
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json)
Hash identifier: XLI9M90YdHUgRx2XHUKeDxz3ow6ibdAlA8f1bcHnrjY=
Subject key identifier: 1A:9C:1D:C0:EF:54:D1:62:EA:DB:AA:E2:6D:B2:26:BD:56:76:37:A1
Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
Manifest number: 0217
Signing time: Tue 23 Jun 2026 03:10:22 +0000
Manifest this update: Tue 23 Jun 2026 03:10:21 +0000
Manifest next update: Tue 30 Jun 2026 03:10:21 +0000
Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: OMYhQXpmKFHmzsvYS41CZ9w5whjj0ncTXMoBqklI7VM=)
2: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: QZy1qVC0Q+cqyxMf7EVM3pOdkz0nlqRyTh5BSLF+qQU=)
3: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: LVK4CGRWmLE4xB4n/5XeLVwhnpe4egBFCt8oT+b9SGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 03:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Validity
Not Before: Jun 23 03:10:21 2026 GMT
Not After : Jun 30 03:10:21 2026 GMT
Subject: CN=6a39f91e-dc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:f0:65:c5:59:cc:4c:6c:68:42:d3:ec:a3:
d4:87:a5:5d:f0:05:be:8e:9f:4d:6b:70:95:8f:5f:
47:93:d2:cb:41:16:d7:c4:06:d8:4f:71:9b:d3:2f:
47:7b:cb:d2:4c:fc:07:5b:ae:94:af:5e:74:18:21:
93:19:6d:9a:89:b2:e0:fa:b3:17:c8:83:53:c6:f0:
4a:f0:c2:39:a8:1f:fc:2d:b7:9d:b6:1c:b3:b8:77:
21:f1:22:dd:f5:45:97:1a:bb:53:65:28:3a:4b:7c:
3b:6c:fd:a6:d6:c3:cd:08:44:0c:57:f0:cd:e8:79:
c2:5e:9d:a2:3b:ce:17:50:3c:f7:6b:36:38:ea:8f:
3c:9e:72:bd:20:d8:ba:09:45:cf:db:a1:ff:3c:66:
43:0f:0c:78:48:4f:be:06:b9:0b:8c:19:02:e9:2e:
fa:90:33:18:26:e9:c7:d0:5e:5e:06:84:e9:68:92:
62:e1:3c:a7:d6:f2:7b:e4:b1:fc:9f:40:41:c6:71:
86:43:ca:a7:a5:d3:7d:7b:55:dc:2b:ee:49:2d:f0:
13:33:d6:f7:cb:b1:c7:b8:6e:3a:67:45:f8:ce:78:
2d:aa:95:7a:99:b4:db:28:af:31:ae:99:83:f7:f2:
5b:71:51:23:8e:49:22:a9:77:7a:db:d6:dd:99:39:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9C:1D:C0:EF:54:D1:62:EA:DB:AA:E2:6D:B2:26:BD:56:76:37:A1
X509v3 Authority Key Identifier:
keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:65:a6:c8:1f:08:c7:9a:ce:bf:cc:cf:51:07:72:70:2a:
21:24:f2:ad:e4:68:30:6f:de:f4:de:6a:f9:b7:f6:e4:fc:02:
14:ae:9d:11:ee:e5:a4:b1:a3:49:8a:a8:31:48:ed:e3:41:ad:
c1:c7:36:23:3a:f0:b3:ba:b3:75:3a:00:3d:d9:5c:8a:64:2d:
ed:ba:ae:d7:8f:97:bb:e7:92:7d:21:51:37:eb:18:79:ab:d3:
24:a8:b6:a5:28:54:62:92:97:bd:07:97:9c:be:b1:95:87:8a:
5a:bd:44:97:c2:39:46:1a:f2:1e:fb:12:ac:f9:f8:ad:6d:b1:
6c:40:2c:c0:e9:73:26:20:4c:17:98:79:a1:0e:ea:15:6c:f7:
d4:88:44:fd:eb:25:54:69:91:31:05:cf:4c:37:c6:74:f3:0f:
ed:d8:a6:da:99:8e:93:49:ec:3b:59:22:c9:64:69:c8:bb:5f:
a7:84:0d:b7:7f:2e:b9:f3:6e:aa:b3:f6:60:28:4d:2c:75:4f:
7a:8b:77:8e:42:ae:03:c9:93:a5:b5:b1:a2:a7:72:42:3e:ce:
89:87:98:fd:0e:b5:c3:cf:ea:24:56:29:66:10:35:fd:96:fb:
6c:43:64:ae:3b:9d:f3:ab:47:b8:3f:7c:85:d9:41:b6:41:b1:
9b:da:b6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:32 2026 by rpki-client