
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
File: QLjSLvI7N7C55T88ThDWrj64qZ8.mft (raw, json)
Hash identifier: 1axs5/EUjOLhtnLGwpg1jDICJXsyYuLs/2Hk2MiFPt8=
Subject key identifier: 61:07:79:35:42:EE:1F:47:0D:AD:DD:AA:F9:FF:41:BB:67:EA:46:80
Authority key identifier: 40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
Certificate issuer: /CN=A91E689D/serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Certificate serial: 356B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
Manifest number: 3563
Signing time: Wed 22 Jul 2026 15:03:37 +0000
Manifest this update: Wed 22 Jul 2026 15:03:37 +0000
Manifest next update: Wed 29 Jul 2026 15:03:37 +0000
Files and hashes: 1: QLjSLvI7N7C55T88ThDWrj64qZ8.crl (hash: hBGJRg92NrocpT5M9XJe2K7M8TX5e0eAuF7MsWlKcog=)
2: 3773AC0C8B6111EFA3A49037C4F9AE02.roa (hash: uzaZKpbjTrWsFfOiIa8WfR03ueqsK9oa9a46XDa7tCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13675 (0x356b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E689D, serialNumber=40B8D22EF23B37B0B9E53F3C4E10D6AE3EB8A99F
Validity
Not Before: Jul 22 15:03:37 2026 GMT
Not After : Jul 29 15:03:37 2026 GMT
Subject: CN=6a60dbc9-4167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:95:d6:eb:dc:2d:72:4d:6e:39:79:5a:19:
4c:5b:50:20:a8:3f:84:d3:1f:15:4e:62:a8:96:d9:
1f:8b:e6:88:fe:ce:1d:81:0a:f7:3b:33:1c:a4:11:
ee:1e:31:2b:5d:b6:6c:c3:1c:27:ad:16:2a:0f:d6:
f4:90:73:cc:7d:cc:5e:a7:e4:70:dd:aa:36:65:60:
0a:18:91:7d:c6:16:a9:1a:c4:21:c8:5b:12:4c:af:
66:53:be:3d:a0:67:42:3e:f5:62:41:5d:7f:f3:29:
1f:a3:3c:bd:67:bb:3f:08:14:22:74:ee:62:8c:d5:
ba:d8:95:15:36:98:68:43:c2:1d:81:e4:d1:61:70:
40:35:cb:36:cc:0d:e3:f3:3e:8d:d9:0d:50:da:54:
6e:b4:25:5e:81:a8:ee:5f:ce:47:51:2a:a5:b5:3d:
c1:21:98:27:6f:f7:4a:01:c2:23:e1:c2:c1:5f:67:
6a:fa:20:3a:56:ff:c8:43:52:1b:4a:e4:e1:0c:36:
fb:e0:54:16:ed:2a:2c:f8:9f:27:3b:2c:79:a6:78:
7d:21:aa:b1:a5:9f:f9:42:e5:8c:58:27:f5:0b:53:
0b:ea:7d:22:03:94:7e:ce:49:85:d1:5d:34:f4:74:
b2:2b:22:80:f6:b2:3c:7b:d7:af:88:f8:87:5d:2c:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:07:79:35:42:EE:1F:47:0D:AD:DD:AA:F9:FF:41:BB:67:EA:46:80
X509v3 Authority Key Identifier:
keyid:40:B8:D2:2E:F2:3B:37:B0:B9:E5:3F:3C:4E:10:D6:AE:3E:B8:A9:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLjSLvI7N7C55T88ThDWrj64qZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E689D/C7C63DA81D9E11E283CEFA8E08B02CD2/QLjSLvI7N7C55T88ThDWrj64qZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:22:4a:43:45:aa:66:05:09:cf:bc:5a:7a:92:62:05:23:a9:
d1:92:83:8a:b4:bc:58:1b:d6:71:8f:f2:e4:6e:68:be:ea:a1:
1c:b4:0b:b8:d9:bd:57:b4:f0:90:fe:30:77:fa:48:39:3f:e1:
8a:2c:74:5a:e7:28:d3:31:07:00:82:cf:a7:1a:a3:0d:d6:51:
1c:fe:3c:63:eb:4c:7e:aa:5b:c8:6c:ec:6f:5f:47:77:a1:47:
d7:87:34:de:19:33:95:a7:c3:29:ed:21:58:96:6e:28:18:3d:
9f:6c:df:9c:98:d9:05:cb:0b:07:c4:3b:f8:86:87:f4:73:7a:
e0:17:be:27:75:16:d4:ca:61:de:5c:94:d4:92:34:58:64:1e:
fb:40:82:d2:65:71:71:80:d7:ff:dd:8e:ad:bd:3c:20:37:27:
39:bd:a3:e7:bc:2b:94:ce:d9:9d:ba:10:6c:a3:64:fb:0b:ea:
ff:95:b2:4f:b4:46:b8:0d:e4:c3:2c:b9:bc:0c:47:6d:2d:e7:
d1:89:7d:3a:2e:26:13:aa:a6:c9:54:0a:be:04:b7:5a:3b:1d:
b4:5e:00:4c:3d:75:8e:74:26:10:06:fd:00:ed:22:10:81:89:
74:97:cf:1e:5c:92:d8:f3:d4:d0:6e:72:2d:df:ef:52:c8:d8:
71:d1:28:b9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTY4OUQxMTAvBgNVBAUTKDQwQjhEMjJFRjIzQjM3QjBCOUU1M0YzQzRFMTBENkFF
M0VCOEE5OUYwHhcNMjYwNzIyMTUwMzM3WhcNMjYwNzI5MTUwMzM3WjAYMRYwFAYD
VQQDEw02YTYwZGJjOS00MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArCuV1uvcLXJNbjl5WhlMW1AgqD+E0x8VTmKoltkfi+aI/s4dgQr3OzMcpBHu
HjErXbZswxwnrRYqD9b0kHPMfcxep+Rw3ao2ZWAKGJF9xhapGsQhyFsSTK9mU749
oGdCPvViQV1/8ykfozy9Z7s/CBQidO5ijNW62JUVNphoQ8IdgeTRYXBANcs2zA3j
8z6N2Q1Q2lRutCVegajuX85HUSqltT3BIZgnb/dKAcIj4cLBX2dq+iA6Vv/IQ1Ib
SuThDDb74FQW7Sos+J8nOyx5pnh9IaqxpZ/5QuWMWCf1C1ML6n0iA5R+zkmF0V00
9HSyKyKA9rI8e9eviPiHXSyliQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGEHeTVC
7h9HDa3dqvn/Qbtn6kaAMB8GA1UdIwQYMBaAFEC40i7yOzewueU/PE4Q1q4+uKmf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg5RC9DN0M2M0RBODFE
OUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043QzU1VDg4VGhEV3JqNjRx
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FMalNMdkk3TjdDNTVUODhUaERXcmo2NHFaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Njg5RC9DN0M2M0RBODFEOUUxMUUyODNDRUZBOEUwOEIwMkNEMi9RTGpTTHZJN043
QzU1VDg4VGhEV3JqNjRxWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFSJKQ0WqZgUJz7xaepJiBSOp0ZKDirS8WBvWcY/y5G5ovuqhHLQLuNm9V7Tw
kP4wd/pIOT/hiix0Wuco0zEHAILPpxqjDdZRHP48Y+tMfqpbyGzsb19Hd6FH14c0
3hkzlafDKe0hWJZuKBg9n2zfnJjZBcsLB8Q7+IaH9HN64Be+J3UW1Mph3lyU1JI0
WGQe+0CC0mVxcYDX/92Orb08IDcnOb2j57wrlM7ZnboQbKNk+wvq/5WyT7RGuA3k
wyy5vAxHbS3n0Yl9Oi4mE6qmyVQKvgS3WjsdtF4ATD11jnQmEAb9AO0iEIGJdJfP
HlyS2PPU0G5yLd/vUsjYcdEouQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:52 2026 by rpki-client