
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File: qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier: x0nE7a6Vh3yj+zJVDH/xBhfJsBUwAbrS23WBABXOP0E=
Subject key identifier: 5C:55:AA:AB:A5:65:49:1A:6C:33:91:89:64:09:87:40:B4:04:66:FA
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer: /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial: 0B5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number: 0B42
Signing time: Wed 22 Jul 2026 19:37:47 +0000
Manifest this update: Wed 22 Jul 2026 19:37:46 +0000
Manifest next update: Wed 29 Jul 2026 19:37:46 +0000
Files and hashes: 1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: xlCzZnLun9lKKUQsmoVY7T2HFlCjElGAnORYvv7Gjko=)
2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: 06JDuEw0u9UTrCmVjHn/IvdBcebyeZXlu9hwRmQETbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2911 (0xb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Validity
Not Before: Jul 22 19:37:46 2026 GMT
Not After : Jul 29 19:37:46 2026 GMT
Subject: CN=6a611c0a-2622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:06:c0:6c:d9:ad:e2:7e:32:06:be:94:85:
32:e0:37:06:26:0c:39:8f:3b:11:ce:2f:15:ff:fc:
56:1b:cc:95:a1:db:93:30:8b:92:b0:54:99:09:af:
61:b5:d0:5e:d0:ad:ec:96:d6:bf:ab:29:c1:5e:d6:
ce:42:c8:1b:15:ef:4c:88:c7:86:44:b9:5f:31:05:
99:94:83:96:1a:5f:62:1c:fe:8b:57:41:3e:f6:38:
a0:eb:a2:bb:87:1d:01:4b:87:c5:2f:2f:d9:17:a2:
40:96:9a:10:d6:98:ff:8f:d5:d3:3d:cc:70:59:2d:
72:f4:0b:2a:51:1d:6b:02:40:21:74:2c:53:32:5f:
5d:6c:69:0a:64:8e:ec:e4:d9:10:4d:ce:05:75:49:
df:6a:fb:d5:59:d1:c3:0f:b4:89:4b:e2:ad:b7:97:
11:98:ef:a2:0c:d8:f7:53:7c:f9:5b:5a:2a:3b:e9:
00:09:91:85:cc:e1:9f:c6:53:30:64:e9:ba:82:d4:
63:8b:54:57:e0:68:3d:a1:ca:8f:84:b4:6a:ae:44:
84:7f:cf:38:8c:d4:8d:4a:63:50:f8:0d:ba:89:66:
bc:76:f4:e6:5b:99:96:57:7f:77:78:bc:2a:33:fe:
1f:6f:0f:82:5a:fa:64:e3:76:ff:3c:9a:f0:4e:7e:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:55:AA:AB:A5:65:49:1A:6C:33:91:89:64:09:87:40:B4:04:66:FA
X509v3 Authority Key Identifier:
keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:93:96:75:da:81:59:47:5e:a9:a4:9f:9d:04:87:0f:1e:76:
fe:08:2b:e5:24:43:53:8e:b6:9f:bd:b8:72:28:36:eb:46:8f:
5a:62:fd:50:b1:e4:42:c0:ef:9d:d4:78:2b:53:20:34:fc:ef:
f0:88:5d:ac:1b:7f:01:87:c7:6d:31:04:8f:f7:a7:44:df:f9:
f1:f4:58:01:6f:87:37:d1:eb:54:16:91:35:c3:bf:b7:7c:f5:
48:09:96:43:11:db:a0:50:0c:31:c1:e1:9d:4b:f2:fa:c0:03:
b8:0c:3f:71:31:ab:63:78:eb:51:56:5d:3c:83:03:d1:c8:01:
1e:62:ee:0a:59:3c:32:7d:d3:33:9b:69:34:96:5a:52:6c:d4:
90:8b:01:c8:90:e8:8f:61:5b:78:3a:d0:2b:c3:ef:8c:db:48:
2f:b3:fc:2a:8a:25:ae:ff:79:c0:74:2c:49:e2:bd:a3:bc:1e:
31:7a:f3:69:17:fe:c9:ec:0f:56:ca:63:49:64:da:70:4e:12:
d5:de:de:11:8f:ae:01:d7:24:98:69:dc:61:2b:87:04:04:d6:
58:8d:a1:da:c0:bd:52:56:d9:87:ec:fc:85:9e:d0:fe:06:da:
8e:b2:c0:bb:f3:37:8c:27:0d:8f:b8:56:5d:6a:81:c8:8c:b7:
7e:a9:20:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC
MkVCQkUxODgwHhcNMjYwNzIyMTkzNzQ2WhcNMjYwNzI5MTkzNzQ2WjAYMRYwFAYD
VQQDEw02YTYxMWMwYS0yNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAub4GwGzZreJ+Mga+lIUy4DcGJgw5jzsRzi8V//xWG8yVoduTMIuSsFSZCa9h
tdBe0K3slta/qynBXtbOQsgbFe9MiMeGRLlfMQWZlIOWGl9iHP6LV0E+9jig66K7
hx0BS4fFLy/ZF6JAlpoQ1pj/j9XTPcxwWS1y9AsqUR1rAkAhdCxTMl9dbGkKZI7s
5NkQTc4FdUnfavvVWdHDD7SJS+Ktt5cRmO+iDNj3U3z5W1oqO+kACZGFzOGfxlMw
ZOm6gtRji1RX4Gg9ocqPhLRqrkSEf884jNSNSmNQ+A26iWa8dvTmW5mWV393eLwq
M/4fbw+CWvpk43b/PJrwTn4sgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxVqqul
ZUkabDORiWQJh0C0BGb6MB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2
MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V
RXNXd0xQUy10VXF5Njc0WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKpOWddqBWUdeqaSfnQSHDx52/ggr5SRDU462n724cig260aPWmL9ULHkQsDv
ndR4K1MgNPzv8IhdrBt/AYfHbTEEj/enRN/58fRYAW+HN9HrVBaRNcO/t3z1SAmW
QxHboFAMMcHhnUvy+sADuAw/cTGrY3jrUVZdPIMD0cgBHmLuClk8Mn3TM5tpNJZa
UmzUkIsByJDoj2FbeDrQK8PvjNtIL7P8Koolrv95wHQsSeK9o7weMXrzaRf+yewP
VspjSWTacE4S1d7eEY+uAdckmGncYSuHBATWWI2h2sC9UlbZh+z8hZ7Q/gbajrLA
u/M3jCcNj7hWXWqByIy3fqkgUA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:51 2026 by rpki-client