
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier: IEastumgrLeFNdE4CA/HGEZeY1KvyQ9+8IlPETBMWPs=
Subject key identifier: AB:6D:9A:1B:F5:02:79:AD:C4:66:C4:56:74:A4:77:6A:2D:28:93:F5
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number: 01AB
Signing time: Thu 23 Jul 2026 05:41:49 +0000
Manifest this update: Thu 23 Jul 2026 05:41:49 +0000
Manifest next update: Thu 30 Jul 2026 05:41:49 +0000
Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: PuU/vdMv2+itsdojLKN+9CtomdWyhATr13LSZJVnVNU=)
2: F72A12FA5C1311F1BF7F3AF193833773.roa (hash: mRNtO5ipsZo1qT2QZLktkRT25NV0Ov7UED9rbrgZkrw=)
3: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: S0GbV2uCmeoviSkKmr830JmB3p8jmN3VMhk4MtRUTHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Validity
Not Before: Jul 23 05:41:49 2026 GMT
Not After : Jul 30 05:41:49 2026 GMT
Subject: CN=6a61a99d-85bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:13:2f:8a:e5:59:ce:2d:66:bc:28:d0:3a:
d7:2a:34:87:3a:ec:d0:cb:ea:2b:b9:21:9d:af:3b:
82:4a:3c:61:00:e6:f0:14:ea:3c:32:94:79:24:38:
8e:0f:98:1c:21:d2:b6:b8:f0:4c:3f:09:51:62:8a:
69:45:68:5d:cf:82:ad:df:db:d6:2b:20:89:a9:8c:
e6:ae:9f:17:af:90:59:a1:e5:c2:af:c6:3b:eb:11:
5a:e7:e8:9f:e0:1c:ff:7b:2d:5e:5f:a5:71:f8:d5:
d9:23:6b:e9:ea:2f:48:16:a8:63:a4:eb:3b:b9:1f:
bc:1f:be:67:7d:60:9e:7c:b7:48:b7:09:9d:09:4a:
e4:bb:06:80:51:dc:36:6b:60:32:14:8c:2f:33:e2:
61:fd:65:94:4b:b0:8b:f3:7d:e0:32:cb:1b:95:ca:
fc:cf:ae:56:29:59:ff:8a:9c:d2:ce:39:3c:ea:18:
b1:7b:c9:9d:ed:f2:bf:c5:70:72:42:72:62:8b:2b:
cc:51:7c:21:d5:dd:66:d0:71:ef:e2:c7:9c:3d:03:
36:22:e5:33:38:92:ce:db:37:15:88:93:07:cf:be:
e9:8a:55:36:0f:48:fc:ef:31:0e:d9:47:22:63:84:
13:26:63:85:f2:bd:27:7d:45:49:d8:4f:f7:b9:fb:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6D:9A:1B:F5:02:79:AD:C4:66:C4:56:74:A4:77:6A:2D:28:93:F5
X509v3 Authority Key Identifier:
keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:32:15:52:ae:81:ae:5d:a1:04:7a:21:8c:88:40:64:f1:
8f:25:e3:3f:1b:7e:7c:ac:25:30:78:50:05:9e:80:e1:b8:fb:
a9:59:f9:e6:47:5f:68:cc:75:bb:ad:a2:76:c8:81:55:ed:12:
fe:26:c9:96:36:1b:ed:57:70:4f:3f:cf:c3:9a:1c:88:4e:be:
31:f8:1a:c5:b5:15:78:5b:8a:c5:ce:88:3b:9a:25:96:ae:7d:
d8:47:45:6b:33:60:12:7f:50:b5:9a:e8:98:14:8c:d6:4a:80:
2e:09:a6:15:9b:03:4a:89:84:03:69:bd:4d:55:83:3f:50:e2:
0b:30:8b:91:2d:28:be:18:ae:80:e6:80:21:4a:5d:1c:69:20:
ad:fc:9a:b9:4b:b0:f6:e9:97:a6:54:c9:c2:9b:c6:b7:2c:ea:
3b:2d:e7:c2:0d:22:37:4a:32:f7:61:5a:2f:f9:1c:ab:d5:34:
ad:4b:cd:2e:a2:37:06:62:20:eb:df:1e:95:a7:45:fe:58:cd:
38:59:d7:97:5e:b6:60:25:a0:db:d1:0f:b9:f8:ff:fd:80:92:
ba:08:f8:0f:69:86:5e:8f:a1:55:4a:b6:dd:92:28:8e:a4:7f:
f1:3a:ec:ad:10:83:da:42:79:f6:a5:d7:69:16:0b:91:c3:b0:
a7:89:1c:cf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4
RjU4QTc3RTUwHhcNMjYwNzIzMDU0MTQ5WhcNMjYwNzMwMDU0MTQ5WjAYMRYwFAYD
VQQDEw02YTYxYTk5ZC04NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlOsTL4rlWc4tZrwo0DrXKjSHOuzQy+oruSGdrzuCSjxhAObwFOo8MpR5JDiO
D5gcIdK2uPBMPwlRYoppRWhdz4Kt39vWKyCJqYzmrp8Xr5BZoeXCr8Y76xFa5+if
4Bz/ey1eX6Vx+NXZI2vp6i9IFqhjpOs7uR+8H75nfWCefLdItwmdCUrkuwaAUdw2
a2AyFIwvM+Jh/WWUS7CL833gMssblcr8z65WKVn/ipzSzjk86hixe8md7fK/xXBy
QnJiiyvMUXwh1d1m0HHv4secPQM2IuUzOJLO2zcViJMHz77pilU2D0j87zEO2Uci
Y4QTJmOF8r0nfUVJ2E/3ufuKiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKttmhv1
AnmtxGbEVnSkd2otKJP1MB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2
RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK
eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWQQyFVKuga5doQR6IYyIQGTxjyXjPxt+fKwlMHhQBZ6A4bj7qVn55kdfaMx1
u62idsiBVe0S/ibJljYb7VdwTz/Pw5ociE6+MfgaxbUVeFuKxc6IO5ollq592EdF
azNgEn9QtZromBSM1kqALgmmFZsDSomEA2m9TVWDP1DiCzCLkS0ovhiugOaAIUpd
HGkgrfyauUuw9umXplTJwpvGtyzqOy3nwg0iN0oy92FaL/kcq9U0rUvNLqI3BmIg
698eladF/ljNOFnXl162YCWg29EPufj//YCSugj4D2mGXo+hVUq23ZIojqR/8Trs
rRCD2kJ59qXXaRYLkcOwp4kczw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:01 2026 by rpki-client