
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json)
Hash identifier: /MbeD0GatLRAVz0N5IpcIhM4X8SgHI3HYzXRfr8xIsk=
Subject key identifier: D2:49:4B:91:77:C0:76:BD:D3:95:6C:5E:93:71:55:A0:FD:AE:A8:00
Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Certificate serial: 02BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
Manifest number: 02B5
Signing time: Fri 11 Sep 2026 01:30:50 +0000
Manifest this update: Fri 11 Sep 2026 01:30:50 +0000
Manifest next update: Fri 18 Sep 2026 01:30:50 +0000
Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: ijy8NfTdTxGOot2ry7SD888MlukbbQ9ExRW7Hhdp6mM=)
2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 01:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF
Validity
Not Before: Sep 11 01:30:50 2026 GMT
Not After : Sep 18 01:30:50 2026 GMT
Subject: CN=6aa359ca-af82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:c0:c7:a5:77:f4:33:56:b2:db:00:51:07:
f2:30:70:55:58:bd:35:17:68:ab:cd:ea:97:28:aa:
47:55:7d:33:fb:81:40:42:56:23:7c:94:6b:02:11:
7a:ad:cb:5b:f9:d5:e8:8b:51:1e:be:66:73:ef:14:
b3:78:88:78:96:c3:fa:a1:5c:27:d1:4b:37:d3:7a:
d7:4b:fd:54:27:b6:71:8a:cc:f0:6f:9a:45:72:2d:
2e:ea:12:4d:64:02:7b:34:75:bd:db:cb:30:cc:11:
d7:b6:03:8d:16:a3:b2:87:65:73:b1:9e:bd:74:02:
64:64:a6:a1:52:03:8d:81:42:d0:d5:93:cf:87:85:
a9:93:51:6f:b6:11:74:33:7e:9a:da:ac:55:da:30:
b6:2b:3e:90:fc:71:60:3d:a2:f8:9d:87:4e:d0:5f:
25:0b:cb:8c:3c:c3:a7:dc:0b:b2:39:a1:12:b5:a7:
e6:c4:d4:05:9f:01:9d:42:f2:17:b0:42:26:39:1a:
c2:58:49:0f:a6:9b:e5:a4:3d:a9:8d:61:8b:55:47:
6b:39:48:64:05:ff:69:5f:d5:9b:9d:e6:89:d7:9b:
ba:7e:d9:34:5c:6f:97:e7:54:a2:a5:50:24:25:48:
83:ce:04:25:0d:25:e8:1a:f9:9d:07:e8:39:09:69:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:49:4B:91:77:C0:76:BD:D3:95:6C:5E:93:71:55:A0:FD:AE:A8:00
X509v3 Authority Key Identifier:
keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f8:da:31:6b:64:52:1b:c9:82:44:1f:0f:af:6f:51:c5:9d:
8e:c1:bc:03:0b:05:f5:fb:32:87:95:7d:37:1e:87:18:b6:9d:
9b:86:3e:75:82:04:3d:e1:e2:8b:26:65:0c:9d:bd:0c:62:fb:
f4:a4:5c:78:36:a8:30:91:2d:da:93:87:4e:02:f3:c9:d4:85:
7c:b4:a9:d1:f6:10:77:8a:c8:cc:8b:b2:b0:41:0a:cc:65:60:
d1:d0:ee:94:ad:5e:0d:61:14:87:80:d3:d5:ee:f9:ac:d4:84:
1e:77:92:fd:16:ed:18:0b:55:8b:c9:f2:00:87:5f:91:14:d5:
94:f7:1b:97:3a:93:b5:7d:47:9a:19:15:46:45:fb:04:44:7c:
f5:06:26:1e:0c:36:2e:b6:ac:64:4e:d1:08:6f:9e:40:20:4f:
3e:4d:f2:dd:2d:47:11:07:3d:fe:58:07:ae:a6:b4:0e:5d:20:
cf:c2:a6:2b:77:78:cc:d8:76:87:fa:ea:d3:ef:40:20:fa:b8:
d8:ed:af:73:e1:80:47:76:10:ea:c7:69:90:74:87:45:19:2f:
1a:93:f2:58:3f:12:c0:15:44:16:65:d3:2a:fa:88:d4:37:99:
a2:7d:3c:1a:7a:5e:9b:79:c7:21:ec:0b:30:4c:18:03:31:33:
89:67:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:59:51 2026 by rpki-client