
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
File: QVEOswnqHt6pCF-PaC289YblBfg.mft (raw, json)
Hash identifier: dIEwNzqb6yfA0pAhiP7f7Kzn7ZEaDNuJ8OFqPyC9L4w=
Subject key identifier: 30:24:BD:C1:55:7F:35:41:F1:D2:A8:5A:9A:B4:F7:32:A3:69:32:51
Authority key identifier: 41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
Certificate issuer: /CN=A914EBB2/serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Certificate serial: 33
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
Manifest number: 32
Signing time: Thu 23 Jul 2026 05:55:42 +0000
Manifest this update: Thu 23 Jul 2026 05:55:42 +0000
Manifest next update: Thu 30 Jul 2026 05:55:42 +0000
Files and hashes: 1: QVEOswnqHt6pCF-PaC289YblBfg.crl (hash: cJXvcfhJ1aCcJk8Mexg+bZToZIBSTSLl1kSXkCIAI/A=)
2: 04A267BC3A1C11F18A86C54FCE833773.roa (hash: 23knBDl73gfXNd3iGv8o2CcfU2NSZeIUWhdKE2kDL2M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBB2, serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Validity
Not Before: Jul 23 05:55:42 2026 GMT
Not After : Jul 30 05:55:42 2026 GMT
Subject: CN=6a61acde-a971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:dc:e7:86:1d:56:63:80:0a:5f:51:b7:3e:
be:0c:1e:6d:38:ce:97:da:f3:e7:6c:a5:a6:c0:90:
8f:5c:c3:37:49:d4:33:d3:76:df:c4:5d:48:3e:ae:
4d:c8:98:0e:f0:1e:d0:71:be:a3:c1:49:6a:e3:05:
40:8e:a0:49:bc:9a:2a:44:83:5b:eb:90:c3:aa:77:
c8:f4:f3:1c:10:3e:dc:3e:08:a9:4b:0f:ab:81:d5:
49:40:b1:2f:1d:2c:3c:a3:a3:1f:34:8a:c7:2b:93:
bf:af:2e:d5:9b:ce:ed:e0:f5:b6:96:2b:30:c9:fd:
b7:cf:71:39:e9:9b:ca:af:6f:e2:64:a0:49:a5:32:
f8:a2:65:5c:79:db:28:39:5d:f2:e2:00:55:b0:40:
d7:37:24:f8:8e:1c:db:83:ea:55:fd:7c:50:6f:8a:
b8:39:df:33:7c:2f:ee:c8:39:ea:2c:d0:c6:a5:d2:
d2:ea:9e:ea:11:7c:58:7d:f7:37:8b:7a:51:33:44:
ef:15:c8:6d:99:54:bb:af:66:61:c6:e9:ad:f9:aa:
33:a4:5e:b0:8e:fc:4e:1f:e4:94:7c:88:63:b2:1c:
14:57:42:55:7b:93:b5:11:94:07:9d:d0:29:45:d5:
cb:89:2a:6e:3e:94:8c:a9:e5:29:3c:19:c7:93:d6:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:BD:C1:55:7F:35:41:F1:D2:A8:5A:9A:B4:F7:32:A3:69:32:51
X509v3 Authority Key Identifier:
keyid:41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b5:39:a2:0c:f5:4f:a1:1b:3a:cf:0c:1b:02:b6:e6:64:81:
bf:18:4a:49:d0:d1:f4:2c:ff:ab:70:c0:37:14:a1:67:a9:97:
82:84:5a:a8:0a:41:3a:76:7f:ca:9f:6d:08:2a:1c:b0:98:ba:
6a:28:d5:6e:df:12:f4:ad:04:7d:f5:7c:d8:16:ae:c5:d8:a6:
c4:05:43:99:a4:62:a3:a7:f3:c0:24:b4:f1:ff:5e:4d:2f:9d:
01:a1:cc:50:e5:f3:6e:5e:47:21:ca:16:25:e0:5f:62:d1:d7:
b4:1c:ea:4a:d1:a5:ef:dc:7b:eb:ad:8b:d4:fc:36:5a:18:24:
6a:0f:7e:8f:04:99:8e:48:64:79:5e:2e:29:cf:78:21:fc:db:
a7:34:c9:9f:bd:3c:15:05:32:d9:cf:e4:18:97:83:fb:50:9f:
c6:a2:19:79:61:97:34:23:20:ca:c9:3e:e2:05:4d:73:53:0d:
a9:7b:94:06:68:61:72:69:d3:ea:e4:b9:a2:09:49:2d:e8:c9:
07:9f:50:09:27:b0:76:80:33:a3:05:e2:2e:06:1c:f3:5a:c8:
30:f9:c4:c6:24:cd:e6:c9:cc:c8:3e:08:56:09:5d:55:f0:65:
32:61:64:8e:2d:0c:17:fa:e7:08:b7:6c:0a:38:83:1f:83:96:
b5:39:bb:fa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RUJCMjExMC8GA1UEBRMoNDE1MTBFQjMwOUVBMUVERUE5MDg1RjhGNjgyREJDRjU4
NkU1MDVGODAeFw0yNjA3MjMwNTU1NDJaFw0yNjA3MzAwNTU1NDJaMBgxFjAUBgNV
BAMTDTZhNjFhY2RlLWE5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCo9znhh1WY4AKX1G3Pr4MHm04zpfa8+dspabAkI9cwzdJ1DPTdt/EXUg+rk3I
mA7wHtBxvqPBSWrjBUCOoEm8mipEg1vrkMOqd8j08xwQPtw+CKlLD6uB1UlAsS8d
LDyjox80iscrk7+vLtWbzu3g9baWKzDJ/bfPcTnpm8qvb+JkoEmlMviiZVx52yg5
XfLiAFWwQNc3JPiOHNuD6lX9fFBvirg53zN8L+7IOeos0Mal0tLqnuoRfFh99zeL
elEzRO8VyG2ZVLuvZmHG6a35qjOkXrCO/E4f5JR8iGOyHBRXQlV7k7URlAed0ClF
1cuJKm4+lIyp5Sk8GceT1m3/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMCS9wVV/
NUHx0qhamrT3MqNpMlEwHwYDVR0jBBgwFoAUQVEOswnqHt6pCF+PaC289YblBfgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFQkIyLzA3Rjg0Q0EwM0Ex
ODExRjE5MjgyNzFDQjhFRUU1MjhFL1FWRU9zd25xSHQ2cENGLVBhQzI4OVlibEJm
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvUVZFT3N3bnFIdDZwQ0YtUGFDMjg5WWJsQmZnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
QkIyLzA3Rjg0Q0EwM0ExODExRjE5MjgyNzFDQjhFRUU1MjhFL1FWRU9zd25xSHQ2
cENGLVBhQzI4OVlibEJmZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAvtTmiDPVPoRs6zwwbArbmZIG/GEpJ0NH0LP+rcMA3FKFnqZeChFqoCkE6dn/K
n20IKhywmLpqKNVu3xL0rQR99XzYFq7F2KbEBUOZpGKjp/PAJLTx/15NL50BocxQ
5fNuXkchyhYl4F9i0de0HOpK0aXv3HvrrYvU/DZaGCRqD36PBJmOSGR5Xi4pz3gh
/NunNMmfvTwVBTLZz+QYl4P7UJ/Gohl5YZc0IyDKyT7iBU1zUw2pe5QGaGFyadPq
5LmiCUkt6MkHn1AJJ7B2gDOjBeIuBhzzWsgw+cTGJM3myczIPghWCV1V8GUyYWSO
LQwX+ucIt2wKOIMfg5a1Obv6
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:51:56 2026 by rpki-client