
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
File: QeHsF957pw-MEkF3aWN3AjclGd4.mft (raw, json)
Hash identifier: noWX7NDO1nXmv8tqkOjXxlD+Wo6Ni5LLyLidPKqGNz8=
Subject key identifier: D5:88:5D:CD:47:45:69:03:BE:1F:46:BA:F2:89:42:A1:FB:5F:6B:3C
Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
Certificate issuer: /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
Manifest number: 018D
Signing time: Thu 23 Jul 2026 05:52:13 +0000
Manifest this update: Thu 23 Jul 2026 05:52:12 +0000
Manifest next update: Thu 30 Jul 2026 05:52:12 +0000
Files and hashes: 1: QeHsF957pw-MEkF3aWN3AjclGd4.crl (hash: WPAQDjdsi0wr/1zFmno4TIZ0qk1C1uXVi+5+nB0In6A=)
2: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (hash: xbXyHpLgHt9b+54jlb0N3LzfXI2w4v845p/L4pO7oxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl
rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE
Validity
Not Before: Jul 23 05:52:12 2026 GMT
Not After : Jul 30 05:52:12 2026 GMT
Subject: CN=6a61ac0d-b663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6a:06:ac:5f:26:0f:87:13:48:1c:00:1c:8b:
96:07:ab:d4:b3:3e:4a:2f:3d:df:a8:7b:56:18:e6:
a7:94:89:b6:ba:be:d4:43:e5:27:97:b7:7a:74:82:
61:ee:bf:e7:86:eb:f2:b8:70:db:05:ff:da:7b:dc:
cf:92:17:c8:61:a7:fe:1f:2f:00:00:09:0e:0c:f7:
71:b9:d4:b0:68:87:63:56:c3:d7:21:11:71:ab:69:
ed:02:9d:47:cc:87:5c:b0:6c:f5:35:bd:ae:e9:97:
10:54:ec:c8:e9:68:be:92:a2:3e:a9:ca:df:9d:7d:
e4:a9:05:9a:d8:8a:39:37:df:f1:39:a8:54:a8:46:
a0:46:fc:75:79:2d:97:f9:d3:88:61:51:d6:bf:b3:
04:17:0e:5b:94:2c:24:a5:80:bf:14:d1:94:a4:7b:
0a:0d:88:f0:e7:f8:6d:49:dd:bc:52:80:bc:a3:26:
2a:78:89:b5:d8:70:32:b9:6b:2d:17:d6:59:f6:da:
d2:58:9d:72:96:11:4d:1d:db:09:c5:81:9f:6f:cf:
89:ab:5e:96:29:6e:9f:e6:0f:92:98:fe:e1:63:76:
0d:1b:cb:a9:f4:df:46:02:d3:57:b9:72:7e:93:bb:
43:1c:53:b0:7b:44:21:7b:01:67:f7:c2:62:f1:38:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:5D:CD:47:45:69:03:BE:1F:46:BA:F2:89:42:A1:FB:5F:6B:3C
X509v3 Authority Key Identifier:
keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:59:b8:ec:56:9b:ff:70:f6:9d:5c:4d:23:9c:ed:74:a4:aa:
c1:99:c8:15:c4:f7:3b:3a:4b:3d:31:90:d1:97:7c:f6:88:ab:
d9:cb:15:da:43:48:34:6c:6a:fc:43:a0:25:01:6e:03:da:b7:
dc:55:52:28:11:f1:e7:c8:fa:d6:1e:d0:de:fd:90:78:7d:77:
e3:e3:de:89:b7:0d:15:8c:96:1e:da:2b:8a:69:b9:ee:c5:bc:
1a:e2:b9:ee:ec:10:cb:f7:2d:e3:1b:e8:3e:a1:82:ca:d6:9c:
9b:f9:e5:28:05:e4:c3:7a:c9:0b:e4:9a:81:53:75:bd:ed:ca:
80:65:c9:34:f7:48:3b:88:f9:46:73:1e:14:de:46:35:e6:5f:
21:3f:f5:1f:18:d1:53:3f:81:8d:a1:19:57:43:ca:b7:b4:cc:
7c:9f:41:8e:80:85:a8:20:ed:c2:f8:40:9a:5a:6f:fb:e6:e2:
36:ea:b6:61:9e:97:9f:e8:a2:cb:db:28:da:aa:0e:bf:9c:a2:
50:84:56:d7:1d:ce:60:13:c2:f8:a6:e3:dd:b2:90:01:7b:47:
2b:e4:e3:a6:c7:ea:1f:16:c6:1a:21:a4:25:ed:10:1e:1e:4c:
3e:44:18:f5:25:c7:75:d2:82:6e:eb:2c:bf:e4:97:6f:1e:c3:
a8:f2:5f:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFMjMxMTAvBgNVBAUTKDQxRTFFQzE3REU3QkE3MEY4QzEyNDE3NzY5NjM3NzAy
MzcyNTE5REUwHhcNMjYwNzIzMDU1MjEyWhcNMjYwNzMwMDU1MjEyWjAYMRYwFAYD
VQQDEw02YTYxYWMwZC1iNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8moGrF8mD4cTSBwAHIuWB6vUsz5KLz3fqHtWGOanlIm2ur7UQ+Unl7d6dIJh
7r/nhuvyuHDbBf/ae9zPkhfIYaf+Hy8AAAkODPdxudSwaIdjVsPXIRFxq2ntAp1H
zIdcsGz1Nb2u6ZcQVOzI6Wi+kqI+qcrfnX3kqQWa2Io5N9/xOahUqEagRvx1eS2X
+dOIYVHWv7MEFw5blCwkpYC/FNGUpHsKDYjw5/htSd28UoC8oyYqeIm12HAyuWst
F9ZZ9trSWJ1ylhFNHdsJxYGfb8+Jq16WKW6f5g+SmP7hY3YNG8up9N9GAtNXuXJ+
k7tDHFOwe0QhewFn98Ji8ThpywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWIXc1H
RWkDvh9GuvKJQqH7X2s8MB8GA1UdIwQYMBaAFEHh7Bfee6cPjBJBd2ljdwI3JRne
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zMDFBMUU0QTJD
NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3LU1Fa0YzYVdOM0FqY2xH
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FlSHNGOTU3cHctTUVrRjNhV04zQWpjbEdkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUUyMy8zMDFBMUU0QTJDNkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3
LU1Fa0YzYVdOM0FqY2xHZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB1m47Fab/3D2nVxNI5ztdKSqwZnIFcT3OzpLPTGQ0Zd89oir2csV2kNINGxq
/EOgJQFuA9q33FVSKBHx58j61h7Q3v2QeH134+PeibcNFYyWHtorimm57sW8GuK5
7uwQy/ct4xvoPqGCytacm/nlKAXkw3rJC+SagVN1ve3KgGXJNPdIO4j5RnMeFN5G
NeZfIT/1HxjRUz+BjaEZV0PKt7TMfJ9BjoCFqCDtwvhAmlpv++biNuq2YZ6Xn+ii
y9so2qoOv5yiUIRW1x3OYBPC+Kbj3bKQAXtHK+TjpsfqHxbGGiGkJe0QHh5MPkQY
9SXHddKCbussv+SXbx7DqPJf3Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:10 2026 by rpki-client