
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier: g76DgxH/CC4rsJ5lCYsLigYaaRPdI7e+o45bsgvpqsU=
Subject key identifier: 00:67:46:E6:97:77:42:52:D4:D4:D2:1C:C7:6D:46:4F:5A:DC:12:AB
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial: 069F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number: 069F
Signing time: Mon 02 Mar 2026 01:13:02 +0000
Manifest this update: Mon 02 Mar 2026 01:13:01 +0000
Manifest next update: Mon 09 Mar 2026 01:13:01 +0000
Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: lJ7Ruj7Se38hwbLArDHk30EJI3uWJbm5WqBugyAYbC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1695 (0x69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Validity
Not Before: Mar 2 01:13:01 2026 GMT
Not After : Mar 9 01:13:01 2026 GMT
Subject: CN=69a4e41e-56a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:94:81:d3:63:41:ae:54:39:57:20:43:b7:63:
74:98:a9:c0:c2:c0:2f:cc:f2:bc:f7:4e:e8:14:a9:
3a:61:f4:8f:70:ea:1a:3a:6f:7d:29:e7:04:d2:fe:
64:b0:bd:c8:51:6f:c2:d2:45:8c:89:fd:f2:74:ab:
19:6a:ab:44:d0:36:de:e9:d9:a7:82:dd:81:95:15:
4f:29:53:6f:51:57:73:84:bb:fb:1e:b4:65:b9:24:
8f:a8:cc:e1:0b:e9:5a:6d:fc:64:d0:74:29:bb:ce:
e8:51:85:5d:b7:77:4f:79:05:d0:ee:88:31:91:42:
e1:1c:6a:f1:99:97:74:b9:61:54:8b:8b:76:e2:8e:
b6:79:ce:5d:9d:d6:87:c8:15:af:9d:08:cb:a9:17:
6b:be:d6:21:2b:bc:90:fb:3a:b8:1a:b0:24:fa:f7:
aa:db:75:e4:e0:52:67:6a:53:ff:48:ba:48:0c:ac:
86:a7:42:3c:03:be:46:02:44:28:a9:1e:e7:b3:46:
5f:40:cc:f7:43:0b:6a:13:39:1b:39:3a:d1:82:c1:
0b:2c:96:23:5f:94:2b:f6:cb:45:fa:28:00:14:ee:
93:53:8c:5d:18:1c:d8:ee:c3:0b:37:32:0f:3e:70:
39:f5:6b:12:f4:3c:1b:12:dc:c9:84:62:7e:b0:95:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:67:46:E6:97:77:42:52:D4:D4:D2:1C:C7:6D:46:4F:5A:DC:12:AB
X509v3 Authority Key Identifier:
keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:a5:1f:5f:36:ff:e1:a4:73:db:ad:be:09:76:d6:c0:8f:d5:
9d:2b:89:7a:1f:0d:07:58:98:f0:01:38:32:1a:c5:01:20:ca:
f9:2e:a1:b5:87:df:99:7c:20:c8:41:f4:ca:65:fa:b1:f3:b9:
4d:1f:d8:0e:4e:0b:c1:93:93:4c:7a:a3:7d:fe:70:c5:07:2c:
57:14:3f:b0:5d:93:d0:51:ca:1a:a6:95:fc:43:b0:4e:8e:25:
af:bd:1c:d3:5c:ad:f2:d1:b9:8f:56:38:52:c6:4d:57:a6:f4:
c3:61:fb:8f:66:83:ec:fa:b8:50:e6:d6:fa:60:94:33:61:95:
7c:6f:04:d5:6a:61:18:0a:8e:d4:74:97:a9:77:68:ec:68:75:
d0:ee:c5:ed:d5:b4:f5:a4:b2:b5:d0:4d:36:8b:1f:6d:b0:4c:
2a:2f:b2:85:58:0d:1e:0b:4e:4c:f7:d5:aa:55:c7:a0:ed:a6:
73:1b:2e:c1:25:a9:79:4d:37:7d:75:85:32:68:b4:59:16:4e:
38:33:e4:1a:60:4c:7b:4c:11:8f:ec:45:53:36:64:f3:c0:a5:
6b:71:01:64:8b:e6:5a:d8:1d:17:7d:a2:bb:fa:57:b3:88:36:
98:9c:21:5b:c0:ab:b9:22:d6:cd:ff:d6:56:4c:9a:e4:cb:10:
84:38:cf:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB
QkVFMENCOUUwHhcNMjYwMzAyMDExMzAxWhcNMjYwMzA5MDExMzAxWjAYMRYwFAYD
VQQDEw02OWE0ZTQxZS01NmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ZSB02NBrlQ5VyBDt2N0mKnAwsAvzPK8907oFKk6YfSPcOoaOm99KecE0v5k
sL3IUW/C0kWMif3ydKsZaqtE0Dbe6dmngt2BlRVPKVNvUVdzhLv7HrRluSSPqMzh
C+labfxk0HQpu87oUYVdt3dPeQXQ7ogxkULhHGrxmZd0uWFUi4t24o62ec5dndaH
yBWvnQjLqRdrvtYhK7yQ+zq4GrAk+veq23Xk4FJnalP/SLpIDKyGp0I8A75GAkQo
qR7ns0ZfQMz3QwtqEzkbOTrRgsELLJYjX5Qr9stF+igAFO6TU4xdGBzY7sMLNzIP
PnA59WsS9DwbEtzJhGJ+sJVpOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABnRuaX
d0JS1NTSHMdtRk9a3BKrMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6
MHk3cURzY0dZQ2lyN2d5NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkqUfXzb/4aRz262+CXbWwI/VnSuJeh8NB1iY8AE4MhrFASDK+S6htYffmXwg
yEH0ymX6sfO5TR/YDk4LwZOTTHqjff5wxQcsVxQ/sF2T0FHKGqaV/EOwTo4lr70c
01yt8tG5j1Y4UsZNV6b0w2H7j2aD7Pq4UObW+mCUM2GVfG8E1WphGAqO1HSXqXdo
7Gh10O7F7dW09aSytdBNNosfbbBMKi+yhVgNHgtOTPfVqlXHoO2mcxsuwSWpeU03
fXWFMmi0WRZOODPkGmBMe0wRj+xFUzZk88Cla3EBZIvmWtgdF32iu/pXs4g2mJwh
W8CruSLWzf/WVkya5MsQhDjPng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:02 2026 by rpki-client