
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json)
Hash identifier: 60v5qNIs3/9/1Rf1olQEfaensCzXkWkzUr6DR//tpKY=
Subject key identifier: C3:5B:77:56:F5:76:15:BF:F4:22:2B:67:85:38:92:B4:CA:EB:7D:C8
Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Certificate serial: 3543
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
Manifest number: 3543
Signing time: Wed 20 May 2026 14:39:02 +0000
Manifest this update: Wed 20 May 2026 14:39:02 +0000
Manifest next update: Wed 27 May 2026 14:39:02 +0000
Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: AplQ9dL53DWuxRHC9bdkX6+T3AkOi2Bpa3/BNkvaPQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 14:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13635 (0x3543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058
Validity
Not Before: May 20 14:39:02 2026 GMT
Not After : May 27 14:39:02 2026 GMT
Subject: CN=6a0dc786-6f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e7:84:cf:44:90:ae:3c:01:19:26:ef:a3:02:
64:ad:b6:c4:d3:a3:5a:71:34:97:23:b7:6e:4f:58:
25:66:2f:0b:de:8a:da:a0:4e:ea:da:94:d4:60:9a:
18:f1:40:5c:31:48:47:8c:ef:a0:0f:66:a7:80:b3:
0b:57:9d:ef:51:d5:ad:43:be:af:c5:0f:ce:07:ce:
cf:0e:37:a9:a2:95:8a:27:07:31:50:ee:5c:01:c5:
cc:68:14:86:d2:0e:7d:de:ad:a8:78:98:6e:18:70:
af:37:47:56:bf:7e:b8:78:38:0d:a3:8d:03:bb:7a:
ba:24:c2:19:d6:2f:ac:97:97:05:36:60:62:78:bd:
48:03:b1:e1:a6:c7:d8:c9:cb:45:ca:b8:25:30:b7:
86:74:bd:52:e7:d2:8a:13:9f:32:56:e9:1c:cb:c9:
4a:3d:53:b5:f6:2f:de:c0:a6:fc:92:28:ed:6c:d7:
5f:4f:61:ae:86:a0:b7:3c:35:d1:24:2c:81:36:56:
fe:ac:45:cf:37:1e:1c:34:1a:aa:32:ba:92:e3:7b:
16:3b:40:f4:16:65:e7:33:0f:5e:d5:03:e5:6e:11:
a7:a5:e3:41:d5:e5:33:9a:4d:5e:cd:b2:a6:75:f4:
bf:ce:44:ff:fb:c8:1e:3e:3a:49:24:05:0c:7d:b8:
59:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:77:56:F5:76:15:BF:F4:22:2B:67:85:38:92:B4:CA:EB:7D:C8
X509v3 Authority Key Identifier:
keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:99:45:c2:58:c7:60:8a:d9:0f:87:54:c9:31:70:2a:ac:53:
f4:56:47:44:cd:41:6e:5d:d1:b6:d4:11:6d:f0:70:e2:d2:78:
3d:df:c7:8c:2c:26:5e:71:78:27:36:53:f7:0b:1f:b3:e2:c7:
24:8d:00:7d:d1:65:6f:71:24:3f:25:2c:02:2c:a8:2c:88:18:
c9:4f:61:57:f7:0f:5a:52:96:2e:ac:3e:e5:d7:29:a4:42:f7:
93:97:de:89:50:c1:e5:43:b6:e3:af:6c:68:4b:b2:60:cc:a0:
45:ad:1f:4b:f6:02:12:9a:69:49:97:fb:3d:36:ab:17:af:db:
95:b9:f1:5c:65:50:4d:fa:e2:c8:ff:a8:a1:c3:a5:b0:90:e4:
02:71:3e:65:37:58:91:fd:3e:ea:56:ab:31:c3:0d:fb:41:d9:
66:15:fc:6d:77:3c:ab:9e:3c:89:a5:dc:af:f3:d6:a6:ec:95:
36:bf:b8:79:9c:06:0d:c6:88:0d:28:e8:02:5a:2b:65:0c:24:
e9:66:af:38:35:4c:4a:59:37:cc:b3:30:c4:2c:d0:c2:ca:6c:
3b:dd:91:b3:a5:9d:e9:1e:fd:d3:cf:52:e9:52:9b:25:45:7c:
c7:fe:f8:bc:09:c4:60:1d:d4:e2:4a:ca:ff:00:91:2d:04:c1:
19:aa:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:10 2026 by rpki-client