
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
File: qtrfI2_7nO0qpky3zl2Z1R066RM.mft (raw, json)
Hash identifier: QWmt3PtNMKMwhl094v/8qcpX3hCUkDHqExhhZLW1Y8o=
Subject key identifier: F2:17:9E:F3:62:A8:AF:0F:91:55:69:95:DC:7C:7E:BD:F6:D2:11:9F
Authority key identifier: AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13
Certificate issuer: /CN=A9167671/serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
Manifest number: B3
Signing time: Fri 25 Sep 2026 07:08:46 +0000
Manifest this update: Fri 25 Sep 2026 07:08:45 +0000
Manifest next update: Fri 02 Oct 2026 07:08:45 +0000
Files and hashes: 1: qtrfI2_7nO0qpky3zl2Z1R066RM.crl (hash: eAZBSHFjDXe6rA6izNSsn122HTZj8i4radJvQxCVHYg=)
2: E1CBE78EADFA11F08ED60C0DC4F9AE02.roa (hash: mL7EPbV+bB9koA5dsJl9CQ3B+ptW86I0Lxj0bzUntA8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl
rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167671, serialNumber=AADADF236FFB9CED2AA64CB7CE5D99D51D3AE913
Validity
Not Before: Sep 25 07:08:45 2026 GMT
Not After : Oct 2 07:08:45 2026 GMT
Subject: CN=6ab61dfd-367d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c8:ce:2a:9e:fb:e2:96:6d:1d:6f:d8:d6:53:
2b:ad:03:bb:11:dd:d9:26:01:73:7f:6f:2e:ba:cf:
b8:1f:3f:53:87:1b:8d:1b:59:95:9f:a2:f4:fc:e0:
f4:64:28:6e:06:f3:b1:36:cb:b7:67:a7:c3:9e:c1:
ef:fc:a3:fb:7c:6d:da:21:e5:1b:01:0d:df:12:ca:
1d:a4:4c:f5:8f:92:bb:fa:59:26:68:e9:a9:00:36:
96:14:b1:b9:8d:2c:7f:79:64:c2:65:ab:2c:d9:cb:
b9:4b:70:69:ac:a0:c5:f1:07:0f:b9:da:ff:75:7e:
4d:47:47:99:74:52:ee:e5:a6:f4:e1:7a:6c:1d:87:
73:24:dc:92:de:c5:d8:e7:3b:7d:7e:e4:d9:10:3a:
10:7f:90:bb:c2:3a:a2:65:ed:98:40:ad:2c:a1:96:
aa:de:0b:58:43:bc:87:ba:7b:6e:6e:f8:17:fe:67:
4f:28:82:70:8b:d7:6e:9d:3f:e4:a9:29:3f:bd:2b:
d1:90:c6:63:40:d1:52:e2:da:ab:80:5d:2d:8f:37:
f4:96:15:57:4a:19:7a:f9:59:23:a5:36:01:b0:17:
c1:bb:4e:b8:94:a4:0d:4e:c5:8e:10:f8:e8:d9:39:
29:9d:21:ad:c8:26:1a:a0:e1:c6:38:f3:8d:d8:1d:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:9E:F3:62:A8:AF:0F:91:55:69:95:DC:7C:7E:BD:F6:D2:11:9F
X509v3 Authority Key Identifier:
keyid:AA:DA:DF:23:6F:FB:9C:ED:2A:A6:4C:B7:CE:5D:99:D5:1D:3A:E9:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtrfI2_7nO0qpky3zl2Z1R066RM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167671/6F286B12ADFA11F0AB908787C4F9AE02/qtrfI2_7nO0qpky3zl2Z1R066RM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a0:7d:fc:4b:45:e0:6f:33:01:2a:4c:cb:15:5b:95:fe:75:
88:ae:52:63:bb:51:b6:11:58:e2:74:aa:d8:92:af:e1:0f:ec:
c1:a6:9a:42:a9:be:b6:7a:fa:bf:f4:7a:86:bf:f6:eb:91:7d:
14:37:4b:b3:06:b4:d9:c8:5a:71:27:18:c2:41:2d:6b:4b:2d:
23:b4:8b:64:32:88:88:3a:04:0f:c0:65:11:b0:b9:02:bb:56:
f6:e7:03:56:61:2c:7e:f7:0b:47:f4:f2:7f:cd:de:94:b1:af:
d9:e0:cc:95:ec:c7:2e:6b:72:6c:c3:c9:ad:37:2d:60:e3:64:
f0:c6:b1:10:45:ca:a1:11:57:e1:c1:35:54:ee:2e:73:89:7f:
dc:29:c8:da:7e:17:17:0d:c8:cf:4d:fe:97:a9:c4:21:e1:dd:
7d:af:61:45:7d:8b:b3:7f:35:d9:a8:66:20:bc:ef:64:2a:90:
a6:2c:69:b0:7b:9d:42:d4:75:77:09:2f:1a:38:45:9f:b3:f9:
74:2f:87:78:c4:d9:3e:0b:bf:3b:07:2d:25:95:19:ee:79:f1:
d4:7e:de:05:e1:0f:dd:93:82:b2:11:6f:2e:d3:68:dd:1e:b1:
71:58:be:93:5f:9b:c7:76:f2:be:77:92:2f:ea:e7:5b:83:af:
10:1b:76:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njc2NzExMTAvBgNVBAUTKEFBREFERjIzNkZGQjlDRUQyQUE2NENCN0NFNUQ5OUQ1
MUQzQUU5MTMwHhcNMjYwOTI1MDcwODQ1WhcNMjYxMDAyMDcwODQ1WjAYMRYwFAYD
VQQDEw02YWI2MWRmZC0zNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/MjOKp774pZtHW/Y1lMrrQO7Ed3ZJgFzf28uus+4Hz9ThxuNG1mVn6L0/OD0
ZChuBvOxNsu3Z6fDnsHv/KP7fG3aIeUbAQ3fEsodpEz1j5K7+lkmaOmpADaWFLG5
jSx/eWTCZass2cu5S3BprKDF8QcPudr/dX5NR0eZdFLu5ab04XpsHYdzJNyS3sXY
5zt9fuTZEDoQf5C7wjqiZe2YQK0soZaq3gtYQ7yHuntubvgX/mdPKIJwi9dunT/k
qSk/vSvRkMZjQNFS4tqrgF0tjzf0lhVXShl6+VkjpTYBsBfBu064lKQNTsWOEPjo
2TkpnSGtyCYaoOHGOPON2B2pewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPIXnvNi
qK8PkVVpldx8fr320hGfMB8GA1UdIwQYMBaAFKra3yNv+5ztKqZMt85dmdUdOukT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzY3MS82RjI4NkIxMkFE
RkExMUYwQUI5MDg3ODdDNEY5QUUwMi9xdHJmSTJfN25PMHFwa3kzemwyWjFSMDY2
Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F0cmZJMl83bk8wcXBreTN6bDJaMVIwNjZSTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzY3MS82RjI4NkIxMkFERkExMUYwQUI5MDg3ODdDNEY5QUUwMi9xdHJmSTJfN25P
MHFwa3kzemwyWjFSMDY2Uk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAq6B9/EtF4G8zASpMyxVblf51iK5SY7tRthFY4nSq2JKv4Q/swaaaQqm+tnr6
v/R6hr/265F9FDdLswa02chacScYwkEta0stI7SLZDKIiDoED8BlEbC5ArtW9ucD
VmEsfvcLR/Tyf83elLGv2eDMlezHLmtybMPJrTctYONk8MaxEEXKoRFX4cE1VO4u
c4l/3CnI2n4XFw3Iz03+l6nEIeHdfa9hRX2Ls3812ahmILzvZCqQpixpsHudQtR1
dwkvGjhFn7P5dC+HeMTZPgu/OwctJZUZ7nnx1H7eBeEP3ZOCshFvLtNo3R6xcVi+
k1+bx3byvneSL+rnW4OvEBt2Hw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:48:22 2026 by rpki-client