
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File: Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier: WTYFxIlGS+lxgq9c5Rsm9+eXecsPKYPHY7JaoSKshiQ=
Subject key identifier: 8C:A2:A3:F2:81:DA:8D:40:B9:78:12:C9:A0:88:0E:CC:D1:E2:EC:F2
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer: /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial: 048E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number: 046C
Signing time: Thu 23 Jul 2026 01:05:23 +0000
Manifest this update: Thu 23 Jul 2026 01:05:23 +0000
Manifest next update: Thu 30 Jul 2026 01:05:23 +0000
Files and hashes: 1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: 673Pk96YMmyISQBBVJ788JivUwZ7Rb6tCfTO61BP4Uw=)
2: 7CB87E5C4D7311F1852BB4CA95833773.roa (hash: P09MeZZNI9IoD7N8gzlqtiufEzZ6jxOOO+4cLeCxSQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1166 (0x48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Validity
Not Before: Jul 23 01:05:23 2026 GMT
Not After : Jul 30 01:05:23 2026 GMT
Subject: CN=6a6168d3-8cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:98:d5:2f:c9:fe:7a:00:c9:c5:45:09:d5:
06:8e:70:90:1c:4d:61:e8:5a:f1:fb:43:71:f3:a0:
90:eb:b8:6c:c6:9d:80:ac:91:7a:ea:bc:85:dd:56:
ac:10:af:5f:21:03:7a:87:e4:84:b2:3a:c6:5d:9a:
ee:5f:c8:01:bb:40:14:c5:aa:12:9a:b7:95:b0:8d:
19:04:47:59:bd:7f:fc:e4:7b:46:dc:cf:8f:3a:5b:
fd:a8:6c:66:2a:8c:0b:f0:bf:51:54:db:57:99:99:
b5:d2:e1:df:b5:44:19:0a:25:0d:e3:27:44:c5:8f:
a1:3c:e9:62:05:e0:6c:b3:f3:77:92:6e:6f:7b:31:
b8:de:a9:fb:a6:f6:27:67:67:98:77:6c:9c:c6:88:
19:e3:15:ee:63:4f:e5:b1:3a:2a:5d:c9:35:98:80:
14:a4:f9:f2:83:48:8e:22:9f:d1:d6:18:37:8a:ae:
17:2c:ca:e1:3f:a3:95:67:4f:90:7b:19:c9:ab:17:
2c:7d:12:0c:8b:c6:a6:e0:e9:bb:bf:fd:57:7d:d1:
53:22:bf:2d:ca:a7:8d:26:78:a1:88:44:3a:76:c9:
78:f8:ea:e9:53:1d:0b:54:37:0b:61:c0:dc:f7:65:
c2:c0:6f:4f:ba:43:e9:dd:31:ea:21:eb:69:a7:a9:
76:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:A3:F2:81:DA:8D:40:B9:78:12:C9:A0:88:0E:CC:D1:E2:EC:F2
X509v3 Authority Key Identifier:
keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:b7:6d:1a:33:c1:45:66:8b:b3:c8:dd:d6:2d:0c:c9:c3:fd:
a6:b2:94:45:94:20:fc:02:7e:6e:7d:df:c1:91:ea:31:b2:32:
c2:63:6e:72:5e:94:78:29:a5:df:bd:29:e5:e8:39:70:18:92:
40:a8:38:04:40:62:df:81:f3:6e:6e:f6:b1:04:8e:88:6a:50:
80:5d:4b:1c:e9:71:ea:47:9b:69:c3:97:50:d3:0d:87:77:92:
43:05:45:81:23:6d:b4:26:8f:90:38:b8:33:9b:09:70:07:58:
08:b0:75:d1:01:8f:d9:9e:ba:39:c8:49:d2:c4:92:d5:0d:81:
89:7b:c3:7b:51:b0:b3:72:4c:47:85:83:f7:af:32:17:cf:c0:
76:4e:ba:f7:00:61:8f:4d:0a:4f:7b:69:8a:6f:ca:31:d1:c4:
5c:88:0a:db:25:08:08:b5:dd:2c:66:0b:82:2c:9b:0a:f5:54:
50:bb:bf:04:45:b4:79:69:68:02:cd:6b:bf:d4:3e:00:cb:84:
9d:39:a4:20:ce:c6:cb:66:5a:9e:bf:54:02:44:ee:32:5b:3e:
f9:19:30:f5:6d:a1:fd:4b:55:67:df:d8:60:4b:72:45:9d:d2:
2f:de:95:29:45:9a:75:13:85:9b:21:7b:c8:4d:28:ce:27:84:
bd:67:02:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5ODIxMTAvBgNVBAUTKDQxQkZCRUJFNjM1MjFGQjA0RUQ4MTIzQzY4RTVDMENE
QUY1RDA1Q0QwHhcNMjYwNzIzMDEwNTIzWhcNMjYwNzMwMDEwNTIzWjAYMRYwFAYD
VQQDEw02YTYxNjhkMy04Y2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkiY1S/J/noAycVFCdUGjnCQHE1h6Frx+0Nx86CQ67hsxp2ArJF66ryF3Vas
EK9fIQN6h+SEsjrGXZruX8gBu0AUxaoSmreVsI0ZBEdZvX/85HtG3M+POlv9qGxm
KowL8L9RVNtXmZm10uHftUQZCiUN4ydExY+hPOliBeBss/N3km5vezG43qn7pvYn
Z2eYd2ycxogZ4xXuY0/lsToqXck1mIAUpPnyg0iOIp/R1hg3iq4XLMrhP6OVZ0+Q
exnJqxcsfRIMi8am4Om7v/1XfdFTIr8tyqeNJnihiEQ6dsl4+OrpUx0LVDcLYcDc
92XCwG9PukPp3THqIetpp6l2hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyio/KB
2o1AuXgSyaCIDszR4uzyMB8GA1UdIwQYMBaAFEG/vr5jUh+wTtgSPGjlwM2vXQXN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9DRjIwNUM2MEFD
MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3Qk8yQkk4YU9YQXphOWRC
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FiLS12bU5TSDdCTzJCSThhT1hBemE5ZEJjMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDk4Mi9DRjIwNUM2MEFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi9RYi0tdm1OU0g3
Qk8yQkk4YU9YQXphOWRCYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASbdtGjPBRWaLs8jd1i0MycP9prKURZQg/AJ+bn3fwZHqMbIywmNucl6UeCml
370p5eg5cBiSQKg4BEBi34Hzbm72sQSOiGpQgF1LHOlx6kebacOXUNMNh3eSQwVF
gSNttCaPkDi4M5sJcAdYCLB10QGP2Z66OchJ0sSS1Q2BiXvDe1Gws3JMR4WD968y
F8/Adk669wBhj00KT3tpim/KMdHEXIgK2yUICLXdLGYLgiybCvVUULu/BEW0eWlo
As1rv9Q+AMuEnTmkIM7Gy2Zanr9UAkTuMls++Rkw9W2h/UtVZ9/YYEtyRZ3SL96V
KUWadROFmyF7yE0ozieEvWcCbA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:35 2026 by rpki-client