
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json)
Hash identifier: NMCVvWmv3jAGJkZQCzVwp8ZWJu1LJbPBuqV+YZhD7hU=
Subject key identifier: 57:52:B7:E6:AF:33:F2:19:BD:23:04:9B:1A:F8:77:EA:D0:DB:EF:5C
Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Certificate serial: 0BB2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
Manifest number: 0BA9
Signing time: Wed 22 Jul 2026 19:23:51 +0000
Manifest this update: Wed 22 Jul 2026 19:23:51 +0000
Manifest next update: Wed 29 Jul 2026 19:23:51 +0000
Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: Th84RAGlvATSb0gVxiDgFn83/19txUsCXuOMaVOnNp4=)
2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: nj77j6pl8szzl1JiOzZeiuGGmWG3Z+CTwRY8QlEyQKs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2994 (0xbb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Validity
Not Before: Jul 22 19:23:51 2026 GMT
Not After : Jul 29 19:23:51 2026 GMT
Subject: CN=6a6118c7-b471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:42:ba:dd:43:09:a7:0a:d9:c5:ad:53:66:
d6:38:3f:b9:0b:f4:07:01:4a:e3:4a:b8:2d:73:8c:
bf:80:20:09:25:be:22:a4:6b:5c:45:ab:a7:6c:3b:
3f:ee:6f:d7:f0:e4:e6:2c:d2:93:07:f7:90:48:8e:
8a:8d:7e:38:e2:49:3b:3d:20:7f:13:3e:77:72:47:
dd:08:da:49:0e:e0:58:ca:a5:58:2c:35:05:a3:3e:
ae:c8:07:99:69:9a:5d:72:41:15:a9:6f:48:ab:97:
8a:4b:c9:08:38:8f:ed:ec:e0:c6:68:e6:63:db:c0:
f3:1c:72:7f:cc:af:f7:8d:25:ac:a5:ad:72:c1:4d:
12:65:91:e9:ab:26:e7:25:b5:72:d3:0d:f3:42:62:
53:99:f4:5e:8e:9e:c5:0e:4a:5c:81:4f:20:26:e2:
48:ae:7b:4d:a2:de:92:5f:39:0a:dc:c9:dc:ee:2f:
31:9f:b3:cb:03:bb:f9:b3:f8:1d:46:7c:e8:3f:18:
b4:21:cd:5b:14:d4:92:c5:16:c4:87:74:c1:73:c1:
62:44:f5:d8:48:7e:31:b5:8f:5c:11:1f:e5:ab:40:
ae:e3:c7:46:b2:62:58:2e:a7:9e:be:26:0c:6c:8f:
83:58:61:78:f3:43:18:5c:07:8a:6e:81:0d:ed:69:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:52:B7:E6:AF:33:F2:19:BD:23:04:9B:1A:F8:77:EA:D0:DB:EF:5C
X509v3 Authority Key Identifier:
keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:33:d1:4f:a4:69:0c:53:78:bd:08:d9:49:32:e9:da:d7:0a:
65:3f:fb:88:62:df:e9:b9:ee:d8:71:d1:8a:a7:07:a1:cb:6a:
d9:5c:98:65:77:a6:bf:f6:82:d5:52:0c:ac:09:09:0e:8f:f1:
bd:ef:3d:19:6d:42:bf:3f:ec:81:0e:47:a1:8e:c2:22:ce:21:
38:ff:45:45:02:95:1b:09:eb:68:74:f4:40:72:56:02:8e:dd:
a0:32:22:dd:a3:af:0b:00:5c:a5:9a:a7:60:a8:3b:66:fb:c0:
4d:67:3a:cd:f6:fe:d4:5c:82:fb:4a:00:b5:90:bc:5e:3f:b0:
ab:04:57:e5:63:fb:b2:aa:c9:05:35:96:c2:4c:83:80:f7:65:
b0:6f:06:b4:6e:1d:10:04:40:30:a7:fb:5b:0e:5b:8b:17:6c:
7c:bd:a2:63:5e:6f:69:a8:2f:b6:3e:42:06:54:53:9b:5b:5c:
84:eb:53:80:b0:c3:f1:82:84:08:e7:36:86:3e:83:43:11:5d:
d3:df:11:1c:df:93:5e:0f:a5:5e:bf:31:9a:f5:44:3e:c1:f5:
5c:d7:e3:b3:25:30:20:b0:66:fd:3e:02:74:af:59:4b:92:d1:
73:ae:ac:1e:b1:03:55:8a:45:4c:53:a9:ca:e1:6d:36:e3:5e:
df:a9:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:47 2026 by rpki-client