
$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier: hD1J1PEKhjcX94Hb9FkGnP2aKyJWey/KJvJwur1sXX8=
Subject key identifier: C8:8D:E6:58:12:0E:C2:33:12:A1:EF:67:BF:20:A6:04:4F:31:C9:6B
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial: 01D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number: 01BA
Signing time: Wed 29 Jul 2026 05:13:32 +0000
Manifest this update: Wed 29 Jul 2026 05:13:32 +0000
Manifest next update: Wed 05 Aug 2026 05:13:32 +0000
Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: 5G3fJJtal5Az7PMBbOouBqC++9Vn7PNRWXdNiwDOAlc=)
2: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: rKGQBFsWBoXRwkkEHmzJU4DziCIyRjQTWeYrnr/z7fc=)
3: 47142068221311EFB680F113C4F9AE02.roa (hash: R9+W9Vd8vNJv6BZYi/psQ14Bv23TuvOa9qtjBXGBpmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Validity
Not Before: Jul 29 05:13:32 2026 GMT
Not After : Aug 5 05:13:32 2026 GMT
Subject: CN=6a698bfc-4371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:4e:3b:86:88:54:36:7c:f4:f3:2f:3e:c0:
52:62:a8:35:0f:83:2c:8e:fa:b9:93:c0:d8:fb:56:
a9:ba:be:58:aa:cf:8e:32:f5:43:88:53:09:b8:20:
0e:31:fd:17:e4:90:ec:b1:43:51:a3:8f:d7:32:28:
dd:ab:99:34:0e:87:37:92:3d:c0:fa:14:b2:a4:9d:
ba:85:ed:f8:f5:09:b9:73:c7:05:81:4e:ff:a0:64:
eb:41:ab:da:f6:84:d6:f5:14:25:56:12:75:ab:42:
dd:22:0f:fe:0f:5b:85:81:5f:f1:12:3c:03:c3:6d:
18:dc:5a:69:fa:53:95:77:cc:4a:23:24:f7:3a:4b:
b5:be:88:08:21:84:bc:9b:29:58:8b:f8:ec:36:2e:
24:dd:ff:dc:13:0d:39:2a:3d:e9:02:46:60:46:13:
26:f5:11:96:4a:72:29:ec:71:2d:59:4c:56:8e:1b:
c1:fa:d9:e0:93:78:27:41:f0:ed:37:49:b3:03:0f:
e8:42:6e:fd:55:a3:ba:b7:57:2b:40:f1:5d:4e:53:
10:cd:6f:bf:20:bf:4b:5e:e8:5e:9e:88:23:a6:cc:
ea:44:6e:52:06:5e:aa:eb:de:ab:52:d4:85:04:5c:
64:2a:60:66:36:b5:5e:76:cd:5b:52:55:00:b9:a1:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8D:E6:58:12:0E:C2:33:12:A1:EF:67:BF:20:A6:04:4F:31:C9:6B
X509v3 Authority Key Identifier:
keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:03:46:76:25:25:af:d0:db:11:ca:8c:46:37:13:0e:db:ba:
89:9b:ec:8f:62:d3:e3:f8:53:54:75:f6:4c:1c:ff:ce:ec:84:
b8:39:3f:ad:3e:c7:ec:f6:7c:da:0e:64:d5:8d:5d:ca:d8:c0:
2b:75:0f:99:66:59:68:0f:34:ae:4f:ea:b3:c0:44:08:9b:8a:
db:2c:c8:40:bb:58:aa:22:5c:74:bb:c3:7f:c8:72:59:b4:58:
94:a0:59:c0:42:f6:b2:b1:fc:8e:e1:66:b4:82:f7:9b:c4:ee:
5b:54:c2:69:2e:1b:7f:4f:c3:b2:86:4b:e0:94:36:47:4d:cd:
87:ed:a5:1a:a6:46:22:a9:92:a7:d4:1d:db:62:97:a6:49:59:
e4:ce:2d:55:d5:02:40:72:13:99:70:75:b9:c7:a3:56:13:f1:
ff:52:be:f3:fb:ad:f2:6d:6d:9a:91:e9:e5:85:2a:89:86:ce:
a3:7c:ed:ab:a3:ee:aa:1d:ca:5a:b8:b0:e8:ac:9f:e1:0a:17:
3a:d2:f8:6d:7a:dd:10:f7:dc:27:c1:4c:fb:77:fa:3b:8b:07:
9b:9a:7a:0f:3f:11:1e:f7:fb:5d:b4:42:96:bb:57:38:e2:2e:
2c:a9:16:95:bd:7b:d7:c3:5b:72:e6:da:9b:e2:47:14:ed:12:
06:40:1c:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2
NDAyRkVCNjkwHhcNMjYwNzI5MDUxMzMyWhcNMjYwODA1MDUxMzMyWjAYMRYwFAYD
VQQDEw02YTY5OGJmYy00MzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7NOO4aIVDZ89PMvPsBSYqg1D4Msjvq5k8DY+1apur5Yqs+OMvVDiFMJuCAO
Mf0X5JDssUNRo4/XMijdq5k0Doc3kj3A+hSypJ26he349Qm5c8cFgU7/oGTrQava
9oTW9RQlVhJ1q0LdIg/+D1uFgV/xEjwDw20Y3Fpp+lOVd8xKIyT3Oku1vogIIYS8
mylYi/jsNi4k3f/cEw05Kj3pAkZgRhMm9RGWSnIp7HEtWUxWjhvB+tngk3gnQfDt
N0mzAw/oQm79VaO6t1crQPFdTlMQzW+/IL9LXuhenogjpszqRG5SBl6q696rUtSF
BFxkKmBmNrVeds1bUlUAuaGyowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMiN5lgS
DsIzEqHvZ78gpgRPMclrMB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy
RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm
d3lqc1AwNlYxWWhrQXY2MmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARwNGdiUlr9DbEcqMRjcTDtu6iZvsj2LT4/hTVHX2TBz/zuyEuDk/rT7H7PZ8
2g5k1Y1dytjAK3UPmWZZaA80rk/qs8BECJuK2yzIQLtYqiJcdLvDf8hyWbRYlKBZ
wEL2srH8juFmtIL3m8TuW1TCaS4bf0/DsoZL4JQ2R03Nh+2lGqZGIqmSp9Qd22KX
pklZ5M4tVdUCQHITmXB1ucejVhPx/1K+8/ut8m1tmpHp5YUqiYbOo3ztq6Puqh3K
Wriw6Kyf4QoXOtL4bXrdEPfcJ8FM+3f6O4sHm5p6Dz8RHvf7XbRClrtXOOIuLKkW
lb1718Nbcubam+JHFO0SBkAcNw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:45 2026 by rpki-client