
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier: U929WZduSPMYDAcCTuoWEc1AD1+B7Fx2oVltVVarHyc=
Subject key identifier: 6A:8F:D2:4D:1C:60:8E:F3:F5:B1:C5:82:F0:FA:07:4A:DF:3D:5E:6D
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial: 070A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number: 070A
Signing time: Thu 24 Sep 2026 22:01:18 +0000
Manifest this update: Thu 24 Sep 2026 22:01:17 +0000
Manifest next update: Thu 01 Oct 2026 22:01:17 +0000
Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: 3XGRkU7YHTNIa7s6Q7nuBlPqF+fiLJRpdy4P9kQ/UHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Validity
Not Before: Sep 24 22:01:17 2026 GMT
Not After : Oct 1 22:01:17 2026 GMT
Subject: CN=6ab59dae-d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:bc:67:42:a6:db:43:c3:f1:b7:42:cf:ce:
e8:73:da:8c:57:08:a9:53:d8:af:29:97:f3:ab:2f:
67:b1:22:32:68:0c:83:17:44:ad:b6:72:85:f9:45:
da:50:12:66:44:da:12:c8:6a:66:5a:17:9a:d4:58:
bd:1d:38:5a:95:8f:82:50:5c:2e:20:bd:4a:27:9f:
7b:a8:8d:10:a4:6d:8d:f0:74:e8:77:db:8f:20:2c:
96:b1:f8:42:f5:77:30:14:ce:3b:00:a1:9a:2e:2a:
6f:99:2b:83:1f:b9:09:23:05:b5:30:b1:b6:b5:03:
74:d3:bb:a7:84:d9:cd:b1:2c:be:19:1b:62:fc:95:
66:d7:ac:90:c4:d6:33:6c:00:63:7f:09:fc:ea:7a:
fe:3e:ac:86:e7:19:d3:a1:64:20:61:b6:3d:ed:f0:
5c:a6:84:90:20:48:3f:9d:73:a3:a4:93:de:87:56:
e6:53:5f:b7:c6:ee:a5:17:ee:d7:60:b6:aa:30:96:
8e:bb:e7:8a:2f:55:cb:f0:a5:27:9a:80:46:fa:42:
cf:90:f8:d0:41:88:5a:91:9c:2e:40:93:fd:d6:6c:
9c:20:78:2c:78:75:04:38:ca:85:c4:93:90:dc:b7:
88:2c:06:e0:cc:b9:10:b4:79:84:9c:0f:69:44:af:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8F:D2:4D:1C:60:8E:F3:F5:B1:C5:82:F0:FA:07:4A:DF:3D:5E:6D
X509v3 Authority Key Identifier:
keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:63:94:31:f3:2c:88:2c:83:91:20:a2:5c:57:89:73:b2:2a:
1a:d9:4d:b1:59:3e:b9:a8:2e:39:2c:69:e7:d5:b3:96:c7:e4:
2d:25:78:a8:cd:55:03:bf:cd:62:21:3e:76:a1:d6:da:c4:b2:
19:58:09:73:17:73:3d:75:f9:75:f7:bb:58:54:0a:fd:d1:a1:
8a:ec:52:ee:47:ca:84:23:75:e0:1e:05:56:4e:0d:c8:5f:74:
72:ca:b6:e6:0c:76:ce:87:d0:cf:ef:68:1a:64:bd:63:3c:68:
86:17:a4:c1:da:47:2a:5d:d3:40:cd:fd:42:d0:dc:6c:18:17:
05:f9:4c:e5:64:26:cc:ce:87:5a:00:f5:70:c0:0f:6c:16:dc:
dc:f7:00:16:26:a6:60:07:ee:b9:0b:a1:78:fc:eb:dd:fc:33:
15:8f:b1:28:fd:7d:39:12:a4:f7:97:66:07:e3:f5:2a:0b:1f:
af:4c:f5:0d:27:b9:c1:52:1b:c7:f1:61:4c:94:82:77:0f:f7:
f7:f6:6b:37:9f:7b:a2:43:f2:6f:cb:3f:e4:a6:61:b9:98:ec:
72:e3:69:bf:de:7c:f4:90:2c:8b:6c:23:ed:00:c5:be:ba:8a:
b6:1a:48:0e:b4:00:9e:e8:45:e1:73:6e:2f:ed:55:73:40:47:
13:23:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:57:18 2026 by rpki-client