
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json)
Hash identifier: KPNAKf9KzP8cuBMrw8MBC8NrIPtK4MAfewUnC94f5uE=
Subject key identifier: A4:99:20:5D:F6:94:8D:5F:78:55:54:98:C8:C6:A9:45:FC:42:80:62
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial: 026F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
Manifest number: 0268
Signing time: Wed 23 Sep 2026 01:59:31 +0000
Manifest this update: Wed 23 Sep 2026 01:59:30 +0000
Manifest next update: Wed 30 Sep 2026 01:59:30 +0000
Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: JzWqFf+gHNW378Tg6uBoE/b9ly4VDimgka+bE2Tl7Xk=)
2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Validity
Not Before: Sep 23 01:59:30 2026 GMT
Not After : Sep 30 01:59:30 2026 GMT
Subject: CN=6ab33283-b72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:11:0c:3e:92:04:de:0d:2a:91:de:18:a2:
bc:9a:24:9e:73:83:7d:b8:20:bd:04:4c:e3:57:e5:
18:b6:11:1c:08:ce:1d:56:1d:49:26:83:25:ed:ae:
e8:9b:f6:b3:17:86:34:5d:4a:9f:ab:c5:b7:fa:6b:
a8:8d:7f:92:ab:97:19:1d:c2:ba:b9:e7:7e:ec:84:
73:13:2b:91:8d:e5:5b:af:0c:23:45:c2:f3:72:6a:
0c:b7:8e:89:94:c6:8f:b0:2e:2d:bc:33:ff:e4:e9:
22:a3:29:23:7a:33:e0:78:97:c4:bc:fe:e9:3d:28:
0b:90:a5:7f:7a:e0:b4:0c:c9:2a:b4:e4:3c:79:31:
d3:e0:1f:d9:b9:2d:d8:34:e9:58:97:7b:8e:31:26:
19:4c:e1:b8:8b:df:96:21:8f:95:4b:04:5b:f6:d5:
c1:f5:a2:c9:97:bc:fe:50:27:f8:42:46:c3:a7:4a:
db:b2:d5:67:c0:9d:32:d7:4a:a6:23:4c:ad:2d:fd:
19:22:56:e7:be:be:83:66:41:c7:3d:97:6d:c8:b7:
b7:b4:7a:06:dd:b0:4f:22:a3:09:c9:6d:71:eb:14:
8b:c6:34:94:21:07:f9:67:d6:55:43:f2:24:64:48:
37:a8:a8:c1:de:7d:f1:69:4e:a1:23:6b:c2:b2:a3:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:99:20:5D:F6:94:8D:5F:78:55:54:98:C8:C6:A9:45:FC:42:80:62
X509v3 Authority Key Identifier:
keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:b5:44:a5:7e:41:01:0f:8b:e9:45:3a:21:d5:1a:d0:b1:f6:
db:c9:c1:2c:8d:cc:5c:db:88:bb:9d:36:17:70:b8:35:5c:c6:
5f:dd:3f:81:e1:10:a9:76:ee:5e:8b:88:76:d2:53:d5:06:b7:
dd:b3:19:41:04:8b:fd:48:d7:1e:f1:d3:99:6d:34:3f:d3:61:
5f:71:59:aa:ff:68:55:62:e2:fd:1c:58:0d:ec:33:66:95:24:
84:a2:e1:a8:4e:d7:85:f4:0c:59:e7:7d:e0:71:11:fa:65:85:
a7:bf:47:d7:af:eb:32:3a:5e:71:b1:30:08:65:74:97:e8:7c:
cb:8e:b3:fe:5b:09:6c:2c:67:ea:f3:55:fe:2f:b4:e8:34:d2:
54:7e:05:85:0e:3a:10:4d:79:c5:14:db:cf:be:be:0c:5f:23:
d8:0e:29:d6:4c:9b:72:35:7f:55:7a:6c:49:27:ef:08:66:c7:
7c:d4:df:8b:f8:66:df:ab:0d:e0:ee:7b:f8:f8:8e:e8:91:63:
da:fe:2d:18:fd:9e:e8:2f:de:f4:a2:36:fb:5b:49:02:19:81:
26:c4:7b:3c:e1:b3:3c:7f:02:6c:f8:3a:72:65:f5:68:7f:50:
bc:e4:92:cc:7a:08:31:a2:1d:5f:90:ea:06:91:09:65:fd:7d:
09:35:e2:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1
ODMzMjBEMTgwHhcNMjYwOTIzMDE1OTMwWhcNMjYwOTMwMDE1OTMwWjAYMRYwFAYD
VQQDEw02YWIzMzI4My1iNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu6URDD6SBN4NKpHeGKK8miSec4N9uCC9BEzjV+UYthEcCM4dVh1JJoMl7a7o
m/azF4Y0XUqfq8W3+muojX+Sq5cZHcK6ued+7IRzEyuRjeVbrwwjRcLzcmoMt46J
lMaPsC4tvDP/5OkioykjejPgeJfEvP7pPSgLkKV/euC0DMkqtOQ8eTHT4B/ZuS3Y
NOlYl3uOMSYZTOG4i9+WIY+VSwRb9tXB9aLJl7z+UCf4QkbDp0rbstVnwJ0y10qm
I0ytLf0ZIlbnvr6DZkHHPZdtyLe3tHoG3bBPIqMJyW1x6xSLxjSUIQf5Z9ZVQ/Ik
ZEg3qKjB3n3xaU6hI2vCsqMPXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSZIF32
lI1feFVUmMjGqUX8QoBiMB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC
QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH
STRYQjZEM1RlR05ZTXlEUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFrVEpX5BAQ+L6UU6IdUa0LH228nBLI3MXNuIu502F3C4NVzGX90/geEQqXbu
XouIdtJT1Qa33bMZQQSL/UjXHvHTmW00P9NhX3FZqv9oVWLi/RxYDewzZpUkhKLh
qE7XhfQMWed94HER+mWFp79H16/rMjpecbEwCGV0l+h8y46z/lsJbCxn6vNV/i+0
6DTSVH4FhQ46EE15xRTbz76+DF8j2A4p1kybcjV/VXpsSSfvCGbHfNTfi/hm36sN
4O57+PiO6JFj2v4tGP2e6C/e9KI2+1tJAhmBJsR7POGzPH8CbPg6cmX1aH9QvOSS
zHoIMaIdX5DqBpEJZf19CTXilQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:45:18 2026 by rpki-client