
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json)
Hash identifier: YGC7Ybme8Vc/PX9sCuYLrrFq6bTyzyQ7zXhBBPc13p0=
Subject key identifier: 00:CC:7F:29:40:F9:49:4E:84:C6:10:85:22:24:E2:92:26:10:F1:26
Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Certificate serial: 2EB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
Manifest number: 2EA5
Signing time: Sun 26 Apr 2026 15:25:57 +0000
Manifest this update: Sun 26 Apr 2026 15:25:56 +0000
Manifest next update: Sun 03 May 2026 15:25:56 +0000
Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: 0qoYh3DioJArJzW5zbGgF1LHF3WfGXG1YJFZvgqS7Js=)
2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=)
3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 15:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11960 (0x2eb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Validity
Not Before: Apr 26 15:25:56 2026 GMT
Not After : May 3 15:25:56 2026 GMT
Subject: CN=69ee2e85-cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:bf:e2:48:82:9e:fb:14:ea:1a:30:a7:8d:
cc:1a:0f:49:af:be:41:34:3a:ed:2c:0a:8d:22:54:
73:b4:d8:3e:89:39:e2:dd:07:bc:5b:c7:c7:b0:52:
5c:65:28:14:a3:bb:ba:f9:0d:87:fd:3f:85:4f:76:
96:b3:35:8b:b0:23:ba:7f:0f:69:45:90:86:a9:44:
39:cf:5c:0c:e0:47:97:34:3f:ce:29:be:30:96:4b:
78:f0:4d:8a:10:fd:d6:e5:3e:df:01:d6:2b:4f:4e:
4f:0d:0a:b5:41:07:f7:98:22:04:cc:b9:eb:e9:ad:
9d:f9:41:6a:db:37:08:71:a7:2e:c9:8a:4d:ea:ca:
0b:b8:3f:78:37:c7:f1:46:1c:9a:70:72:9c:3a:85:
62:ea:84:39:e7:58:a7:21:14:06:c5:2c:60:32:54:
f5:bb:7b:45:64:69:c5:b1:f8:b1:1d:4d:f3:3a:f4:
83:8e:c1:5f:79:94:27:8d:6b:9d:14:2a:94:0b:22:
73:82:e3:6a:e1:64:49:d6:8c:42:7a:3d:28:57:b7:
bb:f7:11:e3:1c:a6:3a:22:a4:20:61:6f:66:38:67:
76:e9:8a:30:df:8f:35:ff:7d:f3:7e:77:38:32:3d:
39:1d:b7:7c:af:0d:45:33:01:c6:b0:06:d2:a7:31:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:7F:29:40:F9:49:4E:84:C6:10:85:22:24:E2:92:26:10:F1:26
X509v3 Authority Key Identifier:
keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b2:be:17:39:75:0a:07:37:2d:db:98:16:92:3f:71:02:12:
9c:82:41:df:75:66:ec:92:be:d0:8d:84:1f:72:03:f7:a9:f4:
f6:cc:a9:28:02:14:44:79:6a:69:48:24:df:b0:34:eb:3c:f5:
21:d1:c0:d1:57:3d:d3:5f:41:f9:78:f9:a1:11:20:07:a1:2c:
23:61:eb:a8:54:e2:81:02:d4:31:29:27:61:0b:bc:b9:6b:37:
70:fe:0b:3e:4c:f2:4a:49:7e:48:5e:8c:bb:50:6b:4e:ba:29:
41:ea:07:ea:1d:c3:24:ca:26:81:b1:4b:96:36:42:a7:1f:d0:
cc:a3:d4:e9:04:0a:65:67:79:cd:bd:97:8f:c9:69:1c:24:af:
9a:45:d8:09:ee:58:ef:90:78:13:6c:bb:2f:05:0d:ec:42:cc:
c9:96:93:95:e0:b6:c6:81:35:30:10:76:8d:66:f2:96:4c:51:
ad:6e:d7:3e:ca:63:05:73:a1:d2:ea:44:08:ad:d5:c9:29:c4:
c0:d0:af:3d:6b:01:17:47:b6:5a:53:b8:44:26:6f:b3:4b:9e:
01:b9:d7:3f:23:73:8e:46:89:fa:aa:b6:26:b9:dd:b6:eb:7a:
25:a9:15:67:5b:0a:9c:5a:cb:5d:55:63:d2:65:13:13:9b:bc:
9b:98:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:34 2026 by rpki-client