
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier: MjHZ1SvUXwA42KoCNZ7UEWByerfY+/jPGCH0Kqn2lqo=
Subject key identifier: 5E:9F:2B:F2:36:8A:DD:30:81:8E:EA:99:35:E6:5A:A5:2B:12:DD:88
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial: 0468
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number: 0447
Signing time: Wed 13 May 2026 00:27:38 +0000
Manifest this update: Wed 13 May 2026 00:27:37 +0000
Manifest next update: Wed 20 May 2026 00:27:37 +0000
Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: QhlgX+089AKIjQ/M1p6LLCvApEa9/96FLPp4fMynhD4=)
2: 7CB87E5C4D7311F1852BB4CA95833773.roa (hash: hoCybrzoSzK0pPp/mDaka6SuNPu39gXIxqV7vxnQLWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Validity
Not Before: May 13 00:27:37 2026 GMT
Not After : May 20 00:27:37 2026 GMT
Subject: CN=6a03c57a-51f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:18:f2:55:fc:77:ae:d6:40:37:03:6d:63:
52:2f:d8:f3:db:87:8e:08:90:cc:6e:fa:92:6c:5e:
d2:41:e8:50:36:ed:59:d0:59:f0:e9:96:0d:78:61:
fa:9e:78:f8:d5:60:07:0c:62:95:9e:b3:1e:f6:fc:
b1:1f:db:bb:b0:28:cd:7f:d2:96:03:4d:66:63:7c:
0a:40:c4:5e:3d:85:0a:10:74:c0:e3:a4:93:96:39:
05:81:6e:4c:b1:0c:8c:82:c2:b7:a4:ae:ff:73:40:
c7:f3:ec:f3:8e:7a:50:dc:10:91:88:6c:84:f9:f0:
1a:1d:9a:5e:9b:a9:24:ae:c2:75:8f:51:6c:c7:6e:
fe:26:21:a3:be:42:ed:4c:55:63:65:4c:a1:71:f0:
de:42:4d:c4:2d:8c:81:41:af:6c:82:6e:72:cf:27:
26:83:2c:1a:17:92:f2:06:16:5d:72:d7:27:91:a2:
5d:7e:0f:a7:34:83:8c:1f:41:13:da:75:54:6c:ab:
c0:1e:21:eb:17:c0:56:12:ac:34:2f:68:10:06:5f:
4b:42:46:df:c2:0a:3d:1a:1f:a0:ce:8a:a9:a2:ad:
d2:76:c5:dc:b4:05:c4:1b:4c:62:6a:c2:7a:af:fe:
68:1f:e5:a6:5f:12:f4:e8:9a:7a:61:cd:ab:d2:c0:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9F:2B:F2:36:8A:DD:30:81:8E:EA:99:35:E6:5A:A5:2B:12:DD:88
X509v3 Authority Key Identifier:
keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:96:ee:80:38:fe:2c:0f:5c:27:50:38:14:15:06:43:67:
a5:d6:30:48:90:91:90:24:71:00:0d:4a:51:a6:01:2d:7b:ad:
9b:f1:f6:85:ba:46:e8:62:19:73:a9:ac:ee:10:d9:ff:94:ff:
31:a3:dc:e9:b7:44:7f:aa:90:2f:1d:60:97:a0:86:4e:2a:dc:
82:90:46:e7:c9:cc:15:38:c6:ac:71:a9:c1:18:d2:65:79:8f:
2c:7f:fe:9e:41:1a:ef:fb:40:d1:fc:f7:89:97:4a:4f:d4:18:
e6:ab:9a:ee:46:cd:65:4c:64:f6:bb:72:62:4b:7a:4a:7c:0b:
14:ec:0b:7e:86:7a:90:1b:fc:3f:b1:5b:d1:53:8f:de:d5:7a:
31:9b:cf:5b:c4:ec:af:e7:9d:79:c7:fa:cd:42:e2:b6:ff:c4:
4b:54:7a:fe:29:da:51:7a:3d:ec:61:fa:e4:5f:09:1b:e5:f3:
36:63:69:23:f6:24:ae:d8:2c:f5:e4:31:76:5f:ae:97:96:b6:
5a:8d:6d:62:1e:22:9f:6e:40:11:a8:dc:7d:61:f8:7b:d1:31:
ff:6c:20:c6:8b:db:4b:f3:42:49:2d:b1:8d:72:dc:f9:ee:e8:
f4:ab:6f:81:f9:f9:86:a7:45:6a:8c:f6:d3:ad:7c:20:21:c0:
e0:17:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:57:12 2026 by rpki-client