
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier: 9EG4ap119e5RDlNQ9Kl+RpV2ZO5ATTKIIsB5T925FlA=
Subject key identifier: 37:59:0C:AC:DD:20:8C:7A:C6:80:D3:30:14:D4:49:F1:9E:16:D7:E7
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 19DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number: 199C
Signing time: Tue 28 Jul 2026 16:30:35 +0000
Manifest this update: Tue 28 Jul 2026 16:30:35 +0000
Manifest next update: Tue 04 Aug 2026 16:30:35 +0000
Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: 5R0mTfZZZEJ0domkxSSC6gObAyB/X2eW/nQ0q9V/6QM=)
2: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
4: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6623 (0x19df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Jul 28 16:30:35 2026 GMT
Not After : Aug 4 16:30:35 2026 GMT
Subject: CN=6a68d92b-cf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:04:4f:2f:d5:07:d9:88:95:f6:5f:6b:f7:
46:02:60:9a:7c:7f:d8:6b:4c:af:65:c2:80:43:38:
de:87:ba:81:f1:e0:48:1e:e8:e8:1a:92:1e:82:8e:
d3:74:4a:e4:65:ff:93:b4:c5:e1:3a:63:01:3c:60:
54:07:70:02:af:6f:8e:e7:a0:e8:a2:e0:49:67:e8:
9c:11:1b:94:56:10:09:96:de:a1:4d:e4:3c:52:2f:
c8:d2:bc:42:af:8f:c6:2b:71:0d:c9:fa:35:ab:60:
b5:8e:79:42:6e:00:b7:c8:97:2c:60:87:c3:38:31:
33:df:fd:0d:b6:e3:11:74:bd:58:71:1e:c1:90:6b:
45:1f:f0:f6:ee:3b:11:72:98:9e:8f:ec:f7:04:00:
cc:68:67:39:14:d6:70:b3:d5:e1:26:91:4b:5e:09:
27:03:a2:0e:e4:14:82:16:bc:d8:d2:00:e1:d0:47:
65:be:f9:05:77:13:4a:15:cf:a1:92:55:81:11:1c:
84:49:9a:e4:0d:0d:db:05:90:4a:0f:a9:d4:9c:08:
9f:f9:22:f3:4e:f0:a1:3f:74:c9:92:7d:df:f9:02:
54:a5:b7:3e:21:71:8b:95:ad:60:7b:9b:09:10:02:
83:22:95:2a:9c:38:42:90:d9:e3:df:c9:28:dd:bb:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:59:0C:AC:DD:20:8C:7A:C6:80:D3:30:14:D4:49:F1:9E:16:D7:E7
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:e3:c6:24:04:c9:fc:d1:0c:b7:e4:d3:da:33:4b:5a:4d:ac:
22:01:50:1d:b9:24:2f:78:7f:ab:f6:d3:75:ab:6c:95:63:94:
ef:33:e3:09:19:06:ea:fc:c6:a1:3f:bd:e0:ee:b7:25:05:07:
7d:71:39:23:8e:59:c7:9f:64:15:35:b8:3d:9d:27:fc:a3:37:
09:6f:f2:00:76:d4:c1:44:59:74:18:25:8b:1a:c3:75:32:e3:
47:7c:f3:58:dc:96:a3:3f:48:0c:94:d3:9a:28:30:fa:92:65:
0a:8e:35:52:8b:57:a9:84:cd:e0:f7:db:5f:64:fc:ec:c8:c9:
37:a3:b9:52:4a:eb:ea:d2:d1:3e:1c:1b:b8:d7:c8:ce:2b:26:
6f:a2:fa:f4:6f:41:84:7d:f1:eb:f8:0c:aa:a4:b1:35:56:a0:
69:31:44:59:86:00:5e:6b:3e:68:79:24:ec:16:53:d4:c7:da:
0b:60:c9:fd:34:4b:fb:f4:67:85:fc:79:16:b9:79:3d:15:d5:
76:d1:9c:8d:24:d9:ec:57:bd:b1:8a:de:c9:38:36:9e:0d:bc:
9a:03:d1:46:2e:51:a5:5a:0c:17:8a:14:ee:53:26:fa:cc:6a:
1d:03:e7:5e:6d:50:4b:89:46:c6:45:e6:07:38:74:9d:f1:b5:
d4:eb:76:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF
MkQxMUExQTYwHhcNMjYwNzI4MTYzMDM1WhcNMjYwODA0MTYzMDM1WjAYMRYwFAYD
VQQDEw02YTY4ZDkyYi1jZjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0koETy/VB9mIlfZfa/dGAmCafH/Ya0yvZcKAQzjeh7qB8eBIHujoGpIego7T
dErkZf+TtMXhOmMBPGBUB3ACr2+O56DoouBJZ+icERuUVhAJlt6hTeQ8Ui/I0rxC
r4/GK3ENyfo1q2C1jnlCbgC3yJcsYIfDODEz3/0NtuMRdL1YcR7BkGtFH/D27jsR
cpiej+z3BADMaGc5FNZws9XhJpFLXgknA6IO5BSCFrzY0gDh0EdlvvkFdxNKFc+h
klWBERyESZrkDQ3bBZBKD6nUnAif+SLzTvChP3TJkn3f+QJUpbc+IXGLla1ge5sJ
EAKDIpUqnDhCkNnj38ko3buqHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdZDKzd
IIx6xoDTMBTUSfGeFtfnMB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5
MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT
ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOePGJATJ/NEMt+TT2jNLWk2sIgFQHbkkL3h/q/bTdatslWOU7zPjCRkG6vzG
oT+94O63JQUHfXE5I45Zx59kFTW4PZ0n/KM3CW/yAHbUwURZdBglixrDdTLjR3zz
WNyWoz9IDJTTmigw+pJlCo41UotXqYTN4PfbX2T87MjJN6O5Ukrr6tLRPhwbuNfI
zismb6L69G9BhH3x6/gMqqSxNVagaTFEWYYAXms+aHkk7BZT1MfaC2DJ/TRL+/Rn
hfx5Frl5PRXVdtGcjSTZ7Fe9sYreyTg2ng28mgPRRi5RpVoMF4oU7lMm+sxqHQPn
Xm1QS4lGxkXmBzh0nfG11Ot2pg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:22 2026 by rpki-client