
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier: 7VUZvQ5toevX8FFHWgOpMLLmGE6Rs34qCxIwo81lOpM=
Subject key identifier: 2D:F3:33:FE:18:03:5F:3B:0B:4A:E2:AA:AD:CE:54:23:F2:FB:5C:E2
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number: 84
Signing time: Wed 25 Mar 2026 06:53:23 +0000
Manifest this update: Wed 25 Mar 2026 06:53:23 +0000
Manifest next update: Wed 01 Apr 2026 06:53:23 +0000
Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: lOhihpDasKDB31a/EAOZOaEdxBxGXjOzOgQvQwRJuXc=)
2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Validity
Not Before: Mar 25 06:53:23 2026 GMT
Not After : Apr 1 06:53:23 2026 GMT
Subject: CN=69c38663-b71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:95:ec:65:d8:85:1f:07:e7:41:87:e7:88:
31:3f:12:ad:2d:5f:ca:3a:5f:c8:1b:72:49:30:14:
1c:6d:3b:b7:b5:30:07:4f:ac:c2:42:7b:6d:47:ba:
a7:b2:69:70:de:28:29:94:4a:72:93:ab:90:b2:a0:
d5:cf:09:30:56:01:7f:cc:ec:a8:ab:44:e2:2c:f0:
59:3e:c8:06:8e:68:0f:fd:2b:d0:36:a0:1f:e9:c5:
51:39:b5:05:cd:2a:24:ee:db:12:a5:f5:db:cf:ae:
aa:f7:fe:89:8b:d9:17:5e:49:bb:8c:21:f3:35:f3:
5f:78:32:75:75:81:91:45:bb:06:a9:b8:21:b1:17:
8b:df:dc:98:2f:f7:b0:b1:bf:8e:3d:88:df:2d:2e:
4a:1b:89:81:8d:2a:8b:9f:6d:bf:0d:5c:9d:5f:b0:
36:6f:3f:0f:4f:e5:ab:6c:e8:56:27:b8:7c:8e:c5:
c1:2e:4e:72:87:23:07:4b:1e:73:e1:1f:dc:2f:4a:
32:d8:aa:53:2e:cf:74:54:09:47:48:2f:f4:bf:0c:
58:91:2e:be:c6:7c:d4:79:b0:ac:09:86:8d:9e:9f:
a5:ec:61:c1:ca:5b:50:c5:d3:50:6f:02:28:cb:4f:
58:ec:9c:29:a5:44:04:90:09:8b:01:0d:45:76:fe:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F3:33:FE:18:03:5F:3B:0B:4A:E2:AA:AD:CE:54:23:F2:FB:5C:E2
X509v3 Authority Key Identifier:
keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:fe:fd:a1:6d:c9:34:90:85:a6:e3:db:a9:e4:dd:12:c9:e5:
9b:73:28:82:02:d1:6c:be:26:bc:75:47:4e:c4:3d:0b:61:fd:
b4:50:22:62:11:4d:d6:92:84:45:08:72:49:7e:de:bd:0b:d0:
03:79:8e:49:2e:2d:ab:64:fb:76:f0:76:44:34:95:61:3f:a5:
d3:e0:80:ca:48:8d:23:d2:6a:b9:fb:96:eb:48:32:f7:58:40:
ad:bb:35:12:f1:8d:be:0a:8e:50:cc:cf:50:61:8f:9f:80:73:
72:85:bc:b5:08:dd:d4:ea:65:1d:ab:2c:67:34:0a:a7:09:96:
38:09:ac:25:94:c7:66:b7:13:0d:0d:23:de:59:b5:ae:f7:88:
59:f1:65:cf:1c:9b:c1:65:bb:01:4c:6c:79:d1:d9:ed:e7:db:
38:67:57:0b:d2:f5:e4:af:be:21:0f:fb:a9:48:73:05:0f:4e:
9e:c0:49:e3:40:df:05:d7:88:fc:51:39:c0:36:30:ea:39:d2:
d3:75:5c:f1:8a:77:cf:2a:5b:84:08:ab:72:48:2f:af:c0:dd:
9b:74:2f:b7:f1:6b:05:dd:3d:34:f9:7f:8d:41:29:41:7a:98:
ca:d4:79:65:f1:75:42:bf:62:c3:c9:82:88:07:89:68:b2:02:
73:7d:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:36 2026 by rpki-client