
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier: qILQPyEdHfHhyOLhU2+NKGzzgQjsqZGOr/qeB+RziM0=
Subject key identifier: 04:7F:FD:50:7E:17:A9:32:E4:24:2B:9F:B2:77:74:90:21:4D:AC:5B
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number: C0
Signing time: Thu 23 Jul 2026 08:47:58 +0000
Manifest this update: Thu 23 Jul 2026 08:47:57 +0000
Manifest next update: Thu 30 Jul 2026 08:47:57 +0000
Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: ZTQhJKDcXlWacaZ4SPGAZVAmne8xK1Xhz07VdtsOUy0=)
2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Validity
Not Before: Jul 23 08:47:57 2026 GMT
Not After : Jul 30 08:47:57 2026 GMT
Subject: CN=6a61d53d-3414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:11:fe:3a:21:5c:ec:6f:e9:aa:da:a5:bf:
2e:d9:f3:15:ee:03:0a:a5:69:62:97:72:ce:42:7b:
c3:8d:c1:7f:99:07:31:65:cb:6e:03:51:8a:bc:68:
27:1a:ea:33:4f:91:97:6f:a4:30:3c:74:b7:e9:08:
6b:fa:7e:1f:23:ba:92:c1:ad:7b:e7:fd:6d:e7:42:
51:6e:b8:90:b9:21:df:fc:73:fd:83:9d:f4:6d:c0:
7e:05:ba:aa:46:d4:b5:f0:c8:c1:a9:9d:8a:df:d4:
c7:5a:8b:df:d2:1a:11:62:7a:84:5d:b6:e5:c1:db:
70:a3:4a:aa:27:8e:99:52:5d:9c:b9:12:1b:9b:ea:
93:29:02:4e:9d:bb:b7:47:9a:5e:64:6f:a4:c8:28:
7a:8c:08:27:4b:e9:86:11:ae:1d:39:e8:92:a6:f9:
2c:eb:bb:81:d5:0a:a5:1f:3b:94:c2:6e:28:2a:1d:
d1:44:1b:63:c1:77:98:28:69:3f:48:86:0e:68:19:
be:c8:c8:52:95:f9:ad:db:80:ec:c3:6b:a2:98:a2:
88:da:fd:ac:06:9e:cb:5d:8e:31:e9:3a:cc:c9:3b:
1c:3e:6a:5d:01:2b:f0:50:eb:35:af:1b:41:1c:3d:
f5:2f:80:1f:1a:e7:d5:3b:72:7c:69:04:29:32:53:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7F:FD:50:7E:17:A9:32:E4:24:2B:9F:B2:77:74:90:21:4D:AC:5B
X509v3 Authority Key Identifier:
keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:63:05:c3:82:30:b2:69:50:5b:2e:19:13:03:52:09:9b:a6:
b5:de:92:d2:4d:0c:f2:35:b3:aa:04:d7:17:5e:88:6d:13:f7:
db:8f:df:16:24:6f:f6:5a:1d:ad:25:2a:02:4e:b0:69:e1:30:
c1:3c:46:ec:dd:2e:c5:41:9a:6e:9e:7f:a7:6e:b0:50:55:a2:
91:58:51:8f:80:3e:9b:3b:2c:f4:02:d5:3e:4e:28:7a:12:aa:
e8:e9:08:58:af:a3:21:42:a6:e9:d5:95:55:6d:a6:c7:28:65:
04:28:ff:76:aa:aa:43:d6:01:51:d4:fe:df:1e:0b:49:0c:9c:
1e:92:3c:15:51:78:52:dc:ef:37:48:be:0c:db:3d:79:56:a4:
96:68:49:4e:c5:32:f8:26:dc:99:f8:6f:20:80:fe:0d:ac:99:
a3:61:61:0c:5c:86:ab:51:b7:6e:02:fa:4c:30:88:f4:98:29:
f4:77:fc:57:5f:f5:c5:85:ce:aa:9e:82:98:93:b6:93:1d:6e:
9f:00:a1:fb:6f:bb:ab:5a:95:27:2b:ff:f9:31:c2:2b:0e:cb:
c3:fd:1a:f3:0c:7d:a2:41:f3:f7:41:60:ed:16:85:51:bd:ca:
81:60:d8:11:b5:4f:0d:3c:3e:49:02:31:4f:a0:7b:d2:f1:77:
8d:96:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:24:02 2026 by rpki-client