
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier: GqG8XQzvBsar3abrWjXdHkftJiTSxv1T6H5RyyiLFXs=
Subject key identifier: 64:26:F0:C7:AA:56:0F:03:75:38:F1:40:DC:5C:07:C6:CD:06:C5:78
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number: 01F6
Signing time: Thu 23 Jul 2026 05:23:42 +0000
Manifest this update: Thu 23 Jul 2026 05:23:42 +0000
Manifest next update: Thu 30 Jul 2026 05:23:42 +0000
Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: h/BGOA6WwU/DxXu4y2gPrZ/n15cvelwqXIfDN3fAIKo=)
2: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: DlhDgTG7w84Ovj2w/3S1GtqzEGfOWk6+fiHNLhzsPdE=)
3: FCF99042301011EFBC350682C4F9AE02.roa (hash: G76akd+Pz3BvQnQXHM+tIAwBqY1cYkiz3eE1RRYxTew=)
4: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: yxilBFlE1MgXEF3lGJREKxdKcg1wggFTb7Z4QOAKfZc=)
5: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: EoV7X+CPLPt1PwJmt/C6xwl6Rd3EK1Ujxhgn/dIQJh4=)
6: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tkIQFKk/Mo9h+Y6zoIuiaKelqp3EP1aM68bZaSbBy0M=)
7: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: Et35taMHrzzZx//1uz1X2k2usz0PCpjA6ZgM0w/qGlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Validity
Not Before: Jul 23 05:23:42 2026 GMT
Not After : Jul 30 05:23:42 2026 GMT
Subject: CN=6a61a55e-2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:5a:1e:21:47:6a:68:b6:34:a2:39:40:cb:
83:d5:29:4e:e2:e5:b1:aa:cc:33:c4:ef:fe:27:d2:
46:89:79:82:e5:08:8a:aa:ea:90:ce:58:17:15:90:
16:23:c2:c6:50:b9:85:c1:86:91:30:96:03:17:14:
48:3e:33:68:49:16:4e:47:56:a0:dc:98:21:42:1a:
ea:92:35:ae:ed:64:b8:28:12:56:fd:36:0f:ad:28:
9a:42:fc:00:89:42:21:b2:e2:5e:f9:ec:90:06:38:
10:2f:df:5f:f0:80:ac:14:bf:21:47:26:09:38:ac:
d4:55:97:23:e4:d2:3b:69:f6:75:d2:68:8f:6a:9f:
8d:3d:94:d4:b3:d4:08:14:04:c7:8c:cf:4a:3c:61:
8a:52:80:ed:7c:0e:26:79:bd:60:03:1d:95:cd:4c:
57:ff:fb:d4:6b:d2:d7:2d:6c:1a:ef:05:9a:9e:14:
f1:1e:a8:a8:27:be:94:54:99:6c:c8:86:3b:ef:c7:
f7:78:65:3e:cc:ed:de:ec:6f:da:11:8c:ae:3a:1d:
57:73:40:0f:d0:4d:04:83:e7:60:c3:ab:62:ba:46:
50:2f:d0:76:94:15:bb:51:d7:41:5c:9c:04:b6:0a:
08:e5:ed:96:b0:08:20:ed:f1:52:34:f5:1e:4e:4d:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:26:F0:C7:AA:56:0F:03:75:38:F1:40:DC:5C:07:C6:CD:06:C5:78
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7e:da:a4:6f:37:e7:f9:e4:98:9c:86:f9:e5:13:70:5a:0f:
ca:b0:dd:b6:c4:b0:e9:35:a2:67:40:3f:7f:9f:c3:63:2e:03:
1a:d6:33:cb:87:28:88:dc:c4:14:d4:85:2a:79:37:07:38:ad:
a2:74:85:1f:e7:7e:e0:44:10:5a:7e:06:53:4f:8e:ac:d1:c6:
68:b5:5b:fa:ec:db:5a:09:c0:1a:47:68:e3:0a:3e:70:b4:54:
a7:81:e4:af:f9:3c:c2:2d:2b:29:5c:27:7a:7f:20:79:1d:4b:
dd:3a:07:f8:f2:0b:26:b4:9f:ad:98:b3:b5:51:89:9f:c7:fd:
db:f7:e8:50:d6:7a:e4:bc:13:6e:f6:a1:74:ae:33:5d:cc:21:
8b:c4:8a:f4:7c:5d:9b:de:67:f0:01:c9:0c:aa:eb:57:6e:be:
11:a7:90:62:ac:70:30:b8:bc:de:dc:1d:79:9b:50:a5:21:ea:
ce:61:a1:8b:2b:3d:76:12:53:63:20:7e:43:b4:c8:6e:62:b5:
3d:b6:3e:e8:fc:3e:b7:e6:5e:7e:c4:2c:33:af:c9:35:e8:3f:
fb:83:a0:eb:2b:be:b9:57:b3:15:32:31:23:6b:0b:7a:e1:09:
6b:55:64:96:bd:c6:bf:05:ca:6c:74:ff:5b:5a:d4:5f:48:48:
c7:26:ca:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw
QkVDQUE5QTkwHhcNMjYwNzIzMDUyMzQyWhcNMjYwNzMwMDUyMzQyWjAYMRYwFAYD
VQQDEw02YTYxYTU1ZS0yNjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmNaHiFHami2NKI5QMuD1SlO4uWxqswzxO/+J9JGiXmC5QiKquqQzlgXFZAW
I8LGULmFwYaRMJYDFxRIPjNoSRZOR1ag3JghQhrqkjWu7WS4KBJW/TYPrSiaQvwA
iUIhsuJe+eyQBjgQL99f8ICsFL8hRyYJOKzUVZcj5NI7afZ10miPap+NPZTUs9QI
FATHjM9KPGGKUoDtfA4meb1gAx2VzUxX//vUa9LXLWwa7wWanhTxHqioJ76UVJls
yIY778f3eGU+zO3e7G/aEYyuOh1Xc0AP0E0Eg+dgw6tiukZQL9B2lBW7UddBXJwE
tgoI5e2WsAgg7fFSNPUeTk1MgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQm8Meq
Vg8DdTjxQNxcB8bNBsV4MB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt
d3pJREZ1MWFwMDRMN0txYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtn7apG835/nkmJyG+eUTcFoPyrDdtsSw6TWiZ0A/f5/DYy4DGtYzy4coiNzE
FNSFKnk3BzitonSFH+d+4EQQWn4GU0+OrNHGaLVb+uzbWgnAGkdo4wo+cLRUp4Hk
r/k8wi0rKVwnen8geR1L3ToH+PILJrSfrZiztVGJn8f92/foUNZ65LwTbvahdK4z
Xcwhi8SK9Hxdm95n8AHJDKrrV26+EaeQYqxwMLi83twdeZtQpSHqzmGhiys9dhJT
YyB+Q7TIbmK1PbY+6Pw+t+ZefsQsM6/JNeg/+4Og6yu+uVezFTIxI2sLeuEJa1Vk
lr3GvwXKbHT/W1rUX0hIxybKJw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:00 2026 by rpki-client