
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
File: qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json)
Hash identifier: yib0+5QiOWtoamugbW8FH3dIdQxgpFWNCkdpO+kPmEE=
Subject key identifier: 79:3C:8D:BF:CA:20:30:C1:5B:75:1C:17:C6:79:D5:63:A1:EC:E4:D8
Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
Certificate issuer: /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Certificate serial: 0B42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
Manifest number: 0B2C
Signing time: Thu 24 Sep 2026 19:14:01 +0000
Manifest this update: Thu 24 Sep 2026 19:14:00 +0000
Manifest next update: Thu 01 Oct 2026 19:14:00 +0000
Files and hashes: 1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: j9cHJdD3x7v2JEBhQJ8LLbu9MzibrNAEnr0t6tHxeuw=)
2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: MFDPLm44DATJMRrpcLnWLE/YbVrKW9kBqUp08oFW0NM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl
rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2882 (0xb42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBBD7, serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Validity
Not Before: Sep 24 19:14:00 2026 GMT
Not After : Oct 1 19:14:00 2026 GMT
Subject: CN=6ab57679-fa9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:1a:f1:05:bc:6d:4a:98:35:38:56:3f:90:
7b:56:da:25:12:53:ef:74:6a:6d:5e:37:8a:7f:9b:
b8:d9:43:27:4f:78:1e:c7:62:dc:5d:ae:42:e3:15:
60:59:f5:7c:bc:4d:72:c7:9f:3c:16:62:62:f3:25:
24:5c:99:8a:e5:d6:70:d0:0d:ff:9d:76:a6:bd:ce:
7c:fe:6c:9c:f0:8c:f1:26:be:d4:22:c6:9e:3a:91:
11:37:83:ec:76:74:94:4a:c0:a6:89:7e:e3:ef:bd:
48:24:f5:23:db:3b:a2:92:bc:c4:44:91:87:72:4f:
a6:84:af:8a:68:d7:76:3d:c4:8f:95:72:19:8d:9c:
4f:fc:f5:e9:f7:95:2b:01:74:24:84:d7:dc:3c:1d:
8d:a5:4f:8e:79:51:90:0c:9c:c7:d9:15:2f:0c:2d:
58:f2:bc:db:1b:22:d7:76:c6:ca:d6:5e:31:b8:dd:
ed:64:ff:de:1a:d8:cd:8c:31:8b:44:d7:fd:20:ab:
db:02:50:6a:d3:af:09:1c:54:46:b3:f6:6b:bc:ff:
81:77:10:48:b8:da:97:b7:29:b7:9b:83:9f:95:15:
ad:39:72:31:b6:4f:27:42:7c:ba:27:7b:4c:80:1f:
67:94:6e:41:b5:fd:81:d9:4c:20:27:70:fc:56:4e:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:8D:BF:CA:20:30:C1:5B:75:1C:17:C6:79:D5:63:A1:EC:E4:D8
X509v3 Authority Key Identifier:
keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:b9:c2:79:5e:89:ff:5a:78:15:d7:54:2b:73:f8:d1:b7:48:
f4:21:01:1f:0b:38:9f:4a:52:e1:e0:e0:f8:cd:3a:93:7a:3f:
4f:9e:5b:a2:09:83:bb:df:a5:a8:d3:ec:6c:de:44:58:2f:4b:
b0:99:10:85:b6:1d:ce:cf:1c:38:d2:96:47:d1:b8:90:f9:e1:
48:19:1b:0e:55:23:b7:87:70:d9:45:fa:38:64:87:88:9f:d6:
37:d3:2b:e7:af:45:f6:57:2b:93:74:f3:d4:c7:4b:2c:47:d5:
5c:d9:c8:73:5b:23:9a:04:85:9a:f7:df:d4:c8:a4:3b:63:25:
c1:90:13:65:7d:28:ef:d2:ce:7d:01:65:d6:51:b6:c1:3f:d8:
c3:74:2a:d8:a5:c1:c1:83:4f:e5:4f:c2:75:f8:f0:18:25:65:
8b:b6:be:68:0a:f5:09:7c:8b:42:dd:c2:c7:22:17:0a:ff:72:
de:f7:7c:3d:ba:6a:fe:44:26:ae:e5:59:3f:ef:06:63:ed:9d:
84:e2:0e:08:37:37:0f:a8:89:c0:ca:a2:57:50:2d:f7:71:fd:
2b:76:cb:47:6b:22:d0:d4:b2:80:d4:c5:0f:ef:c5:85:0a:74:
4d:c4:49:e1:d1:13:3e:c5:64:bf:6f:e6:bc:ce:da:7a:58:6d:
48:6d:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:48:19 2026 by rpki-client