
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File: QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier: CepuA6kHJ3Q8vdJg8qCRG3UZm+6UcY/eUYItkOgrhD4=
Subject key identifier: A0:38:97:FF:25:94:C3:6F:6B:9A:69:47:F4:37:B7:EE:1A:4D:F1:F0
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer: /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial: 01F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number: 01D4
Signing time: Thu 03 Sep 2026 03:59:01 +0000
Manifest this update: Thu 03 Sep 2026 03:59:00 +0000
Manifest next update: Thu 10 Sep 2026 03:59:00 +0000
Files and hashes: 1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: 6J3y6wKF9jFI8Mix3wwUb70ks8t2rLD4ieqH+t4GsiU=)
2: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: rKGQBFsWBoXRwkkEHmzJU4DziCIyRjQTWeYrnr/z7fc=)
3: 47142068221311EFB680F113C4F9AE02.roa (hash: R9+W9Vd8vNJv6BZYi/psQ14Bv23TuvOa9qtjBXGBpmg=)
4: 810265C29F8011F1A87DFCCB3B11F970.roa (hash: zEY+APVLW4gBdXNT2IbS0X3FvTuHb5f84oamsnoooSc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 03:58:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Validity
Not Before: Sep 3 03:59:00 2026 GMT
Not After : Sep 10 03:59:00 2026 GMT
Subject: CN=6a98f085-f55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:a5:d3:7e:f9:25:45:d8:38:ca:48:37:5e:
f3:eb:bd:b0:f6:18:92:eb:52:3a:ca:f9:3a:e2:03:
57:5e:47:c7:e2:94:d6:4c:56:00:91:f3:b4:2e:9f:
2c:60:4e:a6:c3:7c:04:1a:7a:29:98:0d:fb:52:fd:
d5:22:9a:d8:4c:1c:ea:91:c4:b3:85:2f:48:13:ff:
dd:73:c2:eb:6b:9f:a3:1b:ad:6d:41:84:bd:cf:e2:
09:e6:53:2a:a3:e7:34:a8:ee:7d:ae:78:a7:9b:ba:
50:ec:fe:5a:46:b1:22:66:ce:e5:44:56:df:e5:3f:
80:3c:c1:9c:06:94:db:43:48:7e:61:0a:6a:61:dc:
23:93:a9:19:ce:3d:20:5d:07:6d:61:62:ed:0b:07:
7f:63:97:c8:1e:d4:34:af:c1:73:a0:96:26:e6:26:
34:b8:41:00:60:30:5a:9e:d7:e2:7c:6c:bc:ba:b9:
9a:b8:d3:b5:62:ea:51:4a:9c:cd:10:4a:aa:88:74:
15:7e:5c:96:96:a9:a8:0e:6d:08:7d:1f:7b:4f:6d:
0a:21:69:04:8d:35:b6:19:9a:ff:80:95:81:9c:cf:
22:f3:f1:33:44:bc:39:2a:12:0b:40:09:66:84:04:
0e:86:51:3a:2a:9e:fa:54:53:65:e6:58:2b:29:5f:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:38:97:FF:25:94:C3:6F:6B:9A:69:47:F4:37:B7:EE:1A:4D:F1:F0
X509v3 Authority Key Identifier:
keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:94:cf:98:90:6c:4d:90:74:df:bc:0e:d7:aa:f4:c6:ef:c6:
85:c2:f0:20:71:90:cb:e4:44:b1:fa:9f:97:75:aa:b4:3c:8f:
a6:4f:5e:95:4a:ce:04:4e:1a:fa:43:d5:f4:83:1d:e1:cd:2f:
f9:2b:73:d2:4c:c6:6f:86:c7:7b:d1:23:63:0f:13:8c:d2:0f:
73:52:ed:9c:9a:92:58:df:61:38:f5:1a:12:93:bb:f0:bd:9a:
37:31:25:b4:86:91:d0:5e:49:5c:6b:2e:b2:ca:c9:40:0d:7a:
80:57:95:d3:c4:c7:c7:6a:50:b6:cd:b2:93:20:62:2d:d4:73:
1e:b3:f3:50:96:9f:42:e9:a0:aa:a6:4f:83:5c:60:f2:d9:31:
62:f4:e4:68:fa:a6:38:29:d2:c6:d0:e2:1c:48:90:c6:a3:00:
89:d4:dd:46:9b:d5:06:8f:37:ec:f2:db:52:73:bb:7a:8c:75:
d0:a7:c3:49:68:4d:6d:98:e3:f8:50:3f:ca:56:c7:72:ca:b8:
e5:cd:99:28:c1:ff:d2:9c:4a:4c:b8:34:84:0e:66:d0:8b:3d:
eb:74:4d:98:6c:3a:8e:4a:b0:a3:cf:a5:a6:6d:d6:8e:45:18:
9e:2f:60:f0:15:ff:0c:43:fa:28:65:95:ff:44:f8:c0:57:09:
54:48:24:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU3Q0IxMTAvBgNVBAUTKDQxMjEzQjJGNUYyNDI5RkMzMjhFQzNGNEU5NUQ1ODg2
NDAyRkVCNjkwHhcNMjYwOTAzMDM1OTAwWhcNMjYwOTEwMDM1OTAwWjAYMRYwFAYD
VQQDEw02YTk4ZjA4NS1mNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcyl0375JUXYOMpIN17z672w9hiS61I6yvk64gNXXkfH4pTWTFYAkfO0Lp8s
YE6mw3wEGnopmA37Uv3VIprYTBzqkcSzhS9IE//dc8Lra5+jG61tQYS9z+IJ5lMq
o+c0qO59rninm7pQ7P5aRrEiZs7lRFbf5T+APMGcBpTbQ0h+YQpqYdwjk6kZzj0g
XQdtYWLtCwd/Y5fIHtQ0r8FzoJYm5iY0uEEAYDBantfifGy8urmauNO1YupRSpzN
EEqqiHQVflyWlqmoDm0IfR97T20KIWkEjTW2GZr/gJWBnM8i8/EzRLw5KhILQAlm
hAQOhlE6Kp76VFNl5lgrKV8JzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKA4l/8l
lMNva5ppR/Q3t+4aTfHwMB8GA1UdIwQYMBaAFEEhOy9fJCn8Mo7D9OldWIZAL+tp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80NTlCMEM2NEYy
RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tmd3lqc1AwNlYxWWhrQXY2
MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FTRTdMMThrS2Z3eWpzUDA2VjFZaGtBdjYyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTdDQi80NTlCMEM2NEYyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9RU0U3TDE4a0tm
d3lqc1AwNlYxWWhrQXY2MmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARJTPmJBsTZB037wO16r0xu/GhcLwIHGQy+REsfqfl3WqtDyPpk9elUrOBE4a
+kPV9IMd4c0v+Stz0kzGb4bHe9EjYw8TjNIPc1LtnJqSWN9hOPUaEpO78L2aNzEl
tIaR0F5JXGsussrJQA16gFeV08THx2pQts2ykyBiLdRzHrPzUJafQumgqqZPg1xg
8tkxYvTkaPqmOCnSxtDiHEiQxqMAidTdRpvVBo837PLbUnO7eox10KfDSWhNbZjj
+FA/ylbHcsq45c2ZKMH/0pxKTLg0hA5m0Is963RNmGw6jkqwo8+lpm3WjkUYni9g
8BX/DEP6KGWV/0T4wFcJVEgkBg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:16:36 2026 by rpki-client