
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
File: qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json)
Hash identifier: O8+YIsG8jk/EXD9bEG4HgyNz5aOqJHFxfgnZoCkm7zA=
Subject key identifier: 06:E8:EB:BD:6F:BA:60:A4:35:8F:2B:5A:B3:61:90:97:4B:AA:C9:AB
Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Certificate serial: 2EC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
Manifest number: 2EAD
Signing time: Tue 12 May 2026 15:29:13 +0000
Manifest this update: Tue 12 May 2026 15:29:13 +0000
Manifest next update: Tue 19 May 2026 15:29:13 +0000
Files and hashes: 1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: 86WtncSueTB0wv4sSc+B3WoMKcg6yuW412zjYUdX6lk=)
2: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=)
3: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11968 (0x2ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Validity
Not Before: May 12 15:29:13 2026 GMT
Not After : May 19 15:29:13 2026 GMT
Subject: CN=6a034749-68a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:79:6a:3c:64:2c:ed:33:91:73:9c:9b:97:07:
81:51:56:19:16:2a:54:84:9e:d2:2e:f0:4a:cb:50:
ed:a3:86:79:c9:fb:b8:d7:ae:b6:1c:59:de:90:0a:
ff:5d:a0:d0:d3:9a:f9:ef:d3:ae:9f:70:d3:2f:66:
bc:e8:47:2e:56:f6:94:4c:28:cf:df:47:09:95:64:
f4:31:62:e5:cb:65:c0:b6:0a:c8:67:2d:84:da:65:
b9:5c:3a:15:7c:0a:1a:86:50:13:cd:e2:ac:c0:7c:
b7:fd:8d:16:33:0e:bf:08:fc:e7:09:72:e7:e8:5b:
c9:56:ad:35:bb:65:f2:95:ef:c6:38:15:6c:73:b8:
7d:60:05:db:7b:29:10:8e:e9:da:a4:cb:03:5f:fb:
40:1c:1a:64:10:46:53:98:a0:39:4b:14:d4:7e:34:
cf:3f:bb:b5:9e:b5:10:6e:d2:94:5f:88:e1:98:5c:
0a:5b:4b:31:ef:05:b8:31:69:fc:6c:01:f5:37:6d:
4c:63:3c:6a:f9:b3:9b:cc:74:b1:19:ee:04:9d:a0:
b8:b8:44:a4:49:d8:d5:84:b2:ce:73:e9:2c:9f:b3:
5d:b6:52:f1:3b:b7:58:eb:08:84:96:fd:50:95:57:
7b:ae:86:27:a6:25:7e:5b:9e:62:d2:fa:92:e2:0b:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E8:EB:BD:6F:BA:60:A4:35:8F:2B:5A:B3:61:90:97:4B:AA:C9:AB
X509v3 Authority Key Identifier:
keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:18:79:b7:48:fe:78:e3:4b:b9:4f:2e:b7:77:af:a8:5b:
99:7c:1a:db:a3:d0:c8:90:03:95:65:ae:da:68:fc:88:f8:ac:
18:26:d0:ce:50:a8:37:6d:8f:4f:12:61:bb:65:cf:5f:60:9b:
97:18:be:66:50:eb:1a:66:d2:53:d2:e5:b7:9f:a9:4f:5f:29:
88:01:15:08:c4:88:93:e2:ec:2a:b9:44:0c:bb:a1:bd:07:03:
45:d3:03:29:39:e0:62:1f:ee:b3:4e:77:00:66:9e:36:29:37:
0d:b8:df:32:e9:db:53:32:ba:4b:f6:f5:3c:7a:a9:ba:18:ed:
b7:23:40:76:a4:9f:8d:68:11:26:48:3c:11:9e:89:85:5f:d8:
4a:95:5e:6d:2d:bb:5d:1b:37:db:3b:1e:5f:19:31:81:ee:a4:
d7:63:c7:c0:00:5a:cc:cd:aa:79:c1:a8:26:fa:66:bf:26:b0:
7f:9b:01:b8:45:e1:14:dc:3f:cf:33:a7:6d:fb:18:6e:3b:c1:
95:fc:c0:90:3f:f7:d6:80:6f:96:49:cd:32:63:7d:61:45:7b:
13:c4:ec:ce:8f:54:b2:4a:49:6e:18:61:0f:0a:e2:12:05:a8:
43:4b:58:5c:dd:20:c8:25:3f:54:8c:ba:f9:43:e5:cd:a8:02:
00:db:44:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx
MUExREUyQUUwHhcNMjYwNTEyMTUyOTEzWhcNMjYwNTE5MTUyOTEzWjAYMRYwFAYD
VQQDEw02YTAzNDc0OS02OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAinlqPGQs7TORc5yblweBUVYZFipUhJ7SLvBKy1Dto4Z5yfu41662HFnekAr/
XaDQ05r579Oun3DTL2a86EcuVvaUTCjP30cJlWT0MWLly2XAtgrIZy2E2mW5XDoV
fAoahlATzeKswHy3/Y0WMw6/CPznCXLn6FvJVq01u2Xyle/GOBVsc7h9YAXbeykQ
junapMsDX/tAHBpkEEZTmKA5SxTUfjTPP7u1nrUQbtKUX4jhmFwKW0sx7wW4MWn8
bAH1N21MYzxq+bObzHSxGe4EnaC4uESkSdjVhLLOc+ksn7NdtlLxO7dY6wiElv1Q
lVd7roYnpiV+W55i0vqS4gs/kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAbo671v
umCkNY8rWrNhkJdLqsmrMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5
MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO
RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk6UYebdI/njjS7lPLrd3r6hbmXwa26PQyJADlWWu2mj8iPisGCbQzlCoN22P
TxJhu2XPX2Cblxi+ZlDrGmbSU9Llt5+pT18piAEVCMSIk+LsKrlEDLuhvQcDRdMD
KTngYh/us053AGaeNik3DbjfMunbUzK6S/b1PHqpuhjttyNAdqSfjWgRJkg8EZ6J
hV/YSpVebS27XRs32zseXxkxge6k12PHwABazM2qecGoJvpmvyawf5sBuEXhFNw/
zzOnbfsYbjvBlfzAkD/31oBvlknNMmN9YUV7E8Tszo9UskpJbhhhDwriEgWoQ0tY
XN0gyCU/VIy6+UPlzagCANtEGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:57:52 2026 by rpki-client