
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json)
Hash identifier: pw8DaVcLlBFaMBDOokWnE/R+b+r0SNZaXGOfNj5iAhY=
Subject key identifier: 79:DC:C6:EA:08:07:97:5F:4C:DA:10:26:D9:77:2E:98:88:E3:69:AC
Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
Manifest number: FC
Signing time: Mon 27 Jul 2026 08:19:21 +0000
Manifest this update: Mon 27 Jul 2026 08:19:20 +0000
Manifest next update: Mon 03 Aug 2026 08:19:20 +0000
Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: XENG+HBeNzsPilTeLTnDBGCnznXW1b3cZ1YvXBfrXzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Validity
Not Before: Jul 27 08:19:20 2026 GMT
Not After : Aug 3 08:19:20 2026 GMT
Subject: CN=6a671489-31ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:45:55:9e:81:68:84:27:30:7f:69:74:71:
54:cf:ac:11:bd:24:81:4d:48:70:3b:b4:f0:54:01:
a5:bf:e3:25:dd:91:2a:2d:71:e3:35:fe:7b:dc:82:
df:5d:c5:33:e0:27:d0:c2:58:2d:12:b1:68:0e:96:
8f:e4:41:20:d5:ec:39:59:00:f9:85:de:99:3a:c8:
8f:81:63:56:b9:1b:f7:5f:37:60:8e:3b:a9:1d:94:
cd:74:52:d0:37:38:04:e9:1b:11:2b:90:1c:d5:b5:
64:1e:41:30:72:82:b5:52:c7:5a:03:56:6a:40:ed:
f6:49:05:0a:7f:5f:f3:ce:ac:99:00:a1:15:db:39:
e1:09:c9:01:86:1b:57:55:76:44:89:6e:2e:c2:a8:
02:23:9b:24:a3:b5:72:e3:db:ac:8b:3f:6f:50:e9:
84:3f:28:3f:75:32:fd:c8:27:d5:bc:83:b1:49:b5:
2f:00:55:a1:05:89:60:44:fc:ef:b2:30:ff:ba:a3:
10:1a:51:d2:52:43:4a:17:7b:34:b7:54:d2:7c:bf:
56:dd:24:cb:a0:8a:01:09:75:29:12:d9:ac:c9:4d:
0b:ae:1f:b7:fb:16:c7:f7:e2:b4:3c:ff:b4:7d:b5:
4b:51:a4:92:bd:04:eb:19:36:b1:c5:b1:a6:d2:5a:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DC:C6:EA:08:07:97:5F:4C:DA:10:26:D9:77:2E:98:88:E3:69:AC
X509v3 Authority Key Identifier:
keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:ee:f7:cc:7f:21:a1:e0:c3:db:67:5a:04:25:79:bf:26:
3d:5b:12:f5:09:66:9b:76:59:1b:7f:a4:69:fb:cc:bb:4b:c8:
85:1d:19:91:fc:73:7c:2a:c9:fa:a0:c0:98:a7:f2:42:31:03:
ff:91:94:91:94:75:7f:ac:6c:52:aa:dc:d9:f5:15:59:21:61:
bc:35:b0:98:0c:52:28:a8:f2:89:91:13:83:be:f8:00:e9:02:
0a:d9:68:f1:b1:46:dd:3a:97:21:b1:33:82:9a:8c:2c:bf:ef:
71:cd:18:ce:36:b2:3a:c7:ec:69:d7:6d:95:bb:0f:50:bb:10:
cb:f2:8d:32:fd:7c:13:13:89:32:e4:c9:d0:85:69:0e:e2:fc:
58:76:43:00:49:d2:80:77:0d:14:7d:e8:bc:2f:4e:fb:b3:34:
e4:86:e0:f6:1c:6b:3d:64:8e:f6:7b:a4:3b:5a:03:02:c3:ac:
09:ae:20:0a:47:ca:25:7e:83:63:7d:a0:09:a4:21:81:96:b9:
4c:b0:a1:de:b6:dc:ec:46:13:30:7a:21:72:59:47:f5:6b:d8:
08:da:3f:03:04:f4:6b:57:c6:7e:3b:36:f3:28:f1:18:a9:eb:
48:7d:c9:5a:0d:c9:3a:82:19:f1:94:ba:19:4f:63:ab:dc:f7:
26:4c:7d:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTIxMTAvBgNVBAUTKDQwRTRCRDM2QUUxNTA3N0ZFNTk5ODVEMTM3MEQ1RDY0
NjcwQTg4RDkwHhcNMjYwNzI3MDgxOTIwWhcNMjYwODAzMDgxOTIwWjAYMRYwFAYD
VQQDEw02YTY3MTQ4OS0zMWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArepFVZ6BaIQnMH9pdHFUz6wRvSSBTUhwO7TwVAGlv+Ml3ZEqLXHjNf573ILf
XcUz4CfQwlgtErFoDpaP5EEg1ew5WQD5hd6ZOsiPgWNWuRv3XzdgjjupHZTNdFLQ
NzgE6RsRK5Ac1bVkHkEwcoK1UsdaA1ZqQO32SQUKf1/zzqyZAKEV2znhCckBhhtX
VXZEiW4uwqgCI5sko7Vy49usiz9vUOmEPyg/dTL9yCfVvIOxSbUvAFWhBYlgRPzv
sjD/uqMQGlHSUkNKF3s0t1TSfL9W3STLoIoBCXUpEtmsyU0Lrh+3+xbH9+K0PP+0
fbVLUaSSvQTrGTaxxbGm0lqUEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHncxuoI
B5dfTNoQJtl3LpiI42msMB8GA1UdIwQYMBaAFEDkvTauFQd/5ZmF0TcNXWRnCojZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5Mi8yQzBCMzJEODA5
MzYxMUYwQTI4NDJENTdDNEY5QUUwMi9RT1M5TnE0VkIzX2xtWVhSTncxZFpHY0tp
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FPUzlOcTRWQjNfbG1ZWFJOdzFkWkdjS2lOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5Mi8yQzBCMzJEODA5MzYxMUYwQTI4NDJENTdDNEY5QUUwMi9RT1M5TnE0VkIz
X2xtWVhSTncxZFpHY0tpTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMLLu98x/IaHgw9tnWgQleb8mPVsS9Qlmm3ZZG3+kafvMu0vIhR0ZkfxzfCrJ
+qDAmKfyQjED/5GUkZR1f6xsUqrc2fUVWSFhvDWwmAxSKKjyiZETg774AOkCCtlo
8bFG3TqXIbEzgpqMLL/vcc0YzjayOsfsaddtlbsPULsQy/KNMv18ExOJMuTJ0IVp
DuL8WHZDAEnSgHcNFH3ovC9O+7M05Ibg9hxrPWSO9nukO1oDAsOsCa4gCkfKJX6D
Y32gCaQhgZa5TLCh3rbc7EYTMHohcllH9WvYCNo/AwT0a1fGfjs28yjxGKnrSH3J
Wg3JOoIZ8ZS6GU9jq9z3Jkx9ag==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:03 2026 by rpki-client