
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: Shdg6Brt3kKsiiLkGTdU0e0e74vfv6Xa4K+qE6ihaSw=
Subject key identifier: C5:92:26:BA:74:A9:C1:00:82:0A:02:1A:89:86:BC:98:CD:F7:31:35
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 01AE
Signing time: Thu 23 Jul 2026 05:40:43 +0000
Manifest this update: Thu 23 Jul 2026 05:40:43 +0000
Manifest next update: Thu 30 Jul 2026 05:40:43 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: OOPAhDpTEoERR7o9rcd68lRlH/wX+NQlSDKuBfSBeR8=)
2: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
3: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: Ps4zTjFyLHJz+OVkfNbIpcjmNwEHH47lDT8mzreZ++U=)
4: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: 6g4xFT+5TBoOWRdnTjTJYIhatI0v8zNL/4mR8KhkdP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Jul 23 05:40:43 2026 GMT
Not After : Jul 30 05:40:43 2026 GMT
Subject: CN=6a61a95b-55d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:5e:68:89:5b:a8:4a:30:4f:13:8e:d7:c3:
16:29:85:7b:69:ac:5b:2a:49:89:71:6d:87:32:c7:
c9:51:61:ee:de:31:63:0c:ae:56:f1:03:d3:3b:e2:
24:e5:83:ae:66:c9:59:54:6e:94:70:c1:db:59:9f:
28:04:c7:c1:d4:5e:9f:61:bd:ed:fd:dd:17:97:d2:
2d:64:f6:8c:66:57:ae:85:d0:35:07:1c:0c:1b:42:
f5:90:39:64:ed:bc:16:3c:54:ea:25:cf:4a:05:19:
75:69:67:81:0d:75:60:15:06:00:90:10:41:df:53:
42:f4:3a:cf:34:52:3d:06:ec:6a:f7:ec:8d:b8:d4:
44:2d:ea:6a:b9:bc:0e:63:1f:94:ae:36:71:7b:24:
5b:7b:d0:c6:d7:b2:c2:fc:1f:1a:49:15:ff:e9:33:
31:b0:3a:ab:98:4c:36:82:6e:87:57:b9:bc:b2:8a:
a7:fb:25:b3:2b:e1:d5:82:7f:32:fb:c1:13:e3:84:
59:0d:1e:9f:88:7d:b7:b5:bc:1a:45:f4:0d:73:37:
0c:74:3d:3a:c0:d5:65:7c:8b:79:e2:ed:d5:37:0b:
c0:76:66:51:bc:6c:1e:e6:c5:60:a2:83:9e:da:bc:
f2:5d:46:ca:29:36:ee:92:10:59:bf:54:93:2b:df:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:26:BA:74:A9:C1:00:82:0A:02:1A:89:86:BC:98:CD:F7:31:35
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:48:74:35:d5:23:a6:a6:6a:f4:d3:c8:11:df:fc:9a:82:cc:
1a:09:4e:d0:db:ee:85:7c:73:7d:3b:21:94:8a:18:44:69:d4:
df:06:47:58:ca:35:c3:ef:25:2f:3c:0b:2c:54:1d:27:70:0e:
9c:6a:03:ad:09:4b:e3:17:b1:0a:c9:38:72:94:b0:e6:15:e7:
6d:7c:ad:b2:9f:52:f1:88:e8:65:03:a0:f1:d0:de:f1:7c:d8:
f3:56:80:0d:48:bd:2b:c9:ac:de:5a:d8:62:f6:a9:96:25:1d:
3f:a0:78:52:b0:6a:75:33:1c:d4:a8:a1:5d:c8:35:af:02:57:
9d:ed:45:be:9d:d4:15:fd:2b:a3:7e:5e:ef:88:e4:65:8a:be:
a4:07:b4:d5:17:6d:79:c8:96:ce:7c:26:c6:49:56:48:3b:dc:
31:ea:05:e8:15:60:87:bc:05:7d:4f:39:02:60:be:6a:f0:c0:
4b:03:30:ab:5c:a5:29:42:81:7d:5a:54:1f:bd:db:b7:31:1e:
72:10:7b:1a:6a:36:e5:3e:02:7d:7b:f9:51:c1:7c:ef:8c:12:
85:64:83:8a:33:01:6e:1d:95:10:28:d9:ee:4d:6f:34:ed:08:
57:1f:21:5f:d0:f3:d4:3b:4d:0d:3c:2a:a4:a5:7e:52:9a:ba:
07:1a:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:33 2026 by rpki-client