
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier: i0WTOxuvk9ICXEwPajhRwh75QZdRn9frBTW0wsWTWbU=
Subject key identifier: 48:39:AA:3C:C6:29:B2:45:18:39:1D:F5:2A:0E:0F:B6:06:D9:DA:6A
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 1975
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number: 194A
Signing time: Sat 28 Feb 2026 16:30:05 +0000
Manifest this update: Sat 28 Feb 2026 16:30:05 +0000
Manifest next update: Sat 07 Mar 2026 16:30:05 +0000
Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: q3uJ3qH0C6HJDLKvJcRN1ewTsfa9OBYRaWsTRWOaHEw=)
2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: /HjqJb3HeVbYY01kD6wIaTbG/Ekr2hN/Y4VOZSnVUZ8=)
3: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: wXQTHLnxlobISfO/uP19l950cYfOxZoHNCPztVyG7Ow=)
4: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: irpR0h3jscaijLl59Cc3m/8UUXHvczEBFVSowrAT4Uk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6517 (0x1975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Feb 28 16:30:05 2026 GMT
Not After : Mar 7 16:30:05 2026 GMT
Subject: CN=69a3180d-9df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:45:09:d0:ba:a7:40:66:16:cf:a6:40:6c:
68:67:a6:07:9a:10:fa:03:cb:74:ff:7d:fe:21:cf:
b2:c9:32:c9:31:41:2d:21:ca:a6:e0:50:56:3a:9a:
d5:0f:6c:92:d2:b6:1b:8d:43:26:83:b2:fe:c3:d7:
15:4b:6f:3d:5e:6e:34:31:0e:13:5d:c1:51:a2:a6:
6d:d4:7b:32:66:ed:28:7c:4e:36:6a:9a:4b:50:94:
b3:43:57:98:85:5e:10:96:d8:28:7a:9d:60:d2:ae:
00:68:9b:5d:1a:ed:8a:ca:e8:4c:3c:0c:fb:cc:a2:
51:59:26:76:1f:c3:29:36:b8:3f:40:e9:49:85:ba:
6b:f9:f2:28:c1:88:c1:0d:9e:f6:c2:42:64:f7:3d:
d2:78:06:40:c7:c6:8b:f0:e3:36:1f:45:54:d9:a4:
1b:36:9f:26:38:a3:8e:f2:3f:b7:35:08:97:a0:c4:
9e:2b:c3:3c:38:68:77:ab:70:11:4c:7a:d5:4c:bb:
7b:db:26:5e:15:0c:c2:a7:16:09:e2:00:1e:d7:5d:
ba:e1:8b:87:24:ab:0d:6a:76:5e:8e:3f:b2:d7:1e:
01:2e:33:f8:4d:0a:5f:90:75:f3:d4:89:da:89:ba:
65:d3:bc:bf:62:aa:a8:1c:9c:5c:21:e5:5e:e4:99:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:39:AA:3C:C6:29:B2:45:18:39:1D:F5:2A:0E:0F:B6:06:D9:DA:6A
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:6d:b3:84:5d:42:9d:7c:22:d7:00:f0:31:96:ef:50:bb:cc:
b3:89:7e:a6:0b:69:3e:11:d5:bb:28:46:da:d5:ca:9e:d5:1a:
cc:67:81:99:36:31:46:eb:16:25:03:05:fd:c4:ea:58:c4:03:
a6:de:bf:da:32:4e:f0:d5:c8:f9:65:9f:dd:77:30:16:28:a2:
ae:b9:9e:56:d6:9a:34:f0:90:a1:d2:0c:dc:0f:2c:4e:33:e8:
b5:b5:d2:88:d8:3a:e6:46:2e:a8:1b:89:57:fa:4a:fd:d2:f9:
56:04:84:96:6b:c6:6a:28:63:1a:0a:89:ad:12:64:77:1b:b7:
9a:ea:1d:1d:f6:31:b0:a2:12:e3:f7:0a:af:4b:96:84:52:2f:
12:3d:70:ab:bf:b8:af:a6:22:98:17:4b:ac:54:22:c9:c6:19:
fd:53:75:db:5f:8a:61:7d:02:15:af:f0:c8:ab:e0:08:b7:f6:
88:21:5a:34:cb:de:ca:7c:98:eb:48:d4:e1:cc:1a:34:17:5e:
a6:4b:b7:b0:79:ad:af:1c:bd:d2:cf:8d:9a:9d:06:f9:f9:7b:
24:b8:f4:ab:b7:19:51:8d:16:a2:01:a3:a0:5d:d3:ad:ef:16:
55:dd:b3:a9:50:02:e7:6e:79:19:db:ca:d4:31:dd:7a:b7:78:
61:19:0e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:48 2026 by rpki-client