
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: fbBs11h/K/6rSCtCiADdGB5SJ/espZjui2JR9EsIAdY=
Subject key identifier: D0:38:55:30:68:9D:17:99:A8:D1:8B:94:7D:5A:15:AB:D5:2B:A6:44
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 0172
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 0162
Signing time: Sun 01 Mar 2026 06:06:49 +0000
Manifest this update: Sun 01 Mar 2026 06:06:49 +0000
Manifest next update: Sun 08 Mar 2026 06:06:49 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: 9U4a40MR1XiMCi8U4jo2b51XsmfVRuRmMPXjjO5/sSk=)
2: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: VGNr+wy397+x+eo2u5nezP4JupOw3/BZyZCNhIT48y4=)
3: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: f31wkh4SmRezq8K+eaS7YGeeme+WhDVB3FqGjZlLVDI=)
4: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 370 (0x172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Mar 1 06:06:49 2026 GMT
Not After : Mar 8 06:06:49 2026 GMT
Subject: CN=69a3d779-3c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:66:fe:b0:32:3b:08:bc:27:16:70:d8:9d:
4e:13:cc:51:ca:01:be:ae:8b:00:e2:08:ab:8f:c3:
1f:12:00:16:fe:08:c2:8c:55:6a:7a:1b:5e:82:3a:
ec:49:c0:5c:1d:e7:38:45:e1:1c:40:22:fb:89:3a:
3a:7e:e1:d0:85:21:ba:3d:38:01:51:09:a3:2f:86:
6d:c6:63:15:6d:93:9b:02:cd:ff:9d:cb:c6:99:31:
bc:c7:04:1e:62:94:e5:8b:8b:08:b5:12:50:bf:19:
b3:c2:b3:5a:f1:4c:1a:91:81:b6:d7:5a:48:c1:8d:
2f:cb:7d:05:ff:13:d6:b2:74:70:19:35:6d:f6:62:
66:ac:a3:7e:91:e6:61:29:9d:89:62:d5:17:56:53:
4f:d0:2f:b7:3e:3c:85:27:af:46:43:23:57:27:45:
40:1a:a6:f0:c3:f6:f1:8b:9b:8d:c9:a2:55:f8:ee:
de:93:f6:1d:07:ed:8e:23:ac:15:b5:cf:97:31:cc:
e3:1c:8c:59:82:81:49:dd:e6:18:a8:f1:02:1c:14:
51:8e:df:2e:3a:a8:5e:91:f6:a2:bf:d6:f7:d6:5c:
a0:1d:46:a6:db:49:a3:22:5a:50:17:80:7d:97:b1:
42:27:62:a3:e9:7b:1d:66:3c:2b:c8:74:67:c0:03:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:55:30:68:9D:17:99:A8:D1:8B:94:7D:5A:15:AB:D5:2B:A6:44
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:00:93:17:3f:0f:37:34:2b:1d:d2:62:03:2b:e8:35:6e:16:
ad:13:ff:e5:40:82:c0:8b:04:60:d2:ae:bf:05:9c:96:c0:17:
fa:0f:38:f7:bb:eb:86:32:30:9b:aa:db:8b:ad:c3:4c:99:51:
28:9e:ef:27:91:b8:16:75:10:f9:a0:05:a4:27:e2:fa:f6:a3:
5c:41:90:60:31:1a:cc:0d:43:75:44:c0:31:2b:db:35:6a:29:
d2:8d:2d:28:8d:e9:83:5f:1b:9e:cb:d7:69:df:aa:df:f9:ce:
43:bd:0c:96:c2:40:82:b9:17:d3:49:d3:8b:09:c6:78:7b:0e:
0b:dc:89:63:aa:af:7b:56:8f:bd:d5:f9:61:32:68:01:63:49:
ec:aa:6f:21:8e:30:bb:d0:9d:b5:7d:a4:44:0f:d7:a4:42:4a:
04:74:aa:c4:cb:1f:7c:37:bb:3a:b5:d8:ca:cd:39:a2:83:40:
c8:eb:61:71:f5:9f:7d:9a:3e:45:7c:73:27:02:2b:d4:2b:dc:
b0:7d:68:b8:27:4f:8e:1e:18:c1:a0:8f:ec:de:0a:e9:0d:68:
4e:a0:84:cb:ac:34:e9:f0:60:34:86:f9:05:1d:6c:66:85:c8:
36:14:a8:88:73:83:16:42:3d:46:65:fd:bb:c9:f2:8b:ee:f9:
ef:aa:d1:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURENjQxMTAvBgNVBAUTKDQwQjU1QzFBQzc0MDRDQzA1RjE3NzYzQTk5QkJCMjM4
OUJEMkVBQkUwHhcNMjYwMzAxMDYwNjQ5WhcNMjYwMzA4MDYwNjQ5WjAYMRYwFAYD
VQQDEw02OWEzZDc3OS0zYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6W9m/rAyOwi8JxZw2J1OE8xRygG+rosA4girj8MfEgAW/gjCjFVqehtegjrs
ScBcHec4ReEcQCL7iTo6fuHQhSG6PTgBUQmjL4ZtxmMVbZObAs3/ncvGmTG8xwQe
YpTli4sItRJQvxmzwrNa8UwakYG211pIwY0vy30F/xPWsnRwGTVt9mJmrKN+keZh
KZ2JYtUXVlNP0C+3PjyFJ69GQyNXJ0VAGqbww/bxi5uNyaJV+O7ek/YdB+2OI6wV
tc+XMczjHIxZgoFJ3eYYqPECHBRRjt8uOqhekfaiv9b31lygHUam20mjIlpQF4B9
l7FCJ2Kj6XsdZjwryHRnwAPOQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNA4VTBo
nReZqNGLlH1aFavVK6ZEMB8GA1UdIwQYMBaAFEC1XBrHQEzAXxd2Opm7sjib0uq+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC81ODQwQTA3QzEz
NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRNQmZGM1k2bWJ1eU9KdlM2
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FMVmNHc2RBVE1CZkYzWTZtYnV5T0p2UzZyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REQ2NC81ODQwQTA3QzEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9RTFZjR3NkQVRN
QmZGM1k2bWJ1eU9KdlM2cjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfQCTFz8PNzQrHdJiAyvoNW4WrRP/5UCCwIsEYNKuvwWclsAX+g8497vrhjIw
m6rbi63DTJlRKJ7vJ5G4FnUQ+aAFpCfi+vajXEGQYDEazA1DdUTAMSvbNWop0o0t
KI3pg18bnsvXad+q3/nOQ70MlsJAgrkX00nTiwnGeHsOC9yJY6qve1aPvdX5YTJo
AWNJ7KpvIY4wu9CdtX2kRA/XpEJKBHSqxMsffDe7OrXYys05ooNAyOthcfWffZo+
RXxzJwIr1CvcsH1ouCdPjh4YwaCP7N4K6Q1oTqCEy6w06fBgNIb5BR1sZoXINhSo
iHODFkI9RmX9u8nyi+7576rRUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:33 2026 by rpki-client