
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json)
Hash identifier: a79loZRUaFaXIa4zhiGeGJDjApI+/nXWujrHfwqlTCI=
Subject key identifier: 79:6A:CB:FE:21:87:81:0B:A2:82:CB:01:68:27:5D:C2:44:78:87:CC
Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Certificate serial: 1907
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
Manifest number: 18F9
Signing time: Fri 12 Jun 2026 16:25:01 +0000
Manifest this update: Fri 12 Jun 2026 16:25:00 +0000
Manifest next update: Fri 19 Jun 2026 16:25:00 +0000
Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: ySrmkPN8ikmTMYtsBGS7aQl7rDOWY0mr5nSr0FjLVtk=)
2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: abf25FbH719hRhMiSj4RTqIJD+/I5r3H2hRBfJwMFgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:24:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6407 (0x1907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Validity
Not Before: Jun 12 16:25:00 2026 GMT
Not After : Jun 19 16:25:00 2026 GMT
Subject: CN=6a2c32dc-6111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:d1:84:9d:9b:79:cd:e9:42:d5:5c:54:1c:
08:a2:e9:33:64:ec:f5:18:96:55:d5:5a:29:8f:b2:
87:41:a7:a4:da:4d:8e:0a:20:b5:46:ef:47:a8:95:
49:51:ac:51:e7:16:47:86:df:7a:7d:d0:f6:bc:a4:
9f:5b:3c:41:de:7a:e4:96:6d:68:23:e7:6b:c8:35:
19:d9:94:5c:82:16:26:ce:e4:44:f6:d0:f2:f8:9d:
c0:87:46:b5:03:4d:10:87:f4:59:74:a1:f0:65:85:
0c:f9:9e:7d:c3:87:fe:d4:77:85:04:aa:24:ad:5f:
4f:d8:74:e7:9c:59:54:3b:73:64:14:0e:95:d2:48:
ab:86:2d:26:c6:17:23:5c:bf:b8:0f:2d:ce:26:c0:
f6:46:90:87:38:9f:a3:b6:5f:17:44:4e:de:2b:a6:
74:d9:e7:27:f1:d6:f7:9e:ab:a5:f4:db:b7:b7:1d:
ab:c5:72:0c:4d:c1:df:78:c1:57:ca:36:72:f9:d4:
96:4d:2b:1b:14:ed:17:1e:41:d1:06:c1:ff:ef:37:
1d:d7:52:fc:f6:5b:71:ea:ec:89:5f:38:89:2f:d0:
fb:4a:18:cd:c6:6f:e4:07:d9:ba:fb:18:d9:13:9c:
58:5b:54:8c:66:e9:12:c0:df:a1:d3:b4:c8:9c:2a:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:CB:FE:21:87:81:0B:A2:82:CB:01:68:27:5D:C2:44:78:87:CC
X509v3 Authority Key Identifier:
keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:26:04:4e:0a:e5:d4:61:e2:f2:8e:43:2f:b3:cb:e0:9c:0f:
1c:3a:19:8c:6c:f0:fe:39:4b:73:9a:79:32:da:87:47:06:74:
d6:35:9e:4c:dd:80:a0:48:a5:ca:aa:9d:93:47:52:a3:2f:be:
ce:c5:b9:6d:24:70:06:8c:01:45:e2:7b:56:d6:e8:a3:81:37:
1b:e2:c8:42:44:f5:d2:3b:53:93:30:50:fd:7e:0e:51:bc:e0:
7b:e7:5d:18:a7:96:f3:89:2a:d2:32:0a:74:be:2b:cb:53:fc:
4a:8a:d5:28:31:7d:e8:73:4e:ab:a8:a4:e9:e6:63:bc:f2:c4:
2f:90:7a:31:b5:f3:8d:b9:59:3f:5f:c5:a6:7a:92:9c:78:c0:
de:7d:aa:91:8e:24:e7:8e:7a:9c:28:8a:2c:77:c2:a2:56:a0:
54:45:12:f2:01:36:c6:9b:99:48:02:db:d1:f6:fa:82:67:67:
d9:9f:bd:44:84:8d:55:d4:7c:3a:9b:c3:8f:92:82:71:7e:b8:
32:28:74:3d:bf:bb:fe:75:eb:ac:f8:02:c2:78:ec:47:61:fc:
b0:13:fd:e2:74:3a:fc:2c:d8:8e:ce:f4:8c:a2:3b:26:eb:8f:
e3:39:8e:b4:2b:18:5c:e6:bc:54:f6:70:99:4f:a1:e5:ab:25:
ee:ca:10:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3
QkNGODhDOEIwHhcNMjYwNjEyMTYyNTAwWhcNMjYwNjE5MTYyNTAwWjAYMRYwFAYD
VQQDEw02YTJjMzJkYy02MTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn0TRhJ2bec3pQtVcVBwIoukzZOz1GJZV1Vopj7KHQaek2k2OCiC1Ru9HqJVJ
UaxR5xZHht96fdD2vKSfWzxB3nrklm1oI+dryDUZ2ZRcghYmzuRE9tDy+J3Ah0a1
A00Qh/RZdKHwZYUM+Z59w4f+1HeFBKokrV9P2HTnnFlUO3NkFA6V0kirhi0mxhcj
XL+4Dy3OJsD2RpCHOJ+jtl8XRE7eK6Z02ecn8db3nqul9Nu3tx2rxXIMTcHfeMFX
yjZy+dSWTSsbFO0XHkHRBsH/7zcd11L89ltx6uyJXziJL9D7ShjNxm/kB9m6+xjZ
E5xYW1SMZukSwN+h07TInCq99wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHlqy/4h
h4ELooLLAWgnXcJEeIfMMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF
NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI
UGxYZnpkclRwSTk3ejRqSXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHCYETgrl1GHi8o5DL7PL4JwPHDoZjGzw/jlLc5p5MtqHRwZ01jWeTN2AoEil
yqqdk0dSoy++zsW5bSRwBowBReJ7Vtboo4E3G+LIQkT10jtTkzBQ/X4OUbzge+dd
GKeW84kq0jIKdL4ry1P8SorVKDF96HNOq6ik6eZjvPLEL5B6MbXzjblZP1/FpnqS
nHjA3n2qkY4k5456nCiKLHfColagVEUS8gE2xpuZSALb0fb6gmdn2Z+9RISNVdR8
OpvDj5KCcX64Mih0Pb+7/nXrrPgCwnjsR2H8sBP94nQ6/CzYjs70jKI7JuuP4zmO
tCsYXOa8VPZwmU+h5asl7soQFw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:59:54 2026 by rpki-client