
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier: 22EZ3jKjy7+nvqL1bsz2EAkp/IEcxACBy4ytqbciU6k=
Subject key identifier: 0A:D5:B1:93:7D:06:3F:98:74:9F:8A:28:EC:B0:84:01:65:C8:11:7B
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial: 06E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number: 06E9
Signing time: Wed 22 Jul 2026 22:53:36 +0000
Manifest this update: Wed 22 Jul 2026 22:53:36 +0000
Manifest next update: Wed 29 Jul 2026 22:53:36 +0000
Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: kJG28To1PynjHtzds1Qh5pdlAR8cnYhSeo7scF0zcsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Validity
Not Before: Jul 22 22:53:36 2026 GMT
Not After : Jul 29 22:53:36 2026 GMT
Subject: CN=6a6149f0-8e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b1:c0:f9:09:f3:97:70:61:e2:05:b6:2b:a6:
0f:81:66:42:05:57:96:83:f5:c5:9d:84:f4:05:2b:
be:1a:6b:f3:1d:75:1c:83:62:2d:23:14:ac:9d:05:
3d:d5:fe:7e:f0:ee:76:f0:16:38:7b:dc:12:b8:30:
e5:c2:e9:95:81:b8:31:f3:b8:ad:c4:f6:ca:8e:23:
80:23:8d:3a:dc:f2:90:c1:06:fe:80:db:a4:fd:2b:
b7:bd:32:36:21:46:ea:9f:ce:5f:76:c3:d9:f3:a7:
7e:e7:b0:23:31:c9:bd:56:f3:6a:71:9c:b6:09:cb:
ab:3b:bd:15:e1:47:22:f3:b7:45:db:c6:97:dd:68:
6b:6a:fb:98:37:51:c1:bd:67:94:fb:a2:d9:87:66:
24:12:5c:4b:df:ef:ae:b3:2c:62:7f:fb:bc:96:ad:
37:16:4e:7c:1d:63:df:e7:47:5a:15:4d:f2:c0:4a:
e1:ca:7b:31:0f:72:5d:ff:8e:68:7b:d7:77:bb:0d:
28:18:17:01:28:ea:ce:e4:11:fb:62:c0:3f:a5:bc:
c6:fa:0f:7f:62:ab:99:a7:1c:45:a5:da:47:3c:94:
87:85:1a:e3:03:58:ba:09:56:6a:32:56:7c:29:45:
0f:d7:d1:fb:7d:23:19:fd:c2:b3:ab:ba:1b:19:cb:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D5:B1:93:7D:06:3F:98:74:9F:8A:28:EC:B0:84:01:65:C8:11:7B
X509v3 Authority Key Identifier:
keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a9:0e:a2:ae:1f:76:db:b6:73:c3:ad:f8:41:2c:c7:a6:2e:
af:71:8f:c0:58:55:27:d9:32:78:0e:11:62:b9:64:2d:1a:44:
d4:91:21:24:e5:e5:ce:a4:f9:7f:8d:d0:41:a5:c3:81:52:18:
8d:54:08:2a:ee:ca:06:f6:85:6b:5d:39:12:86:4c:55:c8:42:
80:82:a0:85:40:f2:d6:a4:76:eb:84:f7:91:2e:e4:5a:55:a7:
ed:96:5c:03:04:50:93:16:14:e7:0d:5a:96:c5:34:15:a8:6b:
9b:aa:40:34:ff:b6:17:62:97:74:b6:33:26:cb:94:05:0a:f7:
c2:c8:9d:ed:4e:8d:ad:9a:55:a3:cc:ac:90:1f:8c:09:46:d7:
ee:7c:18:53:c8:ef:6f:e3:75:15:de:56:34:7c:66:22:79:76:
6d:2d:72:bd:89:1d:90:ef:70:ae:6a:33:59:b5:08:55:3d:7e:
b0:08:db:b8:91:74:45:25:92:74:98:31:c1:66:c2:de:0f:4b:
7e:5a:04:ad:c6:43:05:fe:5c:5d:40:31:e1:9a:3f:59:f7:db:
2c:cf:03:1a:c3:59:f3:1e:d7:3b:e8:d8:a4:fa:10:31:ed:f7:
b6:b5:b7:11:8b:c1:d8:82:11:93:be:7a:83:eb:f2:32:9e:44:
8f:d3:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:10 2026 by rpki-client