
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier: smfVNZ/bxuOEnx748qbaflwyEhR8RyldSxDuPhNF6lo=
Subject key identifier: 26:41:15:7C:31:C7:DF:AF:FD:41:F4:0F:D6:2F:C0:B1:F3:4A:0C:FB
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 19FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number: 19BB
Signing time: Sat 26 Sep 2026 16:27:06 +0000
Manifest this update: Sat 26 Sep 2026 16:27:05 +0000
Manifest next update: Sat 03 Oct 2026 16:27:05 +0000
Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: 4rAl/oIc4q8xcitDzAnW7DwhTPyKR6BJ4V0dyebEtLo=)
2: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
3: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
4: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6654 (0x19fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Sep 26 16:27:05 2026 GMT
Not After : Oct 3 16:27:05 2026 GMT
Subject: CN=6ab7f25a-55b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:62:9e:67:4c:6d:e3:d9:26:c7:36:22:e1:
a1:dc:a5:5d:d9:0a:85:aa:0b:da:e2:c2:ed:8d:d2:
ce:01:9a:60:13:d5:30:9c:2b:7d:67:54:1e:5b:6d:
ad:66:c7:74:e0:69:55:eb:4d:ea:b2:0e:e2:d1:df:
97:9e:62:25:83:f4:d8:ba:a3:5a:a4:05:0d:52:54:
b9:5b:13:f2:78:50:0f:66:e9:40:73:0c:fa:71:9d:
57:e1:5b:e3:95:6d:8b:4c:28:8b:9a:e8:bf:c8:4e:
6d:b0:ee:5d:6b:c8:37:be:6d:42:83:29:b0:7b:8b:
ef:8b:57:a5:82:d2:4c:60:a5:fe:48:a7:1f:7a:87:
51:37:c6:96:04:d3:8d:07:95:0d:cb:d1:7f:35:2c:
42:d6:bc:e2:9c:8a:74:c8:f4:b8:c4:bd:a8:d0:50:
4e:07:9e:35:f7:85:09:19:f9:a4:26:76:de:ce:4f:
5a:9a:70:10:1f:78:77:76:c5:86:46:15:79:65:1d:
99:c1:92:a6:8f:ce:2e:a3:59:b4:45:4c:8f:76:09:
84:14:51:1a:e6:28:84:45:0e:fa:ec:72:f5:8f:6c:
ba:71:8b:a7:83:3b:0c:ff:74:93:89:92:28:35:74:
61:5a:87:05:87:9a:0b:99:84:aa:db:92:1e:4c:f2:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:41:15:7C:31:C7:DF:AF:FD:41:F4:0F:D6:2F:C0:B1:F3:4A:0C:FB
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8a:21:3d:ad:2d:c6:c7:88:05:15:05:ec:77:e3:7f:53:ca:
cd:29:b2:1c:d1:39:62:93:61:d3:b4:51:6a:8b:19:56:53:c6:
63:83:d6:ae:18:44:98:f0:77:aa:2e:46:b5:cc:df:92:d0:d2:
44:f9:93:77:15:5f:c5:53:e2:25:b0:00:f1:af:e9:e7:9d:ce:
95:2e:df:f4:0a:ec:db:9f:d5:d0:65:e0:66:d3:f1:48:88:f1:
49:f3:d1:3d:cd:d6:64:70:de:56:0c:1d:1f:60:b1:ec:fe:3f:
c0:fe:13:c9:97:b4:90:6b:ff:4b:33:b2:ab:cb:41:12:17:e4:
55:13:b2:16:80:e3:fe:4f:c4:b5:0c:4b:5a:ce:0a:b7:68:32:
71:cf:b9:af:5e:0c:a3:7b:52:4d:b3:ef:3d:b0:ba:56:01:0d:
bb:06:fd:6f:35:2d:dd:eb:0b:70:4b:b9:2b:83:cd:5e:75:47:
c3:8c:94:37:2e:5d:cd:ab:0f:c2:f5:1b:5d:0b:46:3a:2d:dd:
95:8a:6b:dd:ec:59:ac:92:34:63:d1:5e:3f:c9:fe:44:00:84:
b7:3b:19:4d:53:87:ef:4e:7c:26:68:6d:ea:a0:a3:11:88:36:
e8:15:2c:40:3e:cd:ae:11:65:98:bd:5c:1b:40:4b:18:ba:a4:
72:90:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:18:11 2026 by rpki-client