
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json)
Hash identifier: y2ercAp9CmXoCi7JtEqYpooDMddTYBECvYbuKhXz6n8=
Subject key identifier: D6:92:71:AA:80:82:8F:30:32:D3:13:B4:88:D5:16:4F:79:90:5B:0A
Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Certificate serial: 3566
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
Manifest number: 3566
Signing time: Tue 28 Jul 2026 14:39:36 +0000
Manifest this update: Tue 28 Jul 2026 14:39:36 +0000
Manifest next update: Tue 04 Aug 2026 14:39:36 +0000
Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: 8q7WVAgsCHzya8fccnm23/43LBNGTDpsoXtCvIOIouc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13670 (0x3566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Validity
Not Before: Jul 28 14:39:36 2026 GMT
Not After : Aug 4 14:39:36 2026 GMT
Subject: CN=6a68bf28-310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:fd:51:fb:db:20:21:1e:ba:41:9d:70:22:
28:dd:0a:07:70:ac:ee:09:30:f7:ba:c0:cf:d1:fb:
08:5a:85:56:0c:5f:31:89:a3:1b:79:14:e1:6c:a5:
4e:52:70:f3:ae:e2:76:c5:70:d9:3a:49:40:61:8d:
63:60:bd:ad:db:0d:c0:8b:87:48:a0:23:d7:3e:2b:
a1:46:d5:33:d9:42:10:0d:fa:b1:a8:d5:c0:68:5d:
7e:3e:d4:86:43:6f:6d:e0:26:98:6c:87:53:f0:99:
db:58:6c:f6:10:74:bc:b4:12:98:1c:11:5b:90:fb:
e4:ef:17:fe:fa:ca:f1:30:33:17:d1:62:35:78:5c:
39:4f:27:fd:df:c1:1e:88:0a:a0:19:10:58:e6:c1:
97:33:a4:f3:3b:a7:50:f4:f8:64:4d:cb:eb:4c:9a:
0b:96:f7:1c:5c:73:2c:1f:a8:06:99:d6:f9:b9:26:
d3:d0:68:92:bf:fa:3e:93:9b:f0:33:f9:6c:b4:ea:
a8:01:95:b8:e3:83:95:73:af:a9:7d:9e:e9:fb:22:
03:ee:c4:aa:b7:dc:55:4c:bf:68:1c:3e:b5:fd:0a:
53:8e:95:ad:58:6d:b4:85:ca:2d:ad:75:6f:f0:80:
46:c2:00:38:38:88:25:cb:7a:3c:d9:70:d1:d8:11:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:92:71:AA:80:82:8F:30:32:D3:13:B4:88:D5:16:4F:79:90:5B:0A
X509v3 Authority Key Identifier:
keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ba:e0:5f:b0:cb:20:79:bd:ac:ef:40:bf:e9:36:34:a9:2d:
94:72:3f:97:22:f8:f1:e2:f9:ab:15:8b:58:59:2f:75:19:c4:
7d:ae:eb:5a:53:e9:b0:d1:c0:99:d1:91:af:1e:2a:a2:65:ce:
55:9d:1a:44:72:75:35:c7:64:f6:f1:36:4e:87:de:15:59:1b:
1b:af:7e:f6:6b:88:d9:45:07:af:ad:c1:2c:fa:9f:60:81:21:
74:d8:43:66:84:66:2f:09:24:57:89:9d:40:06:20:a6:64:bd:
f3:1e:aa:bc:8d:e2:44:17:02:18:a6:b6:3d:c3:01:24:e3:ba:
23:72:f6:de:3b:26:88:7c:7f:0c:3e:4d:11:71:79:08:50:bd:
54:f5:06:74:01:8f:a8:f7:7b:e8:88:c7:6a:c2:34:60:63:02:
ba:60:fd:00:98:8d:5b:80:6e:c6:77:59:e9:60:9c:e8:27:e7:
17:a9:8d:35:27:ea:60:ef:d9:d9:60:81:f5:e2:e3:de:da:2e:
b2:2d:50:91:5b:ab:43:39:29:14:5b:44:d7:80:08:84:8d:10:
f8:9c:b7:9b:dc:ba:b8:9e:0a:40:a2:4b:c0:5a:1a:8d:d6:8e:
6a:dd:f9:05:0c:36:96:60:4c:b9:e2:7e:40:c5:14:a6:fd:0d:
12:0a:f0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:58 2026 by rpki-client