
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier: lJm+2dIXojCE6BrPV+q2qqkUtZsOhDNB89wPg0oPUFQ=
Subject key identifier: C3:5F:67:AE:74:0C:DF:B5:7B:2A:C9:DF:65:88:D2:6A:21:6C:C6:CC
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number: 01FA
Signing time: Fri 31 Jul 2026 05:12:45 +0000
Manifest this update: Fri 31 Jul 2026 05:12:45 +0000
Manifest next update: Fri 07 Aug 2026 05:12:45 +0000
Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: aj+zemJasnHYDNHti2DIQye3tn0ZrJivlW4zH0ffsnc=)
2: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: DlhDgTG7w84Ovj2w/3S1GtqzEGfOWk6+fiHNLhzsPdE=)
3: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: EoV7X+CPLPt1PwJmt/C6xwl6Rd3EK1Ujxhgn/dIQJh4=)
4: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tkIQFKk/Mo9h+Y6zoIuiaKelqp3EP1aM68bZaSbBy0M=)
5: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: Et35taMHrzzZx//1uz1X2k2usz0PCpjA6ZgM0w/qGlc=)
6: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: yxilBFlE1MgXEF3lGJREKxdKcg1wggFTb7Z4QOAKfZc=)
7: FCF99042301011EFBC350682C4F9AE02.roa (hash: G76akd+Pz3BvQnQXHM+tIAwBqY1cYkiz3eE1RRYxTew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Aug 2026 05:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Validity
Not Before: Jul 31 05:12:45 2026 GMT
Not After : Aug 7 05:12:45 2026 GMT
Subject: CN=6a6c2ecd-08bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:d3:d3:d9:45:1f:2a:ac:d3:17:3e:52:90:
9f:d5:67:1f:a1:f8:91:25:fc:b4:9b:d7:05:02:6c:
fa:1a:4c:f8:bf:eb:81:c0:31:6f:eb:1d:aa:55:1b:
60:0c:b3:ba:90:01:6c:40:e8:f2:a4:f4:16:d9:1e:
75:0a:cb:ba:df:e1:00:0c:f6:21:fc:46:35:b4:69:
47:3a:76:fe:95:52:62:e3:77:8a:2e:ee:95:71:82:
e0:20:d1:34:ea:2c:de:15:7a:0e:4e:97:2e:61:9a:
ac:5a:45:2c:5d:db:52:ba:ef:19:df:bb:2d:f4:79:
ef:87:a7:a6:f4:95:8c:89:f4:c4:6f:81:19:61:03:
df:2a:e9:f4:8e:f8:2e:40:bb:09:a0:bb:b6:26:a9:
39:0a:bd:50:bc:ce:4a:45:35:b0:f5:cc:1a:47:0c:
d8:a3:c9:7b:fb:29:27:be:72:0f:5f:f4:82:20:f9:
ef:ee:fb:73:54:1d:d8:a0:b8:d6:a7:a5:cf:f1:39:
4d:2d:8f:fd:43:29:03:ce:2e:13:24:1d:8c:65:70:
82:f5:47:d0:d9:29:03:dd:2b:02:c8:cf:a9:c1:3d:
e0:a2:f1:25:57:a8:cc:12:a2:e3:ec:1c:2b:4e:51:
a4:86:bd:f7:7c:03:04:f5:4e:80:16:67:c4:6f:33:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:67:AE:74:0C:DF:B5:7B:2A:C9:DF:65:88:D2:6A:21:6C:C6:CC
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:40:d4:85:62:71:77:a6:40:b6:88:3b:01:7c:32:71:3d:4e:
31:c6:66:c3:aa:49:5f:c5:35:e2:8e:bf:ec:19:1a:02:e2:87:
7b:d0:39:2f:9c:63:aa:f2:49:02:61:95:11:2a:6d:77:b9:cb:
97:9c:d7:26:aa:a9:ca:b8:b7:48:9a:05:19:c5:96:10:8e:e6:
c0:06:a2:81:da:5a:5c:37:c9:9c:7a:f4:d0:fe:31:be:86:e2:
76:91:da:ad:8f:f2:97:fa:c1:59:fe:37:9e:a1:3c:b2:9f:01:
c9:99:26:4f:4b:30:85:f0:69:f9:05:e1:22:13:89:54:2c:e8:
b6:9e:2b:ea:24:65:1d:a4:a2:a7:d7:08:99:44:09:a1:88:db:
1f:e3:33:1d:8e:00:a5:60:e5:7e:32:c2:68:a3:05:8d:b0:43:
e9:95:7f:3a:dc:a3:e5:25:3f:ff:e4:f5:2a:bc:6a:d6:a1:ec:
5d:3d:90:65:cc:a9:b2:b0:c5:5f:f0:22:6a:2a:50:0b:ad:db:
8d:ae:6a:96:60:cb:b3:36:01:53:90:25:91:65:ba:39:2c:f1:
84:bf:49:91:16:ea:dc:da:7b:89:60:85:cb:e6:fb:d9:98:d5:
af:5e:43:50:ca:bc:ea:de:2d:ed:69:b0:66:7c:d0:ed:55:95:
72:99:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 10:16:57 2026 by rpki-client