
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier: IW2OT6gjiqJlOT50NNQSoDV/6E6AAdAATPE6hXzqAXo=
Subject key identifier: FF:53:0E:59:A9:EB:93:FE:AB:19:2E:12:E3:B0:FF:56:A0:E8:4C:82
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial: 04B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number: 048E
Signing time: Sun 20 Sep 2026 23:55:24 +0000
Manifest this update: Sun 20 Sep 2026 23:55:23 +0000
Manifest next update: Sun 27 Sep 2026 23:55:23 +0000
Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: hd6CY67KhnXu/gaHmH00iOf/nNXxNuURcPmeOCupRv0=)
2: 72CC7E489B7011F1BE44BE903D11F970.roa (hash: 3I4v5qOzX+tYbITH7A5Ntx0nhzYCg2Bwe+pDTdKTk1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1203 (0x4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Validity
Not Before: Sep 20 23:55:23 2026 GMT
Not After : Sep 27 23:55:23 2026 GMT
Subject: CN=6ab0726c-4a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:ac:aa:46:50:b0:ce:0e:bc:46:68:88:9a:
2d:11:6b:80:da:7e:ce:22:d5:90:28:f1:dd:02:3c:
d0:a5:73:92:ae:cb:c7:b3:6c:00:96:6a:4f:96:75:
2c:fa:e3:56:a3:2a:a4:8a:de:ad:3f:36:d6:ff:41:
de:78:a4:f4:35:1d:1d:d1:6c:7b:33:3c:8f:30:cb:
b6:5e:9e:4d:b7:54:1c:4e:6d:41:17:9b:ae:ee:fd:
9f:e1:69:6e:0c:31:8a:61:9a:24:82:1e:15:53:21:
4b:28:ae:9f:7a:ab:54:dd:e6:49:c4:a7:11:cd:76:
37:16:5f:bf:1a:da:1a:48:18:b1:aa:d0:84:f9:9e:
ae:54:57:8a:6b:4a:f1:2b:b6:36:27:1e:2d:d4:d2:
78:99:fe:58:a9:a7:40:a6:44:99:b8:95:fe:45:17:
f0:ab:0d:92:c3:86:12:29:4d:0b:74:ed:ee:c5:dc:
12:4e:58:4e:61:e0:19:b1:e0:8e:53:a8:7e:97:49:
72:de:ae:31:76:46:25:b6:a9:15:54:b6:db:5d:53:
7d:dc:82:f1:3f:36:86:4c:d6:27:6a:6f:28:22:8d:
31:11:a8:67:c4:e1:cf:bd:03:04:05:1a:57:c0:43:
ff:e4:3c:2c:85:59:3e:ca:ae:2b:b4:c6:2d:f9:37:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:0E:59:A9:EB:93:FE:AB:19:2E:12:E3:B0:FF:56:A0:E8:4C:82
X509v3 Authority Key Identifier:
keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:cb:c0:85:47:9c:38:0a:ef:bc:b0:a6:f2:e9:ed:8c:f4:
88:35:c1:dd:f6:d9:85:39:b0:09:76:7f:5f:ca:13:a0:e9:9a:
ac:f0:2f:37:a4:16:3e:61:c1:98:f2:1a:e2:5c:21:28:7e:c0:
5f:4d:b3:9b:6d:2d:86:02:0d:43:f7:20:78:49:c8:f4:e3:60:
38:64:0e:8d:3b:8a:c2:27:23:6a:32:c1:b0:64:70:8a:75:46:
73:02:96:f6:b7:e5:19:88:2f:59:cb:a4:93:bd:73:50:2e:6e:
f4:36:9b:5b:91:2d:4a:66:20:dd:6b:43:41:10:3e:7d:70:62:
6b:fc:b3:b7:0a:78:14:48:79:30:86:59:59:1d:31:be:89:83:
72:4c:c9:07:67:f6:79:9d:3d:e1:f9:c3:80:7f:16:36:53:4c:
5f:54:02:18:c0:33:9a:9a:1c:c9:8b:09:c0:b5:4b:10:5b:a8:
d2:a9:f2:b2:dd:c1:ff:55:49:d1:18:88:bb:31:9f:01:3b:fd:
0a:4d:f3:ee:7f:bb:f3:15:7a:b5:22:88:58:dc:4d:2c:8a:70:
60:4b:41:23:64:93:21:8b:58:69:b3:1f:5f:d0:3c:44:bb:6c:
82:21:3f:53:9b:04:b0:44:f4:fe:98:24:77:40:89:ac:92:02:
8d:7a:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:00 2026 by rpki-client