
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
File: qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json)
Hash identifier: WUvHT3ooJnQyax//XH7GzO/22ncRfMgZ16H2JpMbRQs=
Subject key identifier: 83:91:84:90:89:03:CB:02:91:EF:F8:B1:C3:83:4C:5F:BC:D5:17:D9
Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
Certificate issuer: /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Certificate serial: 07A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
Manifest number: 07A0
Signing time: Sun 26 Jul 2026 22:13:23 +0000
Manifest this update: Sun 26 Jul 2026 22:13:22 +0000
Manifest next update: Sun 02 Aug 2026 22:13:22 +0000
Files and hashes: 1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: sp/ZIiM2zVEiT4mxi9Fcym1ryz9emzFy6Ci4eKqj5kI=)
2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: +zXdWbj90V5wiCW78x9iWppvFwiybMcG8sAJuI2k4as=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 22:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959 (0x7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Validity
Not Before: Jul 26 22:13:22 2026 GMT
Not After : Aug 2 22:13:22 2026 GMT
Subject: CN=6a668682-304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:ed:3c:ab:03:d0:16:cc:dc:b9:ad:8c:7a:
96:7c:cb:ec:42:5c:26:ba:b6:da:1d:f0:42:a8:89:
34:67:76:d6:83:eb:d7:90:c6:2d:4f:63:a1:1f:7d:
6f:19:7b:b0:86:20:ef:e2:e1:60:df:9b:86:52:8c:
f7:41:4e:cf:ec:df:69:bb:97:e9:e7:fe:7a:94:2a:
6e:57:54:64:e8:28:7b:48:64:52:82:94:35:66:02:
da:e9:fc:0b:e8:a0:75:07:df:99:f6:17:d3:c3:74:
af:b2:0d:f3:2c:d4:bb:bf:91:6c:0d:c2:1e:55:16:
ad:48:22:cc:7c:20:5d:73:8c:33:53:ae:a4:81:8c:
bf:fb:f6:8e:f6:d8:18:55:26:f0:57:98:73:7e:f7:
d5:b6:6c:2d:ee:0d:d8:ea:2e:2e:3e:16:9f:38:b9:
92:cf:34:7d:19:17:b1:7a:c3:a6:39:43:13:d7:b6:
c6:d0:23:36:a8:03:81:2d:98:ae:75:72:ba:1d:f8:
90:5a:00:de:c6:71:ba:41:bf:3b:15:36:15:37:e4:
3f:80:cf:6c:61:ff:6e:0c:ea:1f:3f:72:dc:22:0c:
ff:1b:c0:cc:1a:d7:eb:9f:99:c5:54:0c:7f:b3:ef:
7b:ce:08:79:24:c8:49:b3:8e:08:d0:19:63:95:8c:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:84:90:89:03:CB:02:91:EF:F8:B1:C3:83:4C:5F:BC:D5:17:D9
X509v3 Authority Key Identifier:
keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:c9:fb:95:a9:26:3d:70:3e:f8:81:bd:85:31:ef:0b:25:45:
a9:f3:2f:eb:ae:15:38:65:b3:47:f1:33:a5:43:ce:ba:d4:d1:
48:e7:9e:9d:33:67:3d:1d:a7:82:45:c5:87:47:34:7b:e3:d7:
45:7d:78:55:e2:f8:72:77:f3:61:c9:27:60:7d:7b:a3:f0:ce:
16:0f:fa:4c:a4:8b:37:f4:d1:15:26:49:a3:0f:94:b6:d4:c5:
12:17:60:c4:3c:9b:4b:d1:2d:5a:12:35:58:b7:8b:e9:75:53:
3a:67:42:c9:c3:88:5c:86:2e:90:ec:41:3e:d1:40:a3:b6:bd:
c8:92:56:46:6a:4d:3f:3e:ac:2d:d3:40:f6:08:01:8b:d3:ab:
63:1c:20:ac:6a:c4:26:89:aa:bc:e7:e5:0c:d3:df:32:76:3f:
cd:9e:b1:a1:8d:81:05:f0:7a:2a:f1:e4:fe:98:77:49:56:f3:
b1:3b:5a:b4:f8:2f:7c:44:0e:3e:e9:84:ef:d9:d6:6f:25:aa:
82:d4:83:56:5f:37:0e:78:01:34:5a:e4:85:04:0f:10:15:a4:
29:c9:df:28:9f:cb:8e:db:82:d8:17:2d:04:c5:7b:0e:ee:93:
ce:6f:c5:f9:48:ea:a9:61:da:f3:60:11:78:61:1b:03:78:53:
a1:f1:e3:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTIzN0ExMTAvBgNVBAUTKEE5MjMyMDEyRjJGQzA1NDI2QzA2ODgzNThDRkU2RkI5
MTU0Nzg2QkMwHhcNMjYwNzI2MjIxMzIyWhcNMjYwODAyMjIxMzIyWjAYMRYwFAYD
VQQDEw02YTY2ODY4Mi0zMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApQrtPKsD0BbM3LmtjHqWfMvsQlwmurbaHfBCqIk0Z3bWg+vXkMYtT2OhH31v
GXuwhiDv4uFg35uGUoz3QU7P7N9pu5fp5/56lCpuV1Rk6Ch7SGRSgpQ1ZgLa6fwL
6KB1B9+Z9hfTw3Svsg3zLNS7v5FsDcIeVRatSCLMfCBdc4wzU66kgYy/+/aO9tgY
VSbwV5hzfvfVtmwt7g3Y6i4uPhafOLmSzzR9GRexesOmOUMT17bG0CM2qAOBLZiu
dXK6HfiQWgDexnG6Qb87FTYVN+Q/gM9sYf9uDOofP3LcIgz/G8DMGtfrn5nFVAx/
s+97zgh5JMhJs44I0BljlYzesQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIORhJCJ
A8sCke/4scODTF+81RfZMB8GA1UdIwQYMBaAFKkjIBLy/AVCbAaINYz+b7kVR4a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM3QS9FODgyRTQ2QzVC
QTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJVSnNCb2cxalA1dnVSVkho
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FTTWdFdkw4QlVKc0JvZzFqUDV2dVJWSGhydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjM3QS9FODgyRTQ2QzVCQTAxMUVCQUVCRTUzMjlDNEY5QUUwMi9xU01nRXZMOEJV
SnNCb2cxalA1dnVSVkhocncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUsn7lakmPXA++IG9hTHvCyVFqfMv664VOGWzR/EzpUPOutTRSOeenTNnPR2n
gkXFh0c0e+PXRX14VeL4cnfzYcknYH17o/DOFg/6TKSLN/TRFSZJow+UttTFEhdg
xDybS9EtWhI1WLeL6XVTOmdCycOIXIYukOxBPtFAo7a9yJJWRmpNPz6sLdNA9ggB
i9OrYxwgrGrEJomqvOflDNPfMnY/zZ6xoY2BBfB6KvHk/ph3SVbzsTtatPgvfEQO
PumE79nWbyWqgtSDVl83DngBNFrkhQQPEBWkKcnfKJ/LjtuC2BctBMV7Du6Tzm/F
+UjqqWHa82AReGEbA3hTofHjvA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:50 2026 by rpki-client