
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier: EV9G711nUiUWN0an7v6QFWeCY3y+s6sFAiYrjQ0WXKI=
Subject key identifier: 71:BC:A9:7F:29:01:B7:0E:F5:E4:80:11:5C:42:0A:74:3B:26:36:8F
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 19DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number: 1999
Signing time: Wed 22 Jul 2026 16:30:36 +0000
Manifest this update: Wed 22 Jul 2026 16:30:36 +0000
Manifest next update: Wed 29 Jul 2026 16:30:36 +0000
Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: nctgLex2+TNcnpkzpd0sd5V7RSDDDIigY356dZ+IIN0=)
2: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
3: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
4: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6620 (0x19dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Jul 22 16:30:36 2026 GMT
Not After : Jul 29 16:30:36 2026 GMT
Subject: CN=6a60f02c-965f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:61:bd:fd:e6:03:5c:9c:40:cc:da:1b:20:
f5:da:79:9d:dc:63:14:04:cf:a0:4a:44:7b:b5:1f:
7c:1f:5d:ed:65:a8:a0:4f:1a:76:8e:99:20:7f:b7:
75:5d:96:59:bb:e5:ac:56:bf:ad:72:1c:0d:73:3b:
d7:60:db:d4:ce:bf:e2:74:5b:45:18:fd:49:7d:72:
ef:6f:26:e4:97:a0:aa:08:c4:30:2e:2a:68:eb:67:
09:f5:b2:55:81:3d:12:13:95:45:92:24:14:e6:c6:
69:91:6e:2d:e5:d1:70:56:c3:48:53:0a:d6:69:c1:
48:d4:6d:bf:0b:54:24:80:ce:7a:53:eb:f3:5c:21:
0b:a1:13:8f:09:34:74:5a:2a:ba:84:d9:e5:b7:c6:
b9:e1:d8:26:2c:68:0a:cb:2a:84:f1:72:d9:aa:58:
0f:c6:36:10:9a:3b:7d:9c:12:65:ef:41:84:be:8b:
8d:51:25:7e:67:c7:e2:1b:c6:24:35:b0:d8:61:e7:
6b:10:b7:e3:b2:bf:d6:6c:ed:3f:d3:01:50:9d:97:
0e:9a:62:3a:88:fb:fe:37:79:dc:57:a9:3b:e9:93:
f7:0f:ac:66:3c:48:d9:5e:37:74:e2:ff:fc:2a:0c:
73:21:d2:61:26:f3:c7:d5:08:76:68:3c:12:7f:26:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:A9:7F:29:01:B7:0E:F5:E4:80:11:5C:42:0A:74:3B:26:36:8F
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:87:3d:eb:44:a9:88:f1:bd:21:d3:7d:0c:f7:61:27:0b:4b:
e7:55:2e:df:67:e5:74:c9:a2:11:69:8c:ef:a5:d9:2f:2c:07:
80:73:fc:7d:be:29:e9:10:a6:ca:f3:58:c1:cb:c6:f2:65:08:
93:5d:1b:d3:7e:49:64:22:bc:8e:5e:28:bd:65:33:32:07:82:
d2:51:9b:3c:77:8a:b0:03:d1:d2:6d:f3:e4:f3:4b:4e:bd:07:
41:26:fb:08:fc:38:12:8a:a6:3c:45:26:72:04:ec:ac:56:6c:
31:63:5b:19:7f:3c:58:95:b6:38:ca:24:9c:3a:e1:c7:64:fa:
7d:45:9f:ea:7e:1d:3e:2f:5f:93:45:60:28:2e:b9:7a:52:14:
8d:41:59:1b:75:fc:31:3c:d8:c9:b5:cb:17:19:43:aa:62:6c:
32:68:e3:f0:62:53:f5:59:fe:5b:4c:e7:51:65:d7:7c:be:30:
ec:47:93:30:95:d6:f7:a9:41:5f:ad:03:f5:76:ee:8e:9c:09:
af:b5:9a:93:40:63:99:9c:75:46:7e:e2:d2:0d:58:2e:fb:30:
35:81:a1:0d:7f:ff:c1:6e:22:c6:25:05:13:9a:25:23:f8:25:
59:c4:b5:44:49:8a:dd:d1:d5:2f:9d:02:10:11:bb:95:f5:b6:
20:13:f4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:56 2026 by rpki-client