
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json)
Hash identifier: YBARFOvEuzMLnVTHbfm/xMTg4g6fOm6skT46bpu4G/U=
Subject key identifier: B5:35:C4:80:6D:D3:67:48:E8:82:81:D4:6F:99:8A:AD:74:AB:3A:91
Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Certificate serial: 09AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
Manifest number: 09AC
Signing time: Tue 28 Jul 2026 20:17:15 +0000
Manifest this update: Tue 28 Jul 2026 20:17:14 +0000
Manifest next update: Tue 04 Aug 2026 20:17:14 +0000
Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: pgpNfHlskVKC+B431URjJaHi+8+0bUP+928V5ONZqnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2476 (0x9ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Validity
Not Before: Jul 28 20:17:14 2026 GMT
Not After : Aug 4 20:17:14 2026 GMT
Subject: CN=6a690e4b-7291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:2a:64:82:01:84:91:02:89:b5:31:af:aa:
25:ea:62:a6:ef:a6:fd:93:82:97:cb:9b:6f:88:99:
be:49:ef:62:11:1b:59:23:b5:85:f4:b4:a0:32:40:
cc:c6:f6:3c:05:d0:c6:5e:68:34:4b:12:04:49:3c:
48:42:76:9b:a5:0f:03:d2:b7:dd:70:13:28:aa:c1:
99:b1:9b:9f:3b:c3:45:17:83:6b:64:82:1a:e3:77:
a0:d4:f8:5b:19:92:da:f8:3f:e3:5b:73:52:e5:3e:
b3:29:78:2f:38:56:31:8f:ce:f4:f5:99:d0:dd:aa:
be:b6:13:96:dc:a2:39:1c:de:d6:2b:47:64:b4:c9:
0f:ed:53:7e:29:ec:44:cb:08:36:f0:c6:f3:82:ea:
81:ce:80:6e:14:e8:f2:1a:e2:c1:fb:93:83:8d:7b:
89:82:4d:cc:30:bd:f4:b8:de:f1:15:dd:a9:1e:87:
d0:1a:d9:42:2b:7d:04:8c:6f:8c:df:2f:dc:42:b9:
3d:7c:c3:b8:c6:3a:5e:dd:69:2c:ff:96:5a:15:e0:
14:30:dd:49:85:52:ad:5d:c8:6b:f7:9b:d8:15:61:
cd:84:c5:1d:9b:db:b9:d3:aa:f8:d5:cd:d5:48:48:
ad:7e:8c:5e:12:b2:16:be:5d:44:89:20:6f:cb:22:
cf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:35:C4:80:6D:D3:67:48:E8:82:81:D4:6F:99:8A:AD:74:AB:3A:91
X509v3 Authority Key Identifier:
keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:84:70:ea:d8:bd:0a:40:73:e3:c5:d6:9f:6a:3f:db:1a:c4:
5d:d8:d3:7b:14:87:29:bc:51:09:c0:ad:e9:c5:24:fd:e9:f6:
7a:78:9e:b1:b4:32:fb:0b:47:5f:1f:d8:c5:e8:40:b0:b0:5e:
13:64:46:96:27:80:be:4a:61:01:62:02:e4:ec:6b:d1:ee:56:
b6:60:b7:7c:91:b2:68:1f:a4:81:49:d5:e8:25:80:44:a6:a9:
d7:36:11:3d:e7:fe:ab:17:ea:20:4e:ae:12:d5:0f:14:30:4a:
a1:44:e2:14:cb:38:80:9c:9c:33:d6:35:a6:a9:cb:00:fd:81:
06:81:1d:8d:06:98:e6:05:b3:b1:c3:46:c9:47:bd:54:0a:7e:
f0:3f:6a:56:38:b4:75:bf:00:38:46:94:86:ac:f3:c2:49:4a:
03:0c:de:9d:ab:2a:35:cd:7c:ca:9a:b1:60:f0:84:02:55:87:
25:ed:d0:52:49:f8:c1:6c:ea:6b:ea:f9:c0:f3:67:2b:8b:68:
6a:0c:77:06:8a:b2:f7:2e:88:43:89:9a:5d:f9:95:22:d7:ce:
2b:b7:a9:6b:5e:b9:db:98:f5:4e:0b:77:b1:e9:b9:cf:63:f2:
53:4b:b6:1b:56:8d:59:fc:ca:13:18:43:52:b9:94:f6:88:6a:
0c:45:83:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:52 2026 by rpki-client