
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: 2wiM4ahsBYBKuDHfCO3c5aR/On7DuPfZLr/ALkp4SRg=
Subject key identifier: 05:F7:46:0A:1B:1F:14:17:92:17:60:B1:10:35:C4:CB:84:AC:F1:B2
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 01CC
Signing time: Sat 19 Sep 2026 04:01:09 +0000
Manifest this update: Sat 19 Sep 2026 04:01:09 +0000
Manifest next update: Sat 26 Sep 2026 04:01:09 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: fRIw738syJW/VBFIkMM3E/PmVaZ7nzXC6cQ/LlLsnLM=)
2: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: 6g4xFT+5TBoOWRdnTjTJYIhatI0v8zNL/4mR8KhkdP4=)
3: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
4: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: Ps4zTjFyLHJz+OVkfNbIpcjmNwEHH47lDT8mzreZ++U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Sep 19 04:01:09 2026 GMT
Not After : Sep 26 04:01:09 2026 GMT
Subject: CN=6aae0905-c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:ee:85:ee:f0:95:8c:06:af:10:2b:47:50:
0d:e5:0c:8b:5d:4a:2b:58:c0:25:93:17:b0:ec:e9:
5b:f0:57:5d:e5:25:50:3f:82:b5:d6:83:37:3b:e2:
37:e6:ce:9d:5d:eb:c9:c5:86:c3:e4:61:e4:ef:0d:
19:e6:6f:6a:f8:f9:16:f1:63:0b:5d:ef:b0:0c:31:
ba:09:0d:39:ea:02:6c:8a:78:e9:86:c4:26:ca:6e:
32:ed:e1:c6:cb:4d:9c:6c:fb:97:47:73:b7:fc:e4:
97:cc:55:1c:50:b7:ba:fb:8d:5e:47:d5:45:f4:ef:
73:a8:cf:c3:3e:f4:21:01:bf:a0:63:fa:f4:95:c6:
54:44:eb:3a:08:3c:e3:a2:a4:0b:ef:41:f0:3d:ab:
1c:10:67:d9:18:98:1c:03:24:5b:8b:aa:f5:f3:69:
82:24:e5:13:5e:4f:2c:fe:09:0f:65:7c:33:ff:dc:
67:5f:51:53:96:fb:d5:b7:f8:0d:ab:18:0d:5b:e5:
fa:dd:24:89:73:ba:a6:8a:00:bf:c3:b8:c1:c5:d5:
49:51:4a:f2:9a:72:03:76:e8:68:44:89:ae:8c:ae:
06:db:51:00:27:8c:d7:2c:c4:88:7e:2c:c2:45:52:
e6:75:7f:39:7e:ce:e9:a9:75:d0:92:85:88:42:02:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F7:46:0A:1B:1F:14:17:92:17:60:B1:10:35:C4:CB:84:AC:F1:B2
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:95:b2:68:1f:ca:be:26:0e:50:8c:4f:ef:4c:97:c3:0e:1e:
96:00:ba:a3:55:09:6c:3e:c8:12:67:62:a8:65:23:dc:33:24:
ca:0e:4e:39:04:0b:89:80:92:05:e1:05:33:e3:01:ae:0d:77:
c2:6b:1b:6f:14:78:e1:a0:95:37:6b:35:bd:c4:18:5b:2d:ed:
5b:c3:f6:5e:b5:ef:3f:e6:12:31:fa:18:34:d0:8f:5a:30:f7:
ae:a7:34:c0:87:ab:c7:ae:96:f9:c1:7b:85:2c:2e:40:dc:c6:
14:b0:71:52:2f:ab:0c:ad:47:12:e2:c7:45:45:61:db:23:87:
ab:f3:8b:05:d3:47:cc:b6:11:dd:f1:41:d3:cf:16:b8:9e:7e:
84:a6:43:13:41:af:94:1c:d9:8a:67:23:20:f3:2a:02:09:86:
bb:d7:6d:fb:14:2b:74:80:a6:52:0b:ed:4f:09:5b:a4:4b:dc:
b8:d8:5b:48:66:2f:df:ea:f9:a0:38:ab:0a:20:d6:17:e5:7e:
64:61:f5:26:12:25:2c:af:ac:3d:0a:f5:86:16:07:bd:28:0f:
f9:71:a7:1e:8a:b3:51:4a:82:2c:26:1f:53:af:1f:91:f4:e0:
ae:6e:20:a7:d5:0d:0b:f8:1d:7e:e0:d2:a9:ec:76:c7:64:1b:
fd:c6:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:24:54 2026 by rpki-client