
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier: hNd//737Y/oQjKvpnIpDRBI5HqNqN2AYsHcWoMjiUu4=
Subject key identifier: 75:90:5D:5A:90:CB:9C:D6:E7:3F:EA:24:33:B3:6E:03:09:3E:8F:EB
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number: 01A8
Signing time: Fri 17 Jul 2026 05:20:48 +0000
Manifest this update: Fri 17 Jul 2026 05:20:48 +0000
Manifest next update: Fri 24 Jul 2026 05:20:48 +0000
Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: 2pmvpriqKrz0OTUUc71bA93v+r1uCaee0ciVmFdl7tQ=)
2: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: S0GbV2uCmeoviSkKmr830JmB3p8jmN3VMhk4MtRUTHg=)
3: F72A12FA5C1311F1BF7F3AF193833773.roa (hash: mRNtO5ipsZo1qT2QZLktkRT25NV0Ov7UED9rbrgZkrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 05:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Validity
Not Before: Jul 17 05:20:48 2026 GMT
Not After : Jul 24 05:20:48 2026 GMT
Subject: CN=6a59bbb0-58d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:e1:74:e8:6a:6b:e8:3d:c3:c8:7b:61:ca:
1f:c3:21:84:1e:db:a9:3b:ee:a4:2d:66:2e:01:aa:
e8:8d:01:c7:ac:a5:2d:ed:e7:ea:4e:c1:48:a9:54:
17:29:d1:a0:a5:7c:bb:d3:09:e7:98:28:02:e1:66:
8a:ca:2a:27:a6:13:5f:a1:a7:c7:2c:cf:f5:fc:4e:
fc:8b:a1:12:7b:09:81:39:ea:87:1f:97:fe:d6:fa:
23:7b:3a:85:31:0d:f0:91:09:ef:db:f2:ff:22:69:
38:18:09:a2:6b:dc:9f:ae:c5:a3:3a:b8:23:ae:93:
36:18:5f:1c:e7:55:8b:1c:d4:ef:ed:e3:16:f6:4c:
af:5b:1c:b6:1d:e0:df:7d:4a:c0:37:d8:60:f6:7f:
0d:15:82:67:dd:c9:7d:f6:11:68:95:28:31:51:79:
de:49:9b:e1:b7:df:37:72:97:1c:ed:a6:87:78:cb:
54:56:12:f6:8a:79:b3:6d:98:ac:24:18:9e:1b:11:
1d:76:10:39:07:80:2d:bf:5e:24:b5:90:e5:eb:68:
a1:d0:b1:87:c9:13:76:30:eb:60:a0:37:2c:a0:19:
3a:c8:4d:13:97:76:4a:be:45:ec:b0:e0:62:a7:40:
28:f5:e4:02:0f:93:f6:f2:55:1b:e7:c5:70:89:47:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:5D:5A:90:CB:9C:D6:E7:3F:EA:24:33:B3:6E:03:09:3E:8F:EB
X509v3 Authority Key Identifier:
keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:01:32:5b:dd:5b:93:2e:76:29:ca:51:8c:4e:96:d6:3a:3b:
4c:27:d2:7f:6b:63:18:3b:4b:26:8e:98:18:4a:01:5a:7e:40:
1d:a6:6f:2d:8f:01:b0:58:90:56:53:0d:6f:03:2a:74:5c:7e:
62:b4:6a:2f:bb:df:dc:20:64:48:15:cb:13:6b:94:0f:b7:01:
38:83:46:4f:2a:50:72:9b:75:d4:7e:1f:60:04:c7:70:6c:5e:
1f:d2:dd:cd:0a:4e:14:37:25:ba:74:60:92:0e:d0:a8:98:1a:
97:ec:32:09:93:ab:5e:11:0e:7a:a0:78:15:53:32:c9:b4:28:
9f:f3:43:85:b9:ad:a5:e5:e4:2b:a2:cb:c0:b2:02:e8:09:df:
5e:c2:1e:4f:18:e2:9c:d3:35:35:87:d2:41:b4:cf:67:03:e3:
1c:ff:c8:65:50:60:65:a3:4f:0a:85:1e:ad:0a:9d:fc:e6:b8:
6c:89:5c:fc:de:67:2a:71:fd:d0:6b:22:0b:9c:50:e1:e6:54:
aa:ac:cd:67:4f:da:13:59:8e:cd:1a:a1:6d:a8:65:16:ec:be:
97:29:1f:76:35:07:b5:fe:bb:7d:c6:c7:f9:58:7c:6c:c2:2d:
58:ee:e7:30:b0:50:ce:21:22:df:64:59:ea:6b:57:9a:ba:c3:
41:43:9b:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4
RjU4QTc3RTUwHhcNMjYwNzE3MDUyMDQ4WhcNMjYwNzI0MDUyMDQ4WjAYMRYwFAYD
VQQDEw02YTU5YmJiMC01OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvW3hdOhqa+g9w8h7YcofwyGEHtupO+6kLWYuAarojQHHrKUt7efqTsFIqVQX
KdGgpXy70wnnmCgC4WaKyionphNfoafHLM/1/E78i6ESewmBOeqHH5f+1vojezqF
MQ3wkQnv2/L/Imk4GAmia9yfrsWjOrgjrpM2GF8c51WLHNTv7eMW9kyvWxy2HeDf
fUrAN9hg9n8NFYJn3cl99hFolSgxUXneSZvht983cpcc7aaHeMtUVhL2inmzbZis
JBieGxEddhA5B4Atv14ktZDl62ih0LGHyRN2MOtgoDcsoBk6yE0Tl3ZKvkXssOBi
p0Ao9eQCD5P28lUb58VwiUfx1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHWQXVqQ
y5zW5z/qJDOzbgMJPo/rMB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2
RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK
eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdwEyW91bky52KcpRjE6W1jo7TCfSf2tjGDtLJo6YGEoBWn5AHaZvLY8BsFiQ
VlMNbwMqdFx+YrRqL7vf3CBkSBXLE2uUD7cBOINGTypQcpt11H4fYATHcGxeH9Ld
zQpOFDclunRgkg7QqJgal+wyCZOrXhEOeqB4FVMyybQon/NDhbmtpeXkK6LLwLIC
6AnfXsIeTxjinNM1NYfSQbTPZwPjHP/IZVBgZaNPCoUerQqd/Oa4bIlc/N5nKnH9
0GsiC5xQ4eZUqqzNZ0/aE1mOzRqhbahlFuy+lykfdjUHtf67fcbH+Vh8bMItWO7n
MLBQziEi32RZ6mtXmrrDQUObSA==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:37 2026 by rpki-client