
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier: pyTM+kjX933tyqnR4qJnoNuvN5JmwWPUJ56Vt/U4TWE=
Subject key identifier: BF:C8:B4:53:B6:58:39:58:D7:CD:FD:11:98:4B:B0:EA:45:23:BA:B2
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial: 06B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number: 06B7
Signing time: Thu 16 Apr 2026 22:16:35 +0000
Manifest this update: Thu 16 Apr 2026 22:16:35 +0000
Manifest next update: Thu 23 Apr 2026 22:16:35 +0000
Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: kL7vls65i0kai/u6WquJ5PPA3N+IXiSHqBAMHOviGkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 22:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Validity
Not Before: Apr 16 22:16:35 2026 GMT
Not After : Apr 23 22:16:35 2026 GMT
Subject: CN=69e15fc3-42c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:2e:cf:57:7a:09:f5:50:b7:19:34:3e:84:
67:b6:9a:42:0a:89:59:f4:e1:94:df:4b:dd:e3:90:
e7:d4:f4:eb:7d:d5:55:fe:ad:9c:03:97:81:63:2f:
58:1e:d8:a0:06:6e:02:c4:10:45:1c:74:8e:66:bc:
c7:7b:64:e2:fc:58:38:a3:f3:dd:cb:bb:66:51:78:
1d:b5:c7:2b:d0:17:0d:66:31:27:d1:ab:b3:f1:03:
8e:47:a6:b7:f0:3e:58:d3:4b:84:9c:6f:4c:cd:2e:
d5:09:79:52:a0:14:62:40:97:58:85:01:f5:99:d3:
e3:27:32:1b:d6:8d:04:48:34:90:bb:e1:2e:14:77:
6b:c6:e3:77:25:df:3c:ab:69:18:c3:f0:d3:67:bc:
a2:47:c8:f5:e5:63:5a:3c:cb:2d:a4:5d:23:1b:03:
1f:66:44:5a:d6:47:f2:5c:8a:7d:a1:0f:b1:57:59:
7d:0e:98:b0:88:4d:03:b9:ce:8c:59:36:f1:1f:50:
f7:2a:2d:eb:f6:75:ff:f4:19:74:93:60:c3:f1:39:
cf:0f:9c:df:44:73:f6:ba:b0:ce:ac:28:6f:33:ec:
1f:bb:e9:13:b1:8a:89:b1:02:8f:2f:ce:2b:8b:c8:
7d:f5:18:c7:5e:33:3a:a0:94:43:3e:70:62:cd:ff:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C8:B4:53:B6:58:39:58:D7:CD:FD:11:98:4B:B0:EA:45:23:BA:B2
X509v3 Authority Key Identifier:
keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:a1:5f:10:3e:91:e4:f1:29:9b:3d:05:6b:39:88:87:d3:e7:
03:fc:1f:ba:da:38:d5:f9:8d:29:b9:92:34:5f:b8:71:45:4c:
92:5f:cf:d6:3b:25:3b:37:67:66:3e:9c:0d:b6:8c:38:33:bb:
05:4b:e7:25:37:70:bb:ba:20:d1:49:55:ad:c5:a7:76:ee:42:
81:61:14:eb:0b:e9:4b:a2:09:23:fd:d3:9e:e7:0b:fb:37:aa:
88:e5:1b:60:79:2b:e3:85:00:75:be:e5:89:7c:f7:5c:36:8c:
35:b6:56:cc:00:11:cb:e0:70:b9:7f:4c:f7:6c:80:bd:82:a7:
77:f5:fc:4d:be:fb:26:87:43:a9:8a:28:56:5e:00:82:b2:14:
a7:e1:bd:5f:bb:65:65:47:21:b3:f6:37:e1:b9:73:2b:39:cb:
e2:e2:6b:84:c0:1c:b7:b7:a7:3f:06:13:33:bb:0f:f0:89:1a:
37:9b:97:40:ac:7a:c2:39:f1:5b:5d:ca:66:4d:6d:21:ef:72:
31:b5:d2:a7:0e:6f:27:54:b1:b6:3c:fc:18:d4:52:fd:0d:81:
08:e4:c7:16:98:aa:b4:b5:13:a4:81:79:19:20:b5:e5:51:95:
7b:23:54:51:21:22:4e:06:9c:31:bf:00:d5:bf:60:4b:eb:a2:
09:67:d1:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB
QkVFMENCOUUwHhcNMjYwNDE2MjIxNjM1WhcNMjYwNDIzMjIxNjM1WjAYMRYwFAYD
VQQDEw02OWUxNWZjMy00MmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Vsuz1d6CfVQtxk0PoRntppCColZ9OGU30vd45Dn1PTrfdVV/q2cA5eBYy9Y
HtigBm4CxBBFHHSOZrzHe2Ti/Fg4o/Pdy7tmUXgdtccr0BcNZjEn0auz8QOOR6a3
8D5Y00uEnG9MzS7VCXlSoBRiQJdYhQH1mdPjJzIb1o0ESDSQu+EuFHdrxuN3Jd88
q2kYw/DTZ7yiR8j15WNaPMstpF0jGwMfZkRa1kfyXIp9oQ+xV1l9DpiwiE0Duc6M
WTbxH1D3Ki3r9nX/9Bl0k2DD8TnPD5zfRHP2urDOrChvM+wfu+kTsYqJsQKPL84r
i8h99RjHXjM6oJRDPnBizf/PPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/ItFO2
WDlY1839EZhLsOpFI7qyMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6
MHk3cURzY0dZQ2lyN2d5NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZqFfED6R5PEpmz0FazmIh9PnA/wfuto41fmNKbmSNF+4cUVMkl/P1jslOzdn
Zj6cDbaMODO7BUvnJTdwu7og0UlVrcWndu5CgWEU6wvpS6IJI/3TnucL+zeqiOUb
YHkr44UAdb7liXz3XDaMNbZWzAARy+BwuX9M92yAvYKnd/X8Tb77JodDqYooVl4A
grIUp+G9X7tlZUchs/Y34blzKznL4uJrhMAct7enPwYTM7sP8IkaN5uXQKx6wjnx
W13KZk1tIe9yMbXSpw5vJ1Sxtjz8GNRS/Q2BCOTHFpiqtLUTpIF5GSC15VGVeyNU
USEiTgacMb8A1b9gS+uiCWfRnQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:32 2026 by rpki-client