
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
File: QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json)
Hash identifier: 7GaEcEsYAO51P3TT8E+kbyGS+beZgmUm1pCTbR+H+lw=
Subject key identifier: 94:03:19:56:75:B2:5A:D7:3A:4F:6E:C8:F4:91:B3:26:A6:83:83:A7
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Certificate issuer: /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
Manifest number: 08B8
Signing time: Sat 22 Aug 2026 20:21:37 +0000
Manifest this update: Sat 22 Aug 2026 20:21:36 +0000
Manifest next update: Sat 29 Aug 2026 20:21:36 +0000
Files and hashes: 1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: QpbRgh93ZOdkmAy7huPH/lPV+4Y7uL3I3tlla2OkVrY=)
2: 6944587246B311F090CDB927C4F9AE02.roa (hash: VJ0PaimdIk1enlfYWOaptRsWi7j1kdYlaW2W2nKmkrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Validity
Not Before: Aug 22 20:21:36 2026 GMT
Not After : Aug 29 20:21:36 2026 GMT
Subject: CN=6a8a04d0-0174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:ee:ad:c0:5c:00:ce:60:ad:0a:ea:df:c8:
e3:94:ef:e2:b7:1e:2b:cf:93:57:f9:a0:49:7f:bf:
8f:2d:0a:19:f5:56:fe:e7:92:ba:ff:4c:7b:c5:ea:
c8:49:22:db:50:29:a4:40:a4:57:91:a2:39:6c:54:
15:2c:52:f4:d5:dc:a9:ed:b9:01:28:6e:de:3c:a1:
d0:de:3e:f7:2d:f9:a3:4c:6a:81:5c:cf:4f:be:fb:
58:88:03:ca:9b:16:dd:19:9d:c0:91:9a:62:ea:9d:
e2:0f:34:d9:56:59:87:e6:ed:0e:83:af:c6:57:9e:
ed:f3:eb:36:c5:76:42:80:d9:d5:d3:24:b3:a9:77:
f6:44:22:cd:75:94:66:9e:c9:de:6c:57:1e:8d:3a:
98:01:83:69:4b:6f:a1:bc:57:06:88:ee:7e:d4:e1:
d0:0d:fd:2c:2b:3c:da:46:b5:f2:f7:3e:29:1c:5a:
b1:f3:48:80:bb:32:e5:45:4b:07:70:78:92:78:7b:
89:08:ff:8b:d1:56:23:ab:8c:d2:e1:e2:06:6e:cb:
ad:6c:77:07:82:1f:29:43:ca:8b:3f:f3:36:46:cf:
22:75:1d:4d:3f:79:04:f9:4b:7f:a1:85:4f:fa:79:
7e:ff:83:1a:87:17:73:11:c6:83:63:60:11:11:79:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:03:19:56:75:B2:5A:D7:3A:4F:6E:C8:F4:91:B3:26:A6:83:83:A7
X509v3 Authority Key Identifier:
keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:52:92:68:71:39:76:43:fa:92:67:a6:d4:70:77:50:4f:5c:
6b:ad:6c:ec:83:e7:85:ba:b0:dd:28:7a:bd:12:0e:dd:ea:2a:
fe:78:20:f8:23:a7:89:1f:2a:e2:e9:aa:97:34:8a:05:f0:0b:
f4:84:13:e0:ee:3f:a6:e0:47:29:0f:b0:d5:f7:de:08:30:1c:
bf:bb:6d:9d:ef:ec:3d:e2:16:25:ff:d7:86:5e:9c:5a:f1:36:
24:56:fd:c4:cb:d8:69:67:6f:7b:cf:91:53:74:f6:3a:ad:de:
c5:d0:a1:37:d7:98:ae:22:8f:e1:d1:e1:3b:42:a6:fd:59:11:
8e:fa:1d:c8:8c:14:81:72:5c:2e:d5:d9:b9:c3:ac:a8:70:66:
fc:96:26:97:68:65:c9:e2:0a:71:4a:06:bc:35:d4:27:ab:0f:
ec:65:41:83:6b:0f:2b:6a:b3:6b:21:5a:c7:44:04:1b:a1:6e:
ad:03:5e:99:95:fc:4b:fc:fa:a5:74:04:b3:fe:2e:d0:23:73:
e0:69:28:dc:2b:25:5c:9f:6e:ec:fb:9e:75:3d:86:dc:d5:a2:
d7:2c:a9:e9:5b:7e:d6:7b:cb:2b:73:ed:f1:c3:e5:ba:be:77:
44:e9:55:13:d9:a8:78:00:13:96:33:08:e1:5f:18:dc:cf:15:
cb:3a:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:19:41 2026 by rpki-client