
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier: 6/rRRSBGQcsKU4qdlNYZoFHG9108mNsZsbeaODfgdc4=
Subject key identifier: F6:3A:8A:3D:9D:1B:05:E4:02:A8:39:0E:6D:6D:4C:D6:FB:B3:AC:C0
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 08E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number: 0824
Signing time: Fri 04 Sep 2026 21:53:04 +0000
Manifest this update: Fri 04 Sep 2026 21:53:04 +0000
Manifest next update: Fri 11 Sep 2026 21:53:04 +0000
Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: 9+o5A87ph1YcY61ia9U9jjBqfntyuPTfCzbadlSI+Dw=)
2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: fu29/u9VpVu7rmcHbFU0N0wrb7076t3GVXEP5c8rVMA=)
3: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: SldeaCZGSwTt8m25XecGitCIUSJt0D3MD87GNQPgihE=)
4: 632982C478E411F0B36C2173C4F9AE02.roa (hash: qJHNInkkLUDjF8Std1fFlLs2dkTvsMn5hYhhfgfxfDk=)
5: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: tBd/IumJTmt6lgfO1XEOgc68XMugh0pEAslIa6KWSe4=)
6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: yblVKBomAmKdFLx7E1GhA7lmIOLPIfTo5ijL1IDIgeY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 21:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: Sep 4 21:53:04 2026 GMT
Not After : Sep 11 21:53:04 2026 GMT
Subject: CN=6a9b3dc0-eb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:b1:87:f3:9d:b4:eb:74:50:40:48:0a:51:
cd:a9:70:23:e6:91:29:ef:cc:cf:5f:af:89:86:6a:
3b:96:90:02:2d:82:7b:15:9d:63:8d:24:40:c2:23:
35:a8:94:0a:96:05:47:ea:27:4b:4f:70:15:dc:1d:
2e:25:ff:9c:ed:64:0c:a9:ed:30:6b:a1:ba:81:72:
2d:ca:ac:e3:2d:e5:2b:c2:06:a7:d4:af:d5:89:c7:
bc:94:02:d3:ed:9e:07:b6:fe:f6:ff:7c:bf:33:8b:
d6:bb:31:46:ca:91:8b:aa:9a:7a:61:9f:96:a3:4b:
e7:a9:d7:35:06:b9:8c:fe:c1:b3:2b:cc:16:fc:1a:
4f:74:e6:ac:27:c0:b7:f4:17:46:b1:cd:e1:ed:b8:
73:6d:d1:94:c4:c9:f3:a3:fe:b3:50:3e:4b:a9:10:
9b:7e:78:0d:f4:69:e5:6f:56:b1:08:73:80:a8:87:
d7:be:aa:b4:bd:64:55:ec:72:ab:89:56:59:c9:18:
19:4f:26:93:32:64:69:5e:4f:b6:62:74:45:2f:e8:
d5:4d:90:cb:5f:0d:6b:66:2b:19:87:f2:54:74:d0:
21:55:7f:40:29:2f:22:69:37:10:14:b3:90:ab:4c:
09:43:5c:ff:c0:90:fa:b8:26:e2:44:3b:ea:f5:57:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3A:8A:3D:9D:1B:05:E4:02:A8:39:0E:6D:6D:4C:D6:FB:B3:AC:C0
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:41:1e:26:8d:00:66:dc:cc:b5:7c:7a:e7:f4:b3:12:53:c5:
09:04:6d:31:e8:12:61:c9:cc:37:04:3c:5d:88:ce:0b:de:e8:
92:2e:47:6b:df:7a:d1:6a:99:09:da:cc:c2:36:fa:4d:b3:45:
92:f1:8d:36:df:bc:c9:66:b5:d9:19:bf:c3:65:9f:b4:ff:d4:
b9:9f:38:53:ac:b2:cd:26:5e:67:5e:de:ed:04:ce:54:0e:df:
20:ba:64:59:fc:0f:fc:cd:49:f5:1a:ab:68:73:61:ba:60:dc:
33:25:a7:e0:a0:2b:7b:41:ee:32:5c:dc:29:16:39:e2:8f:dc:
6f:2d:65:cd:f4:82:1b:89:f6:32:22:1c:9b:67:62:5b:ab:31:
1a:ef:72:b0:cb:6d:9e:d3:46:9a:d9:c1:ae:a5:ef:2d:bc:72:
39:84:3a:53:16:b6:cd:e3:44:c9:53:fa:9f:0e:0e:bf:98:c8:
a2:a0:d0:c4:0d:03:fa:a9:b7:43:3d:16:27:3a:75:ba:ce:cf:
e8:1b:10:04:2c:99:d5:60:dc:13:b8:95:87:26:c0:31:8b:93:
90:c4:62:20:11:c6:e8:df:23:a1:fc:78:bc:9c:1e:33:5b:62:
90:b5:7c:41:e1:a0:ec:06:11:2d:2d:1b:3d:7e:1c:46:b4:f9:
23:f8:93:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx
MjM5MDMzNzkwHhcNMjYwOTA0MjE1MzA0WhcNMjYwOTExMjE1MzA0WjAYMRYwFAYD
VQQDEw02YTliM2RjMC1lYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkzOxh/OdtOt0UEBIClHNqXAj5pEp78zPX6+Jhmo7lpACLYJ7FZ1jjSRAwiM1
qJQKlgVH6idLT3AV3B0uJf+c7WQMqe0wa6G6gXItyqzjLeUrwgan1K/Vice8lALT
7Z4Htv72/3y/M4vWuzFGypGLqpp6YZ+Wo0vnqdc1BrmM/sGzK8wW/BpPdOasJ8C3
9BdGsc3h7bhzbdGUxMnzo/6zUD5LqRCbfngN9Gnlb1axCHOAqIfXvqq0vWRV7HKr
iVZZyRgZTyaTMmRpXk+2YnRFL+jVTZDLXw1rZisZh/JUdNAhVX9AKS8iaTcQFLOQ
q0wJQ1z/wJD6uCbiRDvq9Vdr4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPY6ij2d
GwXkAqg5Dm1tTNb7s6zAMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5
MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx
QS16OFliRmJwTzhTT1FNM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqEEeJo0AZtzMtXx65/SzElPFCQRtMegSYcnMNwQ8XYjOC97oki5Ha9960WqZ
CdrMwjb6TbNFkvGNNt+8yWa12Rm/w2WftP/UuZ84U6yyzSZeZ17e7QTOVA7fILpk
WfwP/M1J9RqraHNhumDcMyWn4KAre0HuMlzcKRY54o/cby1lzfSCG4n2MiIcm2di
W6sxGu9ysMttntNGmtnBrqXvLbxyOYQ6Uxa2zeNEyVP6nw4Ov5jIoqDQxA0D+qm3
Qz0WJzp1us7P6BsQBCyZ1WDcE7iVhybAMYuTkMRiIBHG6N8jofx4vJweM1tikLV8
QeGg7AYRLS0bPX4cRrT5I/iTzw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:56:46 2026 by rpki-client