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c4:d1:00:bf:d8:67:17:27:4e:82:1f:12:76:
08:1f:5e:97:d4:5b:4c:b3:24:fc:da:75:89:4f:f4:
9a:f9:1a:72:42:f9:36:37:54:34:a2:28:23:54:67:
22:1b:77:00:22:e6:53:11:84:b2:97:c2:32:71:39:
07:e2:37:1c:ce:cf:3e:8e:6b:4f:7c:77:fb:5f:2b:
24:70:d6:ed:9a:07:dc:60:22:0b:79:53:6f:ae:8e:
96:a4:00:cc:32:d9:56:6c:48:25:04:fc:4f:42:5d:
6c:91:b6:ee:84:ab:b8:12:ce:c3:b1:d1:b5:11:c7:
6a:51:e3:82:b4:19:a6:3d:db:bc:8d:d7:9b:b9:f7:
18:b5:e2:31:01:2a:f5:5f:90:b9:be:67:1f:66:94:
4e:7f:35:e5:12:9f:b5:58:3a:ac:7c:cc:51:0a:6c:
ad:b4:3e:ad:3f:68:30:20:47:86:53:31:eb:f3:c8:
63:00:56:00:95:04:61:30:77:33:3b:2b:85:67:f6:
1e:45:56:df:b0:37:89:91:f8:2e:2b:a3:f0:59:d8:
c4:f4:51:8e:83:1e:45:f9:ba:00:45:00:01:b8:b6:
1f:17:76:23:cd:2d:1b:9a:2c:ed:ee:d4:69:cf:21:
50:ab:69:46:bd:f0:5c:af:55:1d:85:bb:ee:90:57:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:34:0D:8A:6D:F9:60:92:96:E8:A9:7A:6A:62:85:D5:5E:26:A8:D3
X509v3 Authority Key Identifier:
keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:8e:ce:17:b2:10:99:88:30:61:32:31:7f:8e:d9:db:e8:
07:75:41:c3:36:0a:19:8b:c5:6d:8d:2c:0f:d7:fd:1b:e2:41:
08:1c:3e:4e:80:a1:34:91:1b:be:12:de:3c:04:30:91:54:da:
c6:18:1b:8b:01:4e:04:36:10:6a:b1:01:10:7f:19:33:7a:6b:
52:c6:f9:0c:f5:0e:3a:43:61:42:1c:36:86:2d:6e:15:02:34:
32:ff:2d:f3:29:11:db:66:b8:9d:0f:34:b0:45:48:fe:1b:48:
85:b0:29:79:fa:56:f7:46:9f:d7:f2:61:24:47:73:af:da:bb:
fe:96:6f:09:33:bb:5e:28:0f:4a:bf:0f:b8:18:88:9d:0e:3d:
31:35:59:53:e0:e4:a9:50:5f:6a:e2:a2:a6:53:ff:5a:74:62:
2c:1b:4f:1d:66:a2:e0:bc:bf:45:2d:25:ca:eb:9c:ac:fb:7f:
7a:6b:13:14:44:48:62:de:49:e1:61:7b:39:48:0a:a3:7f:8e:
07:79:67:24:35:e6:cd:ac:0a:5e:29:fa:c9:c6:40:8f:bc:98:
b0:21:ea:41:01:44:12:b8:af:ac:6c:b5:6c:c0:1b:b1:ea:11:
05:8c:af:cc:06:42:26:f7:fe:ed:89:99:ea:c9:10:d1:43:ee:
c0:42:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:50 2026 by rpki-client