
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier: 9q59sho25wyqBUIzbbLYjoBOO9HtNzKi5WZQCXjX4Z8=
Subject key identifier: F0:81:24:76:2C:D1:EB:F3:0E:BF:9C:D7:93:DB:14:F4:00:AB:22:1B
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number: A7
Signing time: Mon 01 Jun 2026 08:02:44 +0000
Manifest this update: Mon 01 Jun 2026 08:02:44 +0000
Manifest next update: Mon 08 Jun 2026 08:02:44 +0000
Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: zHPNEgzIXDJ/wENsvlNnnrAI3+dqop0UJuhWJBhU3pI=)
2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 08:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Validity
Not Before: Jun 1 08:02:44 2026 GMT
Not After : Jun 8 08:02:44 2026 GMT
Subject: CN=6a1d3ca4-1acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:0e:77:87:a5:9e:25:c4:1a:65:12:11:9b:
ac:e7:09:83:c7:16:86:51:c7:5f:51:2f:16:69:be:
f4:a8:3c:31:a9:f0:60:36:a2:e5:d6:df:c6:46:ac:
76:8d:ff:32:70:f7:7a:ea:c6:ad:31:a6:34:26:80:
a0:fa:eb:1b:42:06:88:64:f1:29:cf:ef:3d:87:02:
c6:21:a1:69:c3:7e:97:2f:c4:f6:5f:ea:55:53:13:
17:9b:27:af:e7:80:be:20:09:9e:dc:81:cf:87:e1:
f5:e6:62:93:cc:84:a7:de:43:4e:ef:e3:c8:b0:68:
41:a5:17:ff:6a:54:26:eb:2d:38:aa:b5:68:fd:41:
c5:19:87:2c:3d:89:8f:aa:d7:ce:1b:d0:c8:cf:df:
a8:21:56:27:cf:7d:eb:ee:73:35:03:3f:e7:98:df:
19:4b:b1:9a:a9:91:86:59:3c:7b:69:da:1e:ec:f4:
fb:3a:6a:aa:ee:02:c3:84:61:dc:53:5a:ff:9b:ac:
ee:67:0f:6d:65:49:ff:7c:52:f3:d9:f5:cd:82:fc:
07:2f:dc:fe:ee:5c:4e:14:7a:10:4e:3c:c8:9a:a1:
bb:36:ae:3d:a6:36:ee:31:79:4e:0e:64:d7:5c:0f:
83:9f:08:2a:84:ce:ae:6a:fb:cf:10:15:0d:d9:e2:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:81:24:76:2C:D1:EB:F3:0E:BF:9C:D7:93:DB:14:F4:00:AB:22:1B
X509v3 Authority Key Identifier:
keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:83:03:bf:08:72:7d:9c:b2:85:7c:fa:29:40:ca:72:21:5f:
59:b6:f5:9d:c7:8a:3c:cb:09:b4:a9:00:71:5b:84:f8:1c:c1:
7c:e6:eb:01:0f:65:dd:0b:4b:da:1f:6b:94:c6:47:49:4f:19:
07:23:9b:f2:43:9a:a1:f6:1d:00:a2:3d:db:88:24:ea:1d:0f:
c6:54:5f:8a:88:34:00:81:d0:eb:bd:d7:7e:f7:30:c1:85:b9:
45:91:e7:65:56:b4:ee:77:81:36:8a:13:a6:bf:af:96:95:76:
8c:8f:ac:9f:71:ce:59:f5:2c:c4:67:ce:50:84:2a:e1:a6:2d:
d4:09:e6:9c:9e:98:75:22:54:fb:97:65:9b:f6:89:2c:0c:36:
99:f5:17:7d:b2:6d:3f:a1:0e:70:e1:f2:e8:69:05:32:f2:cb:
c1:78:20:93:f7:9c:b1:f8:80:9b:eb:08:0a:8a:9a:e6:ad:86:
74:97:cd:55:78:52:e4:57:28:ed:cc:58:31:8d:69:9b:a7:06:
2f:e3:e4:a7:c4:6d:02:58:82:39:83:c7:1f:6d:d3:19:3a:75:
41:0f:54:8e:c4:45:be:b0:ef:44:8c:4c:26:5d:78:ad:6e:a4:
33:02:8e:39:3e:68:8b:3e:c7:ec:33:01:23:ce:08:14:5d:64:
1a:80:3a:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA1ODcxMTAvBgNVBAUTKEE5QjUzRjdCNjE5NjMxODcwOTI4OTAyRkY0ODQ3NjU3
NDFCREEyRTkwHhcNMjYwNjAxMDgwMjQ0WhcNMjYwNjA4MDgwMjQ0WjAYMRYwFAYD
VQQDEw02YTFkM2NhNC0xYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKgOd4elniXEGmUSEZus5wmDxxaGUcdfUS8Wab70qDwxqfBgNqLl1t/GRqx2
jf8ycPd66satMaY0JoCg+usbQgaIZPEpz+89hwLGIaFpw36XL8T2X+pVUxMXmyev
54C+IAme3IHPh+H15mKTzISn3kNO7+PIsGhBpRf/alQm6y04qrVo/UHFGYcsPYmP
qtfOG9DIz9+oIVYnz33r7nM1Az/nmN8ZS7GaqZGGWTx7adoe7PT7Omqq7gLDhGHc
U1r/m6zuZw9tZUn/fFLz2fXNgvwHL9z+7lxOFHoQTjzImqG7Nq49pjbuMXlODmTX
XA+DnwgqhM6uavvPEBUN2eLfWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPCBJHYs
0evzDr+c15PbFPQAqyIbMB8GA1UdIwQYMBaAFKm1P3thljGHCSiQL/SEdldBvaLp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDU4Ny85MEYxNDM1QTYy
MTgxMUYwQUEyMkEwMjZDNEY5QUUwMi9xYlVfZTJHV01ZY0pLSkF2OUlSMlYwRzlv
dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FiVV9lMkdXTVljSktKQXY5SVIyVjBHOW91ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDU4Ny85MEYxNDM1QTYyMTgxMUYwQUEyMkEwMjZDNEY5QUUwMi9xYlVfZTJHV01Z
Y0pLSkF2OUlSMlYwRzlvdWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAboMDvwhyfZyyhXz6KUDKciFfWbb1nceKPMsJtKkAcVuE+BzBfObrAQ9l3QtL
2h9rlMZHSU8ZByOb8kOaofYdAKI924gk6h0PxlRfiog0AIHQ673XfvcwwYW5RZHn
ZVa07neBNooTpr+vlpV2jI+sn3HOWfUsxGfOUIQq4aYt1AnmnJ6YdSJU+5dlm/aJ
LAw2mfUXfbJtP6EOcOHy6GkFMvLLwXggk/ecsfiAm+sICoqa5q2GdJfNVXhS5Fco
7cxYMY1pm6cGL+Pkp8RtAliCOYPHH23TGTp1QQ9UjsRFvrDvRIxMJl14rW6kMwKO
OT5oiz7H7DMBI84IFF1kGoA6kA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:25 2026 by rpki-client