
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier: O7iuKbu8nlxJQJT9eRNH5cq0XWZUoERvwauEP8a1IXI=
Subject key identifier: E7:DE:4E:B3:01:40:AD:EA:DB:2D:8A:6A:4C:AF:FC:38:7B:91:92:D3
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial: 04BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number: 0496
Signing time: Wed 07 Oct 2026 00:12:58 +0000
Manifest this update: Wed 07 Oct 2026 00:12:58 +0000
Manifest next update: Wed 14 Oct 2026 00:12:58 +0000
Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: CA2uZNbxmJlUjDU4ZhyCNd7sSc8aVIMiFDEImzPzJ04=)
2: 72CC7E489B7011F1BE44BE903D11F970.roa (hash: 3I4v5qOzX+tYbITH7A5Ntx0nhzYCg2Bwe+pDTdKTk1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Validity
Not Before: Oct 7 00:12:58 2026 GMT
Not After : Oct 14 00:12:58 2026 GMT
Subject: CN=6ac58e8a-c026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:d7:06:52:61:41:57:25:4f:b9:64:54:c7:
c9:69:c6:89:aa:66:13:8a:92:6d:30:65:b9:f2:c7:
34:da:a3:b5:36:2e:1b:a6:87:b0:3e:99:a5:f6:8e:
9c:9a:34:f6:c0:4c:64:c0:aa:ab:7c:98:ff:5b:1b:
59:1b:1c:84:d7:86:a1:b0:d3:ee:a6:ac:64:9f:c3:
cf:9c:30:bb:72:4c:0e:a0:34:6a:33:82:19:75:7d:
76:32:e8:f0:b0:2f:92:6f:ee:66:8e:c9:a0:6a:c5:
a1:4d:ea:78:b2:ad:d3:e5:c3:c9:62:dd:49:52:da:
6a:65:54:fe:22:44:57:e4:5a:16:de:47:8e:4d:85:
bc:87:e3:f9:81:08:98:9b:19:c2:d5:d3:5c:04:02:
e3:e1:9d:8a:f7:8f:cd:f5:60:fe:96:c4:57:21:18:
93:14:d3:01:15:35:91:37:36:67:dd:2f:ec:8b:3f:
ef:49:1d:ce:97:93:84:c6:df:4d:84:5a:0a:7f:3e:
16:44:93:25:a1:fc:47:09:4d:4b:af:27:54:dc:4d:
dc:7e:c3:fb:45:a8:bc:c0:50:6d:56:14:17:f6:34:
9c:7d:6d:65:2a:d3:36:a7:29:2d:15:b4:d3:a6:4c:
05:4a:d3:20:20:4f:fb:f5:09:97:55:82:55:0d:9c:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:4E:B3:01:40:AD:EA:DB:2D:8A:6A:4C:AF:FC:38:7B:91:92:D3
X509v3 Authority Key Identifier:
keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:15:5d:4a:ec:cb:53:58:7b:ff:da:1c:f9:47:8e:b1:63:56:
9a:2f:6d:20:76:01:cb:64:79:b6:2d:12:8f:c7:43:6b:6d:9e:
a1:f8:59:46:9c:70:3b:94:71:74:57:c0:87:d1:83:2c:b7:0a:
03:27:8c:e6:ad:91:5a:61:09:f5:03:56:ee:0a:2a:ff:6d:72:
ad:2f:0c:ad:6f:7f:91:d9:ce:c4:19:f7:6e:b2:27:2e:2e:37:
a2:b4:1b:91:32:0c:af:4b:f4:45:f6:2e:95:41:b0:48:ee:a1:
32:da:64:d1:f7:93:22:85:b6:cf:c6:2d:9b:d4:fd:72:d4:af:
f0:30:84:90:3b:a9:fb:38:22:1f:fc:33:bd:b1:bc:cd:ef:51:
18:24:51:ec:8f:bf:5c:a2:68:1f:12:4c:0a:a4:0d:e4:5d:67:
80:3d:83:c3:4d:9f:22:01:21:e1:54:9b:60:34:13:40:99:1b:
20:ed:7c:e1:ed:8d:19:51:77:54:b6:fd:7b:c8:22:75:2b:5c:
ca:00:84:cd:64:ad:29:9e:68:7e:bf:3b:af:39:d1:44:6b:82:
4e:82:83:77:88:79:22:36:8c:0f:d7:c5:8f:6a:0e:14:04:91:
46:aa:b4:15:be:cc:6d:0c:1e:b6:f8:0a:18:06:04:db:59:df:
16:a6:11:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:26:33 2026 by rpki-client