
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: KinxfkhK2MMhJCW8pnpfznYLv+y9H5tT0BJ3aP12IIY=
Subject key identifier: 72:9C:09:A7:D2:B1:5E:B2:4D:38:87:AC:D0:E8:53:69:EB:22:E7:B7
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 0187
Signing time: Mon 11 May 2026 04:43:08 +0000
Manifest this update: Mon 11 May 2026 04:43:08 +0000
Manifest next update: Mon 18 May 2026 04:43:08 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: Cq7nMPPr9tEiwfkqzDyuiJ2GU1Ty0IVfpyiPD9LGDNQ=)
2: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: tpEbntANqqH62uyg72ojsNyUatPaZSI32JfG1Q2fADg=)
3: B1F23610923B11F084052A57C4F9AE02.roa (hash: YSb0tSwa/5ouwveWRMPrFfSh8tKVPTJV0n6+IuBaWyE=)
4: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: Ps4zTjFyLHJz+OVkfNbIpcjmNwEHH47lDT8mzreZ++U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: May 11 04:43:08 2026 GMT
Not After : May 18 04:43:08 2026 GMT
Subject: CN=6a015e5c-9d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:08:cf:38:08:ac:69:01:a4:db:b4:fe:81:
59:6a:ae:d0:34:65:fb:8e:6e:0f:aa:7d:e6:2d:2a:
6e:89:b3:c7:3d:d4:72:95:fc:80:fe:a5:2f:1e:21:
45:2f:3e:d6:a7:4e:54:7b:94:e0:dc:12:e5:eb:3a:
26:b2:c6:cb:f9:4a:e0:f7:52:03:91:a3:5c:d7:72:
f9:e5:6c:0d:7f:fa:b8:42:08:bb:fa:51:c1:8f:c8:
8e:96:50:39:57:7f:22:11:61:f8:fb:76:ea:b2:17:
36:f1:be:36:e5:b6:df:43:a8:44:dd:bc:79:15:4f:
0a:51:3b:47:14:99:57:0d:00:ed:45:11:84:fd:af:
a7:cf:01:52:64:78:c7:59:a4:b2:4a:41:ae:00:94:
00:56:59:74:fe:ff:0d:78:e2:d4:db:6e:95:60:ba:
92:15:37:f4:51:1c:9a:aa:d1:ed:4a:d4:8f:df:08:
eb:56:20:72:4a:54:31:52:64:e6:86:54:21:db:42:
63:ab:82:d3:ce:43:05:88:ab:68:72:57:72:b2:4e:
7a:8b:24:fc:01:ed:bf:6e:9d:e3:d1:5c:7e:f5:c2:
29:8f:03:b4:2d:a0:be:07:f2:a2:c5:e4:01:fa:09:
99:0c:4e:34:ff:b5:eb:4e:07:bb:0d:77:22:64:ee:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9C:09:A7:D2:B1:5E:B2:4D:38:87:AC:D0:E8:53:69:EB:22:E7:B7
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d1:77:6c:24:87:f7:5b:b1:26:96:e2:79:6f:94:9e:16:91:
64:2b:9a:2a:bc:ef:6c:ea:da:f3:22:c8:b9:09:ed:e4:47:e0:
50:39:f9:64:5b:e3:02:a0:70:e3:87:ba:65:94:c1:78:04:bf:
4a:7c:13:e0:f2:c5:cf:1d:2b:6a:17:cb:b5:00:d0:da:b6:9a:
eb:22:5f:e0:66:25:8b:10:f7:b0:d6:97:ce:ad:98:fa:2c:5b:
20:9b:55:e9:34:ec:a5:5e:2b:aa:0a:14:00:86:8c:8f:45:9b:
05:29:21:70:d7:e3:26:11:34:ac:00:2e:c3:66:06:9d:8d:19:
3f:27:ab:87:bc:86:39:9e:ff:fc:40:f8:77:d3:c3:bd:59:ad:
5d:3f:f8:d6:8f:8d:16:f3:d8:03:99:68:c4:8b:1a:fe:e5:8e:
f0:d3:5b:14:01:7e:5e:b0:a2:29:9e:ae:d3:87:d0:b4:26:83:
23:e3:33:c1:d2:a6:f6:d5:fe:91:08:65:66:9d:25:e7:e6:36:
bb:29:d5:e0:11:22:e5:11:29:3d:fb:5e:d6:c9:5b:22:4d:01:
30:8d:0c:04:14:62:47:48:8f:c0:37:0a:15:bd:3f:c4:75:89:
59:72:19:3f:1e:56:bb:b8:20:8c:7d:91:47:b7:ad:0f:f7:7a:
62:c9:7c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:30 2026 by rpki-client