
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json)
Hash identifier: /qbwi7Ha/s/nGeQ0orVS5NdqT+20W5qfJoovwbei2j0=
Subject key identifier: 71:49:2B:2F:39:7F:ED:E9:90:B7:05:E6:D7:8B:B7:F0:6A:48:39:02
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 08F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
Manifest number: 08A3
Signing time: Sat 26 Sep 2026 21:11:04 +0000
Manifest this update: Sat 26 Sep 2026 21:11:03 +0000
Manifest next update: Sat 03 Oct 2026 21:11:03 +0000
Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: 0mjWw/CxvusRKYn1HjFPfTd+R5dfHoyfH9sRLFYaeM0=)
2: 54EE7326A80F11F18C0522946B11F970.roa (hash: 2bxAWvxSp4Q1OtM3ABhhN9Qmgeh5OF6qCpvnoPz0S34=)
3: 4CAE21E8A80F11F1B862E5936B11F970.roa (hash: MSYpWP4583BwiCkIv1gou3Zl4ibmuTy8PTOvgxGbRRM=)
4: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=)
5: 2FF53AF2A76811F1902C56043911F970.roa (hash: 0nCIpbx0cZSLgZnV2ZLspg0PdVVrZOLg3DNBm3/V48Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Sep 26 21:11:03 2026 GMT
Not After : Oct 3 21:11:03 2026 GMT
Subject: CN=6ab834e8-5288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a9:f3:c5:3f:67:00:06:37:24:1d:c1:92:6e:
13:88:22:c7:c8:b5:cf:30:02:43:8d:b6:c7:ef:78:
50:ba:f8:c0:aa:94:ee:0a:1b:cb:8d:af:e7:9b:99:
2b:71:76:33:e8:2b:1f:1d:9b:0e:93:77:fd:3a:da:
fe:db:23:b5:cb:3b:63:2e:e4:44:2f:a4:b7:5a:43:
a8:c6:79:a3:fa:c2:9c:fd:3e:20:43:93:fc:93:7f:
49:b3:f1:24:61:e3:31:ac:df:cb:42:99:d5:18:14:
5a:46:aa:ac:1d:c7:2a:95:4e:9c:fa:44:82:76:34:
2a:13:15:d2:08:d4:68:5c:fc:c1:5e:9b:a5:ef:93:
2f:02:e9:4f:46:55:be:48:bc:19:45:04:a6:66:aa:
da:c5:62:74:e5:2a:6f:a2:aa:51:83:41:64:80:e3:
ac:ac:90:fc:fb:c2:68:12:b9:4e:2f:72:ac:57:99:
ce:53:20:49:e4:2f:a5:1d:99:91:6d:28:92:cd:2a:
d5:c0:70:d0:8a:5a:e1:37:c3:23:7c:50:c5:d8:9d:
42:62:93:c3:0d:4e:75:99:d7:45:43:cc:ff:2c:18:
e9:98:5a:e1:74:47:2e:60:46:c5:00:f0:87:cb:ec:
11:c1:db:ca:13:16:cd:8a:e0:37:7c:a7:c4:a6:0f:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:2B:2F:39:7F:ED:E9:90:B7:05:E6:D7:8B:B7:F0:6A:48:39:02
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:1d:5e:13:2f:78:2c:d4:27:39:f7:f5:50:5a:c8:f6:03:ea:
af:33:47:b3:b8:87:0b:4a:58:0c:fe:45:70:4b:b0:e9:92:61:
2d:bd:af:f0:8c:43:d9:f3:71:e4:8a:9f:b9:d7:82:5e:5b:e2:
e6:b8:4e:f3:d0:97:f9:46:72:3e:12:53:ee:00:21:db:95:3b:
90:3e:f1:50:34:b0:96:bd:ed:49:25:c1:80:13:12:73:1d:5a:
4e:0e:31:50:54:92:55:52:60:ce:e5:e3:c0:c5:5c:0a:b3:81:
e5:24:1d:6f:33:48:3e:21:ba:cb:f3:a9:bb:f4:54:22:73:82:
dc:7f:70:fc:83:83:f9:a4:42:11:da:67:e2:44:b0:a2:8f:8e:
7c:ca:96:35:39:9a:d5:c7:88:37:b4:a2:df:ae:11:17:77:6e:
2e:46:0f:a2:cc:b7:1c:54:cb:54:ee:17:ff:00:3f:ff:3b:cf:
7f:40:30:a7:f0:86:a5:11:dd:82:f8:91:43:77:e3:09:34:d8:
1a:9e:b8:73:54:b6:91:7a:f9:ad:b2:01:96:cd:f3:e3:bb:f2:
1b:48:5d:da:14:b8:09:db:ea:6e:cb:8a:8a:20:9d:ce:39:0a:
93:e6:c7:d9:e1:12:68:da:22:53:01:73:23:96:d1:d7:4b:08:
3d:9c:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:15:57 2026 by rpki-client