
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier: QcHFdacyqUGiz6KhK9RHvk/CkgHnRk0Zci6JSEjCkps=
Subject key identifier: 7E:F7:21:D7:14:B4:A1:FC:AD:E0:3B:91:B5:4D:27:DC:DA:3B:3E:3D
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number: 0215
Signing time: Mon 21 Sep 2026 03:40:32 +0000
Manifest this update: Mon 21 Sep 2026 03:40:32 +0000
Manifest next update: Mon 28 Sep 2026 03:40:32 +0000
Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: tLFj4sx+j/3V60/JljdrpUQkpGuFFn0ODUmnE2Z9v8g=)
2: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: EoV7X+CPLPt1PwJmt/C6xwl6Rd3EK1Ujxhgn/dIQJh4=)
3: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: yxilBFlE1MgXEF3lGJREKxdKcg1wggFTb7Z4QOAKfZc=)
4: FCF99042301011EFBC350682C4F9AE02.roa (hash: G76akd+Pz3BvQnQXHM+tIAwBqY1cYkiz3eE1RRYxTew=)
5: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: DlhDgTG7w84Ovj2w/3S1GtqzEGfOWk6+fiHNLhzsPdE=)
6: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tkIQFKk/Mo9h+Y6zoIuiaKelqp3EP1aM68bZaSbBy0M=)
7: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: Et35taMHrzzZx//1uz1X2k2usz0PCpjA6ZgM0w/qGlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Validity
Not Before: Sep 21 03:40:32 2026 GMT
Not After : Sep 28 03:40:32 2026 GMT
Subject: CN=6ab0a730-80a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:51:af:48:a5:6f:e3:1d:cb:ff:f6:f3:98:
54:a7:4f:5f:14:03:5b:35:f3:4b:74:37:e2:d7:73:
94:a0:4a:92:ca:84:41:2b:2f:8e:e7:21:0f:89:c8:
3a:90:97:4e:21:e6:b7:cd:16:bf:76:f3:19:13:02:
51:29:32:1b:29:35:f0:09:5e:bf:4d:05:43:b6:21:
3b:5d:1d:01:47:16:ae:67:49:9e:3d:5b:99:4c:4c:
bb:8e:21:ce:be:a0:3d:5b:9a:9a:07:c9:8f:85:53:
e9:4e:35:5e:10:fc:d5:7a:66:b5:1f:a9:6a:9d:e3:
a2:e2:f0:9a:fc:4a:db:58:bc:c7:f4:f2:aa:91:e1:
ae:ba:da:51:a6:9c:66:41:e5:6a:8d:56:26:16:99:
b8:37:4e:06:28:45:a1:b7:65:68:5d:66:52:58:5b:
e0:c9:1c:b7:68:f9:da:91:05:95:3c:c8:0b:99:23:
d9:e0:dc:35:72:96:2b:e2:f7:80:b7:c7:f5:c9:8f:
2f:76:ee:41:8b:0d:6b:9b:70:f7:a9:e5:af:3a:97:
e9:fd:57:ab:57:4e:d9:a9:fe:8f:46:b4:fe:82:bd:
dd:54:29:2c:50:16:27:21:d2:0a:bb:68:37:fa:71:
1f:f8:3f:61:93:4d:00:a1:54:6f:f6:8c:6e:de:da:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F7:21:D7:14:B4:A1:FC:AD:E0:3B:91:B5:4D:27:DC:DA:3B:3E:3D
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:2a:4e:ee:84:c8:2a:08:d5:70:10:57:43:d0:2c:c7:9e:
a1:eb:61:8c:17:e4:d2:4d:89:b8:fc:f3:54:25:1f:1a:f0:04:
da:21:cf:be:89:e9:0e:ad:78:e2:6c:2e:69:5f:2d:37:d4:ee:
cd:2c:02:67:8b:3e:14:04:10:f6:14:7f:92:c4:d8:a1:c3:92:
3f:2d:aa:e2:88:d7:3c:f4:ca:f7:58:37:12:41:aa:ce:7b:f8:
d6:d7:88:2c:a2:c6:3f:b7:7c:08:f1:0b:c3:a5:e5:c4:45:2d:
49:8e:93:a6:d5:a6:30:24:f3:4b:94:e8:13:6a:05:be:d6:28:
8d:dc:3d:ad:ac:9f:75:12:c6:57:cb:ef:9f:a1:e0:20:77:a9:
a8:f3:56:5d:81:df:0e:eb:c7:2b:4b:67:4d:bc:16:60:7b:69:
b2:7f:cc:0b:e6:9f:ee:a0:02:1c:98:18:68:c0:43:26:e0:12:
fb:b5:95:7f:b8:0f:f1:c9:bf:8b:ff:9e:c5:58:e4:06:b5:07:
3b:d1:4b:cb:37:b4:3d:ce:12:80:c8:d9:5a:6a:cf:4b:20:2d:
64:41:84:ea:10:25:95:0f:f7:10:d2:39:c4:3d:72:0d:d7:60:
4f:7e:e6:16:8e:97:a9:e4:1e:a5:22:18:65:64:cc:a3:1d:c8:
87:6b:79:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:57:20 2026 by rpki-client