
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json)
Hash identifier: zAOibm4EKMoHTWi2jONq3yv0u4l8N+f7QmJkH0AucJ0=
Subject key identifier: 16:0C:04:14:E5:0B:F7:60:76:CC:61:D0:CC:4F:98:F3:E3:9C:68:A9
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 08CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
Manifest number: 087A
Signing time: Tue 21 Jul 2026 03:21:15 +0000
Manifest this update: Tue 21 Jul 2026 03:21:15 +0000
Manifest next update: Tue 28 Jul 2026 03:21:15 +0000
Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 3U3znt9t7b9X0pq0pM6e1D8GMyeQJbzxsxdLv1KUaiw=)
2: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: KhkIiHFfVALVrvgEK738rQdsAgjiaITp4X4saDB/DrM=)
3: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: azCvE0MXDPIZCtICB6ofLTQq6LREywUXev2jJIJ9EIU=)
4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=)
5: 6253A83E62EA11F1A94106946E47A888.roa (hash: U4FSzSTO7H1Qze1fUc12MSRQ0Xv8iCAf6EWHLXVVEZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250 (0x8ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Jul 21 03:21:15 2026 GMT
Not After : Jul 28 03:21:15 2026 GMT
Subject: CN=6a5ee5ab-cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:6e:ad:b2:b2:0e:70:35:58:73:14:49:c9:
ae:b0:74:92:3c:28:60:74:16:3c:72:54:f0:08:96:
78:c5:22:89:58:3e:dd:c6:27:cc:9f:60:10:3e:82:
7a:1e:07:cd:9e:6b:76:ca:5a:93:1a:32:a3:c6:b8:
26:37:6f:17:a3:fc:43:01:2d:6a:b3:f3:51:c3:11:
4b:d0:48:29:bb:01:f4:e7:da:f1:f9:f4:0b:c1:47:
64:69:cf:de:f7:0f:a8:36:e0:92:e2:e2:db:25:f6:
2e:bc:14:62:b0:24:3d:ab:36:d1:40:ce:9b:5f:85:
02:4e:11:25:38:f7:35:c2:75:1b:d4:be:a9:2a:80:
8e:3b:7e:29:05:56:8c:44:b6:46:24:c1:f6:22:d1:
2c:ba:98:e2:0f:52:24:54:75:83:d4:13:2a:21:49:
67:6e:e7:65:9d:49:56:b8:fa:ff:ef:0b:22:a8:6a:
13:82:93:c7:d5:cf:28:d0:cb:75:df:27:66:a1:25:
49:9d:fd:85:a3:3a:16:ef:aa:e4:f6:62:ef:d2:d9:
c6:73:80:cd:f5:d9:7c:e0:f4:9c:4c:02:bf:5a:9f:
d6:9c:5b:4c:e1:ab:e5:1b:84:07:d4:d2:c9:c9:d8:
eb:09:3c:a1:51:bb:23:44:4a:cb:84:42:c8:66:54:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:04:14:E5:0B:F7:60:76:CC:61:D0:CC:4F:98:F3:E3:9C:68:A9
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:f6:43:79:33:d4:73:a7:19:75:6e:90:5e:55:ad:36:9c:fb:
c8:d5:65:e0:02:de:06:39:6d:eb:59:dc:40:f1:57:14:d2:93:
57:9d:f5:51:20:b7:cb:b2:f4:17:d3:48:12:6e:5d:ac:38:ec:
78:8e:c6:4f:0b:bd:a2:98:30:83:18:03:8d:f8:02:dc:15:f4:
b9:de:63:35:47:a9:0d:b5:75:3f:44:b7:97:d2:44:78:f0:7f:
71:0b:25:31:24:90:4e:22:92:86:63:b1:a7:89:5e:c3:44:59:
9e:61:ad:2b:63:3e:a9:05:fe:18:43:a4:e2:82:d3:83:35:dc:
90:5f:15:9b:dd:72:9c:fb:a2:a3:af:34:d5:e9:a2:71:e5:cf:
8d:fd:7e:98:e6:7f:f4:d9:96:15:f0:0f:b4:65:f5:8b:1b:d3:
44:ea:ff:29:49:f5:0e:68:cc:fa:d6:28:7a:12:e7:b6:c6:79:
df:63:30:66:a3:70:b1:49:63:dc:4c:29:da:7a:0f:3b:9e:98:
23:1e:81:22:a3:fc:d3:d8:9d:a6:20:fa:4e:cc:1b:af:d1:fb:
c9:5a:b9:45:3c:2a:39:32:cb:ca:26:a7:77:d3:45:b9:ce:eb:
6a:1b:61:ef:af:a6:22:52:3e:c0:c7:1f:4d:90:c5:2a:7f:5f:
72:11:a6:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz
ODEzRTVFRjgwHhcNMjYwNzIxMDMyMTE1WhcNMjYwNzI4MDMyMTE1WjAYMRYwFAYD
VQQDEw02YTVlZTVhYi1jZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4JBurbKyDnA1WHMUScmusHSSPChgdBY8clTwCJZ4xSKJWD7dxifMn2AQPoJ6
HgfNnmt2ylqTGjKjxrgmN28Xo/xDAS1qs/NRwxFL0EgpuwH059rx+fQLwUdkac/e
9w+oNuCS4uLbJfYuvBRisCQ9qzbRQM6bX4UCThElOPc1wnUb1L6pKoCOO34pBVaM
RLZGJMH2ItEsupjiD1IkVHWD1BMqIUlnbudlnUlWuPr/7wsiqGoTgpPH1c8o0Mt1
3ydmoSVJnf2FozoW76rk9mLv0tnGc4DN9dl84PScTAK/Wp/WnFtM4avlG4QH1NLJ
ydjrCTyhUbsjRErLhELIZlSV9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYMBBTl
C/dgdsxh0MxPmPPjnGipMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE
RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkU4QS8zQjQ3NkU3QzJERkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFm
SHYtTHZuZzlTWGM0RS1YdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEPZDeTPUc6cZdW6QXlWtNpz7yNVl4ALeBjlt61ncQPFXFNKTV531USC3y7L0
F9NIEm5drDjseI7GTwu9opgwgxgDjfgC3BX0ud5jNUepDbV1P0S3l9JEePB/cQsl
MSSQTiKShmOxp4lew0RZnmGtK2M+qQX+GEOk4oLTgzXckF8Vm91ynPuio6801emi
ceXPjf1+mOZ/9NmWFfAPtGX1ixvTROr/KUn1DmjM+tYoehLntsZ532MwZqNwsUlj
3Ewp2noPO56YIx6BIqP809idpiD6Tswbr9H7yVq5RTwqOTLLyiand9NFuc7rahth
76+mIlI+wMcfTZDFKn9fchGmnw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:58 2026 by rpki-client