
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
File: QZ8npM_s9GHbgvb5BnZPttZfI88.mft (raw, json)
Hash identifier: lv1C/alSjD2+yIWd32eauuae4joz1bwPkX2BPVTwaoA=
Subject key identifier: 3D:73:88:84:0A:76:F4:72:97:2A:ED:43:53:43:7D:2B:D1:6F:7A:1D
Authority key identifier: 41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
Certificate issuer: /CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Certificate serial: 017E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
Manifest number: 0172
Signing time: Mon 11 May 2026 04:48:37 +0000
Manifest this update: Mon 11 May 2026 04:48:36 +0000
Manifest next update: Mon 18 May 2026 04:48:36 +0000
Files and hashes: 1: QZ8npM_s9GHbgvb5BnZPttZfI88.crl (hash: eQwQp/qBy4jwpifu3htw9ZZnz3668syjVTgdh7tvVxs=)
2: ED7C0BCC287211EFA1483A2FC4F9AE02.roa (hash: y+oCb7jxR3D55AFcUV4IpcRd8DG8LNASO4m3mEiRdoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BED, serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Validity
Not Before: May 11 04:48:36 2026 GMT
Not After : May 18 04:48:36 2026 GMT
Subject: CN=6a015fa4-be7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:fa:31:f3:44:d4:a7:0b:32:d3:69:40:88:
12:c5:70:31:5a:18:76:ac:9b:c0:61:7f:f9:7a:79:
cb:81:44:95:05:59:b8:d8:38:44:5c:b4:cc:53:56:
08:8e:f3:8f:8a:ad:9d:a6:10:08:ac:21:39:12:1d:
fd:36:b9:11:cf:48:95:cb:15:69:44:99:27:81:87:
b3:7d:81:5d:93:b2:75:e8:e6:c7:32:30:c8:bb:b6:
7f:de:83:ea:8f:20:b3:37:5e:4f:c2:68:fd:94:fb:
60:de:cb:1e:f2:74:ab:78:ce:59:0b:f7:8c:4b:8b:
15:18:71:53:dc:ec:82:2e:3a:63:b3:2c:56:d4:c3:
0c:27:77:29:c6:3c:19:93:e7:19:b7:58:19:83:dc:
64:4a:bd:5f:39:a0:44:1a:b8:1c:93:19:b7:7c:31:
7d:01:37:51:34:07:06:d6:11:3d:e9:e0:aa:45:5a:
7f:08:45:6a:f6:b7:09:cd:b8:64:e0:31:a7:07:01:
bf:0d:df:73:98:20:9e:94:a0:cb:c9:08:a4:f2:d0:
a5:f4:ca:19:e8:96:47:2a:50:f3:53:c1:80:fc:eb:
9a:91:4f:4a:b6:85:b2:4d:91:55:fd:9a:1e:6d:34:
af:7a:07:95:b2:32:bc:81:db:c2:68:70:b9:88:8c:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:88:84:0A:76:F4:72:97:2A:ED:43:53:43:7D:2B:D1:6F:7A:1D
X509v3 Authority Key Identifier:
keyid:41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:28:2c:ed:56:14:d2:63:99:97:5a:8e:f5:69:36:40:89:e7:
67:85:bd:5c:c9:91:7f:b4:d3:1c:86:ae:79:81:33:af:7a:01:
3b:c8:28:d9:7a:b1:1f:bc:bf:c6:66:88:e8:eb:f3:16:ff:97:
d8:e7:31:ed:6c:35:62:b7:e6:dc:08:eb:a3:dd:29:02:83:5f:
10:09:2d:28:e1:e6:81:1f:24:c5:b1:3e:90:bb:64:c4:f4:58:
fc:15:12:3b:01:67:7e:1b:7d:86:42:7a:98:5e:68:c3:65:fc:
57:0d:79:b4:ae:86:58:c7:4e:c8:51:c1:d6:7c:e6:43:03:f7:
8e:04:b5:b6:c9:f3:94:75:5c:c8:14:85:33:94:c1:4f:d8:37:
88:22:01:23:37:1e:91:0a:f4:7f:5c:8a:82:b3:68:b9:b5:a1:
5d:fe:e3:92:e0:0f:b4:7a:5a:e7:1d:08:eb:0e:b3:e4:91:55:
41:3c:56:17:8a:00:d1:ff:37:5b:b4:d6:ea:bf:4a:f1:66:fe:
52:56:2b:66:7a:2d:2e:19:4e:f5:f8:c9:fb:1f:ec:08:25:e5:
67:08:60:8a:4b:af:7a:38:7f:51:7d:f2:ea:71:af:4b:e0:be:
25:ba:2b:b6:ee:24:7e:81:12:90:97:42:6e:e7:22:50:29:1b:
76:39:ea:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCRUQxMTAvBgNVBAUTKDQxOUYyN0E0Q0ZFQ0Y0NjFEQjgyRjZGOTA2NzY0RkI2
RDY1RjIzQ0YwHhcNMjYwNTExMDQ0ODM2WhcNMjYwNTE4MDQ0ODM2WjAYMRYwFAYD
VQQDEw02YTAxNWZhNC1iZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqUX6MfNE1KcLMtNpQIgSxXAxWhh2rJvAYX/5ennLgUSVBVm42DhEXLTMU1YI
jvOPiq2dphAIrCE5Eh39NrkRz0iVyxVpRJkngYezfYFdk7J16ObHMjDIu7Z/3oPq
jyCzN15Pwmj9lPtg3sse8nSreM5ZC/eMS4sVGHFT3OyCLjpjsyxW1MMMJ3cpxjwZ
k+cZt1gZg9xkSr1fOaBEGrgckxm3fDF9ATdRNAcG1hE96eCqRVp/CEVq9rcJzbhk
4DGnBwG/Dd9zmCCelKDLyQik8tCl9MoZ6JZHKlDzU8GA/OuakU9KtoWyTZFV/Zoe
bTSvegeVsjK8gdvCaHC5iIx7rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1ziIQK
dvRylyrtQ1NDfSvRb3odMB8GA1UdIwQYMBaAFEGfJ6TP7PRh24L2+QZ2T7bWXyPP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJFRC8wOEUwRTA2NjFG
MzgxMUVGQjA1OUI2NjVDNEY5QUUwMi9RWjhucE1fczlHSGJndmI1Qm5aUHR0WmZJ
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FaOG5wTV9zOUdIYmd2YjVCblpQdHRaZkk4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEJFRC8wOEUwRTA2NjFGMzgxMUVGQjA1OUI2NjVDNEY5QUUwMi9RWjhucE1fczlH
SGJndmI1Qm5aUHR0WmZJODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkigs7VYU0mOZl1qO9Wk2QInnZ4W9XMmRf7TTHIaueYEzr3oBO8go2XqxH7y/
xmaI6OvzFv+X2Ocx7Ww1Yrfm3Ajro90pAoNfEAktKOHmgR8kxbE+kLtkxPRY/BUS
OwFnfht9hkJ6mF5ow2X8Vw15tK6GWMdOyFHB1nzmQwP3jgS1tsnzlHVcyBSFM5TB
T9g3iCIBIzcekQr0f1yKgrNoubWhXf7jkuAPtHpa5x0I6w6z5JFVQTxWF4oA0f83
W7TW6r9K8Wb+UlYrZnotLhlO9fjJ+x/sCCXlZwhgikuvejh/UX3y6nGvS+C+Jbor
tu4kfoESkJdCbuciUCkbdjnqNQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:02:38 2026 by rpki-client