
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json)
Hash identifier: YUKwcstiqMfR37BvaOUfl44TiEnsvsmJPIzrgjFXvN8=
Subject key identifier: 40:19:0C:F0:A0:A8:F4:F0:07:57:24:19:17:EE:3C:45:29:AF:FD:03
Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Certificate serial: 1929
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
Manifest number: 191B
Signing time: Tue 18 Aug 2026 16:34:51 +0000
Manifest this update: Tue 18 Aug 2026 16:34:50 +0000
Manifest next update: Tue 25 Aug 2026 16:34:50 +0000
Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: J0RRIdR9j+nEU29lN8R5kpwlys7ttluJlT+kWhNTdxs=)
2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: abf25FbH719hRhMiSj4RTqIJD+/I5r3H2hRBfJwMFgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 16:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6441 (0x1929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B
Validity
Not Before: Aug 18 16:34:50 2026 GMT
Not After : Aug 25 16:34:50 2026 GMT
Subject: CN=6a8489ab-e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:ed:40:d6:52:5a:88:b2:73:0a:ee:b1:6a:
7e:bb:23:67:ef:7c:46:9a:62:25:c1:ce:48:90:67:
4c:0c:e6:9d:8f:00:aa:b3:52:2e:13:ec:74:f4:2b:
a2:14:fd:8f:d8:0d:3d:1f:bc:a0:ba:9a:1a:d4:8b:
53:01:50:7d:b7:75:d6:ee:c2:84:e6:d7:4e:e2:33:
b6:7f:11:e4:7d:98:4e:6f:99:59:8a:5e:a5:ae:dd:
72:ad:d8:8d:d1:23:2e:de:07:63:2f:bb:4b:01:b3:
95:b5:65:4a:ae:ee:13:b7:2d:3f:e1:97:90:cb:ec:
1f:17:db:58:c2:76:30:47:a9:86:fe:79:91:63:81:
0a:72:9c:92:59:59:43:4f:07:cf:d2:03:69:fc:c1:
61:98:64:2b:01:17:58:58:87:ee:68:8a:e4:a5:01:
d9:82:c3:8a:57:0f:13:09:2e:3a:db:8a:ea:72:3f:
6e:4f:b7:53:09:5a:88:22:c9:67:bf:78:0b:9f:d8:
45:77:a2:a6:52:80:31:55:eb:34:8a:30:39:0f:58:
ca:6a:67:f1:42:16:c5:b7:a1:32:5f:41:6a:85:85:
05:17:4c:83:f8:aa:fa:13:90:b9:24:af:d2:9e:c1:
ec:79:a7:31:25:18:7c:8c:d6:5f:81:62:a5:60:f2:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:0C:F0:A0:A8:F4:F0:07:57:24:19:17:EE:3C:45:29:AF:FD:03
X509v3 Authority Key Identifier:
keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:9d:05:00:66:5a:99:5c:45:02:24:eb:e2:30:78:cd:ff:4d:
50:c0:71:c2:0b:b4:70:6e:b9:6b:aa:50:7e:28:f4:b9:4c:d1:
4e:e4:a7:e9:a0:13:5f:8f:93:34:94:7d:5d:43:ff:5d:39:a8:
bc:f0:8f:2c:c8:97:9e:2b:79:9a:88:36:b9:3d:c1:d3:ec:c9:
14:98:d7:c8:2f:d2:de:0f:26:e0:13:41:fe:59:38:eb:bc:83:
56:44:ed:a5:48:7e:03:51:78:ed:88:8e:80:7a:14:88:22:d2:
fe:75:6d:d1:13:ef:55:07:43:3e:e0:9f:2d:9f:dd:6a:d0:cf:
0f:b2:f1:88:63:ea:b3:1d:21:0f:f6:f4:49:51:f0:b1:ba:db:
91:15:f5:8b:35:3a:3c:73:cb:3a:fa:fe:fb:f4:db:79:31:4a:
97:34:f9:cd:76:4d:63:e4:86:2f:b7:e8:ad:ca:6b:e2:a8:c4:
26:d4:ac:fd:72:78:28:7c:42:d3:dd:f9:79:92:99:a7:eb:d0:
4c:18:3a:d1:d4:6d:a8:eb:4f:60:dd:0e:dd:50:d7:f5:aa:e7:
56:0a:e0:e6:0b:f1:ba:85:a3:f5:19:7f:ab:75:7f:46:c3:eb:
58:ea:81:0e:66:f4:e9:70:a3:1f:78:bd:5f:61:8a:c3:0d:88:
a7:5f:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:39 2026 by rpki-client