
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier: hzrQiD0Rzj7pAc1NKMItEk+94n5aJDSEBlScY5cQADs=
Subject key identifier: C3:D2:FA:AA:D9:F6:F4:1E:90:D3:D8:C1:C8:64:BC:AE:47:16:19:A9
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial: 049A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number: 0478
Signing time: Sat 15 Aug 2026 00:09:09 +0000
Manifest this update: Sat 15 Aug 2026 00:09:09 +0000
Manifest next update: Sat 22 Aug 2026 00:09:09 +0000
Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: ltWS1QanNjHiUOG/QPvfEOgy0QzASPbLhidIZtlXdPs=)
2: 7CB87E5C4D7311F1852BB4CA95833773.roa (hash: P09MeZZNI9IoD7N8gzlqtiufEzZ6jxOOO+4cLeCxSQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 16:49:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Validity
Not Before: Aug 15 00:09:09 2026 GMT
Not After : Aug 22 00:09:09 2026 GMT
Subject: CN=6a7fae25-d18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:8a:8f:88:20:a4:34:dc:04:bd:d7:c4:42:
5f:63:2a:48:55:8f:32:80:8d:08:5e:52:25:4d:5f:
04:19:f5:c2:95:bd:66:80:fc:fc:d5:37:7b:40:cd:
83:c5:00:71:44:7a:28:0a:7f:9c:ee:37:d0:b0:ef:
1c:89:9b:f5:07:0b:8a:42:9f:0f:97:04:1f:53:30:
ab:07:35:5c:e4:0b:2e:d6:8a:40:c5:e2:70:03:0b:
7e:44:69:d1:cb:56:6c:8d:18:80:22:19:6a:2f:0d:
0c:3b:97:df:57:18:04:43:dc:b4:9a:c3:99:fd:5e:
e0:0d:21:b1:a9:74:ee:69:1b:91:06:b1:a6:d0:41:
cf:24:1a:72:36:b2:77:4d:18:d8:bd:13:1b:c6:ec:
ba:cb:ff:51:86:0a:db:c8:7f:53:31:72:7e:2c:32:
b5:71:d6:88:50:fe:83:b9:9d:73:ca:da:dc:ce:5e:
90:79:8f:98:9e:e5:6c:5d:c3:83:9d:5d:de:68:a1:
f7:9f:ff:59:94:ed:c3:ab:4b:df:7d:5f:86:b2:30:
23:86:af:5c:31:48:f4:db:7c:1a:4d:6a:45:f9:89:
0c:a5:6d:27:3b:da:7c:bb:1b:1b:d7:75:f4:2d:2f:
a4:2e:1e:2a:44:14:b9:7f:8b:42:9c:42:a4:50:c5:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D2:FA:AA:D9:F6:F4:1E:90:D3:D8:C1:C8:64:BC:AE:47:16:19:A9
X509v3 Authority Key Identifier:
keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:31:4c:7d:5a:7c:a0:c0:5e:fc:7c:54:0e:3a:fb:8d:e0:10:
46:23:46:9f:90:9a:fa:08:cc:03:4a:cd:9c:a7:6f:49:6e:c1:
a4:6b:e9:25:e8:aa:34:f9:24:5e:f1:b7:33:b4:13:3e:4b:08:
21:e1:8e:fd:d5:bf:0d:28:6c:7a:9d:89:77:0d:04:fc:44:69:
fd:5c:14:4e:12:8c:5c:31:38:d7:9a:15:5c:e8:12:4e:22:6a:
0a:cd:4c:17:aa:87:55:50:e4:70:0f:f3:91:ce:81:e7:42:15:
c2:1f:75:25:5d:15:10:69:d9:0a:cf:d6:25:3c:77:39:67:ca:
ec:0a:49:c0:87:86:24:38:b6:65:7d:78:f2:97:36:a4:48:86:
e8:ea:c7:af:09:25:6c:94:2b:2b:48:45:fa:63:a0:f5:04:e4:
b4:80:4f:4d:72:00:f0:09:a1:12:d2:16:a1:52:e6:d4:9b:dd:
d8:51:c6:ce:ce:e7:94:7b:5e:2c:f5:bf:53:5a:34:79:33:c7:
49:9c:33:91:91:e8:98:a4:cd:ea:cb:bd:a0:05:34:91:76:c7:
d4:1c:34:30:02:99:ae:ff:f9:fa:20:34:ee:de:b6:3c:88:3b:
2c:3c:5b:59:dc:16:ba:5b:9a:1e:45:83:0c:d5:3c:5c:ea:2b:
05:d7:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:29 2026 by rpki-client