
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json)
Hash identifier: 9KgUK9KRoa/p6+LNQKL71aqxkPEIPVzNy0i+BE+g0mc=
Subject key identifier: 30:EF:29:7E:FA:59:2B:98:6D:8D:B2:3D:80:9A:29:CA:63:D0:20:2A
Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Certificate serial: 0B20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
Manifest number: 0B0B
Signing time: Sun 26 Jul 2026 19:46:59 +0000
Manifest this update: Sun 26 Jul 2026 19:46:59 +0000
Manifest next update: Sun 02 Aug 2026 19:46:59 +0000
Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: 4IcX+zaVb0r3qqTKI49bylfAdqNP4k/gD6E68FiZWZc=)
2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: cASTkD6P0USvFC5JERidtks+A/4jhXTPcKKMZcEkZtY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl
rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 19:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2848 (0xb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBD7, serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Validity
Not Before: Jul 26 19:46:59 2026 GMT
Not After : Aug 2 19:46:59 2026 GMT
Subject: CN=6a666433-ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:8d:56:58:e3:39:1f:33:ae:92:f5:09:51:
88:a4:56:f4:53:df:b4:b1:23:89:6e:f9:ca:e1:81:
01:86:27:55:41:18:a4:b2:b2:c4:4d:eb:18:b3:cd:
50:58:5b:5e:1e:79:72:d5:37:18:eb:f1:a0:4c:e7:
ff:b4:4b:96:02:f7:c2:c8:78:42:16:de:e4:a1:d1:
41:ea:f4:81:d5:41:1e:6a:2d:94:a4:f8:ac:4e:41:
56:2a:0a:cf:0d:78:9b:25:7b:b1:2d:0b:2c:e7:49:
f8:c5:fc:55:d3:c8:95:1f:16:55:9d:41:c6:7e:ab:
0b:46:82:37:92:8b:ee:bc:a9:09:d6:90:42:cc:84:
6c:84:e9:c3:f8:0c:fe:3c:00:a8:18:0a:65:41:a6:
02:2e:d7:ac:7c:33:b0:70:82:ae:64:5a:6c:1f:91:
08:0f:f3:8f:d0:90:ac:99:3c:c8:cb:4d:f8:90:ae:
68:2f:3e:99:c2:70:e1:7e:cc:4f:a9:5f:f1:c2:17:
ef:f2:83:c1:68:bd:b8:4f:6d:95:49:4b:5d:20:16:
b8:5e:73:c8:9e:03:f1:7a:87:63:e2:2e:f2:e9:02:
8b:fb:0f:78:71:67:d3:ba:97:8a:4d:bc:27:53:ef:
39:5b:fe:f7:8b:a4:9e:91:ae:a7:6b:cd:a6:c1:54:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EF:29:7E:FA:59:2B:98:6D:8D:B2:3D:80:9A:29:CA:63:D0:20:2A
X509v3 Authority Key Identifier:
keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:bb:2d:6d:6f:a5:50:b0:82:27:8f:3d:26:9d:91:dd:ef:
6a:ed:81:d7:de:83:fc:15:b0:df:3e:7a:f3:e2:7e:86:69:ec:
ef:41:40:8e:88:46:d1:2d:68:6c:82:2a:92:98:03:a5:d5:8f:
2f:10:3f:f4:b5:cc:32:39:6d:94:6b:59:c2:15:f3:c8:82:ec:
8a:6d:fc:bc:b9:bd:bc:9d:ca:89:80:5a:06:cb:b6:f9:f7:f8:
6e:58:ec:1c:73:5c:ea:f4:6a:50:ab:c9:1b:a0:c4:98:e9:2a:
75:24:ec:90:1c:55:b8:de:c5:ac:89:a2:67:8d:5e:f4:d6:73:
3a:dd:e8:9f:3d:6a:8b:67:95:56:f1:b6:22:23:51:1f:00:2a:
4b:0c:8e:d6:a8:10:e7:98:61:c9:c2:a1:15:23:ee:8a:76:d4:
5c:ca:69:3d:8e:fe:50:14:88:f8:b4:53:cc:a4:b3:bf:a7:de:
44:8a:9d:ad:c5:70:f6:27:a9:b7:99:7b:a5:70:6d:03:45:0b:
57:e4:fc:ce:30:63:63:8c:2a:a4:26:c0:66:9d:29:03:ce:a4:
2e:da:76:d9:f2:14:94:d5:cb:4e:37:ec:e7:95:f4:2c:08:4c:
7f:b3:b3:c0:78:77:ff:1a:70:bc:71:ae:30:86:53:f6:27:76:
72:b0:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:40 2026 by rpki-client