
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
File: QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json)
Hash identifier: iaiKmOSmIjd5+Qi7bEBGDtztsLtNp6M3rZX/WgMjJRs=
Subject key identifier: 3E:6D:24:39:B1:B3:25:C6:BC:34:10:78:7F:D3:70:6B:4E:2C:07:18
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Certificate issuer: /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
Manifest number: 024B
Signing time: Wed 29 Jul 2026 03:27:42 +0000
Manifest this update: Wed 29 Jul 2026 03:27:42 +0000
Manifest next update: Wed 05 Aug 2026 03:27:42 +0000
Files and hashes: 1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: aA6VyoDYCE9Wudix3tGz9Pe3aLvFfddOLkcsM2A+k0c=)
2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 03:27:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Validity
Not Before: Jul 29 03:27:42 2026 GMT
Not After : Aug 5 03:27:42 2026 GMT
Subject: CN=6a69732e-18de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:ad:08:fb:fd:60:17:03:12:be:5b:9f:df:
47:dc:10:1e:63:57:aa:2b:de:df:7f:a9:94:7d:eb:
7c:82:a6:3c:47:e3:a5:3d:be:ae:5a:bd:3b:ae:a9:
23:77:dd:fd:41:9f:af:12:fb:02:51:dc:9a:28:a6:
6f:27:93:48:74:35:a3:e2:e9:99:0b:3f:2e:13:e4:
07:72:b3:44:be:46:e5:cc:3e:ce:c1:30:e9:c4:8a:
0d:bf:bd:22:0d:9d:ee:58:5e:cd:28:ae:93:13:87:
ea:dd:a2:5d:4e:52:d3:85:20:e5:5d:e4:e8:b1:ba:
b6:0c:10:c1:ba:46:bc:3c:57:5e:ae:a7:52:8d:e9:
5b:66:32:0c:22:7a:68:af:ce:c9:3e:f7:b0:64:f5:
44:ae:08:d4:97:87:71:2c:d7:9a:ba:c9:af:26:f7:
d9:15:98:89:32:81:11:e0:24:fe:87:2b:7b:d6:76:
cf:fd:4e:ac:45:43:e0:b6:77:f1:eb:97:59:60:ec:
ac:85:2d:41:4d:34:7f:90:61:5f:26:64:3f:61:4b:
e8:79:61:98:d7:05:eb:72:78:c9:ec:8a:02:f9:50:
4a:97:b3:be:79:e7:f2:4a:a8:40:65:a4:df:dd:3f:
4d:7f:37:5a:fd:0c:e2:b2:e1:09:c0:e6:16:dc:d4:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:24:39:B1:B3:25:C6:BC:34:10:78:7F:D3:70:6B:4E:2C:07:18
X509v3 Authority Key Identifier:
keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d0:8a:c8:99:31:ea:cc:82:21:33:9b:9a:e6:73:e4:7f:67:
1f:18:69:69:f2:a2:c9:3d:2d:4b:f1:f3:a4:13:da:14:7e:97:
1f:ff:e2:30:97:d6:b4:a7:b7:40:ce:25:1f:9d:f8:6d:4d:fd:
9a:64:80:b2:d7:e8:01:ce:42:1a:ad:16:48:3b:67:42:8e:62:
0a:a6:db:6f:db:8d:80:e8:f3:b8:00:43:2a:77:81:75:94:1c:
d0:fb:a8:90:b3:5c:6d:c7:7f:47:c0:49:2b:91:b4:d6:9b:5e:
c5:d3:f9:3b:cb:f1:d7:c2:a6:d5:40:fb:ae:76:01:14:f8:24:
2e:51:1f:39:41:da:2f:be:7a:5b:43:9d:3b:5c:ce:ae:42:ab:
11:e4:e7:3a:15:f2:1e:e0:84:54:fe:d7:b9:d9:59:c9:f1:a4:
29:9f:89:4f:f9:5a:f0:0c:29:f9:cd:e6:2c:54:fe:a2:56:b4:
d1:7c:3a:6e:d6:27:71:c9:9a:dc:2e:07:db:ad:41:bc:16:f1:
2e:f3:80:5d:37:33:88:a6:a3:d7:fd:ab:e8:cb:94:5b:58:05:
2d:96:3d:c8:1d:ef:7f:83:42:70:e6:4a:ae:13:97:09:48:a1:
47:d7:5d:21:e8:d4:43:9f:bc:0c:75:86:b0:6c:24:a1:d6:b2:
1c:51:74:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1
ODMzMjBEMTgwHhcNMjYwNzI5MDMyNzQyWhcNMjYwODA1MDMyNzQyWjAYMRYwFAYD
VQQDEw02YTY5NzMyZS0xOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszytCPv9YBcDEr5bn99H3BAeY1eqK97ff6mUfet8gqY8R+OlPb6uWr07rqkj
d939QZ+vEvsCUdyaKKZvJ5NIdDWj4umZCz8uE+QHcrNEvkblzD7OwTDpxIoNv70i
DZ3uWF7NKK6TE4fq3aJdTlLThSDlXeTosbq2DBDBuka8PFderqdSjelbZjIMInpo
r87JPvewZPVErgjUl4dxLNeausmvJvfZFZiJMoER4CT+hyt71nbP/U6sRUPgtnfx
65dZYOyshS1BTTR/kGFfJmQ/YUvoeWGY1wXrcnjJ7IoC+VBKl7O+eefySqhAZaTf
3T9Nfzda/QzisuEJwOYW3NSotQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5tJDmx
syXGvDQQeH/TcGtOLAcYMB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC
QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH
STRYQjZEM1RlR05ZTXlEUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqNCKyJkx6syCITObmuZz5H9nHxhpafKiyT0tS/HzpBPaFH6XH//iMJfWtKe3
QM4lH534bU39mmSAstfoAc5CGq0WSDtnQo5iCqbbb9uNgOjzuABDKneBdZQc0Puo
kLNcbcd/R8BJK5G01ptexdP5O8vx18Km1UD7rnYBFPgkLlEfOUHaL756W0OdO1zO
rkKrEeTnOhXyHuCEVP7XudlZyfGkKZ+JT/la8Awp+c3mLFT+ola00Xw6btYnccma
3C4H261BvBbxLvOAXTcziKaj1/2r6MuUW1gFLZY9yB3vf4NCcOZKrhOXCUihR9dd
IejUQ5+8DHWGsGwkodayHFF0Og==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:30 2026 by rpki-client