
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier: UekSRUurOFVE6Hg7uMsySxhxAQ7jSnSlcZwoDicO9yU=
Subject key identifier: 51:4B:BE:DE:A3:10:BC:B0:F6:46:7A:6C:B9:68:67:EF:DE:F2:E1:BE
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number: 01B1
Signing time: Wed 11 Mar 2026 03:42:41 +0000
Manifest this update: Wed 11 Mar 2026 03:42:41 +0000
Manifest next update: Wed 18 Mar 2026 03:42:41 +0000
Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: qDzE5B9pQE/hbbD3tfO9QgHWPUjp3/I+rCNmx6BvMXY=)
2: FCF99042301011EFBC350682C4F9AE02.roa (hash: Gp1KX3pdnrlSvDAJ20hG9D6pIJ2t6fsfaUValhhyxHI=)
3: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: onDMrjjQ14icCq/5REdHdzngDzUao5E9MVfp/qWaZvc=)
4: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: djP439PV+bB6f/PEqXTLBnLRW09ZGvFx+3wLd3DXu9A=)
5: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: LEMt/Yfn5HB27yq040h/X2ZpeZ06WvUDmE6FF+n/xcg=)
6: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: fSUiL2knLy7NpgkmM8gcogpyWEWfXu055rthPlYELwM=)
7: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: Uz5YIB2qHzCEXEXaaIxzPkDCZiRONtPBbETQ8up2rL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 03:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Validity
Not Before: Mar 11 03:42:41 2026 GMT
Not After : Mar 18 03:42:41 2026 GMT
Subject: CN=69b0e4b1-a15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:60:05:ba:52:5d:59:a1:46:88:18:0f:7b:
58:af:83:9c:78:b5:84:54:a7:c9:ea:28:18:94:57:
9a:d7:91:50:68:9b:30:0f:df:ad:78:1e:00:8c:29:
99:ae:92:fc:9d:4d:ad:ec:cb:54:7e:8a:d6:4d:8a:
38:50:9f:36:f1:08:17:52:19:53:52:7d:fe:db:e0:
3d:e0:78:01:d1:1d:b4:58:1a:cf:5a:05:1f:ad:db:
e4:2c:e7:f3:5b:3f:32:d3:e2:d0:da:c7:42:db:0d:
44:37:06:8f:57:9f:92:5a:d9:cc:71:bd:00:c7:09:
16:58:65:8b:2d:7b:d2:65:e3:6c:dc:19:ab:86:0f:
64:98:8a:7b:d7:2f:af:bb:87:02:de:54:81:de:b8:
98:69:e6:f8:9b:41:e1:86:66:55:64:98:a6:bc:9d:
65:06:6e:66:30:18:76:8c:10:1e:3c:5b:c1:f4:a6:
50:b1:6f:89:9b:db:c0:9f:a8:03:20:c0:95:fd:ba:
da:8d:44:36:b9:1d:e7:34:1e:a0:7b:35:dc:f2:e8:
50:1d:ca:04:a5:2d:b6:18:f4:f3:a1:6e:90:da:f4:
32:39:19:1b:70:aa:bc:6e:42:f8:04:26:de:d5:2c:
a9:bc:6f:11:e7:ff:89:ed:19:76:ff:d2:76:ab:44:
82:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4B:BE:DE:A3:10:BC:B0:F6:46:7A:6C:B9:68:67:EF:DE:F2:E1:BE
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:85:3e:21:52:30:e2:b7:66:63:ec:e3:47:fd:59:2a:89:
f9:16:e7:7a:f7:2e:14:67:f7:91:75:19:a3:e8:dc:70:fc:e0:
d0:71:f5:ea:ad:31:a4:d0:29:fc:04:d5:d3:f5:c3:ca:27:7e:
a8:e0:8a:e8:a4:29:e1:d7:41:ce:5c:a8:4a:c5:51:96:48:25:
01:0c:c4:fb:1d:3e:b5:92:4d:7a:dc:5e:3c:de:8c:39:95:a9:
d2:5d:a7:6c:55:d6:3d:55:dc:62:44:65:81:61:15:b9:ef:55:
36:70:e4:c0:e7:1a:1b:bb:ab:47:da:a2:bd:5f:df:ea:da:ef:
a5:7b:e5:ca:47:fd:2b:b4:1c:66:45:b1:d9:5a:2c:88:4e:fd:
53:00:d5:e4:e4:68:fd:04:6a:ef:99:b4:41:8d:df:c6:91:ef:
2f:96:0e:dd:5a:23:70:e2:c2:a5:80:2e:62:55:0d:f3:20:35:
1d:af:7b:4f:83:14:81:b3:80:42:d9:80:d2:97:e9:87:32:65:
4b:1b:1f:c2:4b:4d:bd:62:90:6e:8d:0c:f1:48:19:a0:4d:d3:
77:5d:f2:31:f3:ed:48:6f:27:15:a5:91:dd:80:9c:64:3a:c8:
66:8a:23:b8:c2:69:11:c9:e1:c1:9c:14:89:26:34:f1:78:b5:
7b:60:85:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw
QkVDQUE5QTkwHhcNMjYwMzExMDM0MjQxWhcNMjYwMzE4MDM0MjQxWjAYMRYwFAYD
VQQDEw02OWIwZTRiMS1hMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdtgBbpSXVmhRogYD3tYr4OceLWEVKfJ6igYlFea15FQaJswD9+teB4AjCmZ
rpL8nU2t7MtUforWTYo4UJ828QgXUhlTUn3+2+A94HgB0R20WBrPWgUfrdvkLOfz
Wz8y0+LQ2sdC2w1ENwaPV5+SWtnMcb0AxwkWWGWLLXvSZeNs3Bmrhg9kmIp71y+v
u4cC3lSB3riYaeb4m0HhhmZVZJimvJ1lBm5mMBh2jBAePFvB9KZQsW+Jm9vAn6gD
IMCV/brajUQ2uR3nNB6gezXc8uhQHcoEpS22GPTzoW6Q2vQyORkbcKq8bkL4BCbe
1SypvG8R5/+J7Rl2/9J2q0SCQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFFLvt6j
ELyw9kZ6bLloZ+/e8uG+MB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC
QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt
d3pJREZ1MWFwMDRMN0txYWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApH+FPiFSMOK3ZmPs40f9WSqJ+RbnevcuFGf3kXUZo+jccPzg0HH16q0xpNAp
/ATV0/XDyid+qOCK6KQp4ddBzlyoSsVRlkglAQzE+x0+tZJNetxePN6MOZWp0l2n
bFXWPVXcYkRlgWEVue9VNnDkwOcaG7urR9qivV/f6trvpXvlykf9K7QcZkWx2Vos
iE79UwDV5ORo/QRq75m0QY3fxpHvL5YO3VojcOLCpYAuYlUN8yA1Ha97T4MUgbOA
QtmA0pfphzJlSxsfwktNvWKQbo0M8UgZoE3Td13yMfPtSG8nFaWR3YCcZDrIZooj
uMJpEcnhwZwUiSY08Xi1e2CFBg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:39:32 2026 by rpki-client