
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json)
Hash identifier: A50YHcXdYBqk942oyEQNEpoplVg7kO0h5cgCz2IG6bM=
Subject key identifier: 87:DD:37:C3:35:8F:F4:E4:B6:27:EE:4F:B1:8E:90:7A:FB:43:B7:3C
Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
Manifest number: 0214
Signing time: Sat 19 Sep 2026 03:46:24 +0000
Manifest this update: Sat 19 Sep 2026 03:46:23 +0000
Manifest next update: Sat 26 Sep 2026 03:46:23 +0000
Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: mNUE/WlyWOhusDqlfS/8mKB0mSBCC2b6UOo/qtSY+dY=)
2: FCF99042301011EFBC350682C4F9AE02.roa (hash: G76akd+Pz3BvQnQXHM+tIAwBqY1cYkiz3eE1RRYxTew=)
3: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tkIQFKk/Mo9h+Y6zoIuiaKelqp3EP1aM68bZaSbBy0M=)
4: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: DlhDgTG7w84Ovj2w/3S1GtqzEGfOWk6+fiHNLhzsPdE=)
5: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: yxilBFlE1MgXEF3lGJREKxdKcg1wggFTb7Z4QOAKfZc=)
6: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: EoV7X+CPLPt1PwJmt/C6xwl6Rd3EK1Ujxhgn/dIQJh4=)
7: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: Et35taMHrzzZx//1uz1X2k2usz0PCpjA6ZgM0w/qGlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9
Validity
Not Before: Sep 19 03:46:23 2026 GMT
Not After : Sep 26 03:46:23 2026 GMT
Subject: CN=6aae0590-ea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:54:5d:55:d3:3e:1a:11:9a:98:ca:7f:03:
45:f6:80:32:bd:ea:cc:24:6e:d3:99:e9:46:b5:4d:
d1:44:90:c5:25:68:13:87:f2:f2:e9:7e:55:d8:52:
80:f3:96:44:6a:e2:ff:ce:2c:96:c1:ac:22:2d:33:
60:c2:01:42:cf:18:ce:8f:54:df:89:e5:9f:e3:58:
14:47:d7:07:d5:85:39:72:9b:cc:cd:3c:a7:4b:ab:
79:10:27:23:90:35:8e:8f:10:68:d9:ed:8e:f2:30:
8b:67:96:07:a8:3b:37:5e:50:10:12:08:eb:59:fe:
6a:7c:ff:c6:41:fb:84:bd:f5:36:8e:14:fe:df:12:
4d:26:e3:6a:6e:f8:36:f4:0a:ba:b8:7a:8c:2a:9f:
91:e9:17:3f:84:b3:ae:18:0c:3c:7c:51:1b:d7:e4:
8f:2e:5e:36:54:b9:6a:dd:ef:5d:ff:00:8d:7b:8a:
61:99:1a:46:f6:b0:bb:3f:f0:6e:7e:d3:6b:9a:74:
75:e8:a4:e1:5d:30:67:97:12:38:f6:ea:78:a6:31:
db:b7:40:bb:c5:f2:6f:79:8b:bb:9b:ae:92:ab:28:
92:e6:49:b8:ea:ff:7d:33:11:d5:72:90:3b:ae:45:
3e:d5:71:35:7b:36:66:56:ee:8f:12:9a:a8:64:d6:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:37:C3:35:8F:F4:E4:B6:27:EE:4F:B1:8E:90:7A:FB:43:B7:3C
X509v3 Authority Key Identifier:
keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:82:05:49:34:a0:ba:bd:b1:18:a3:31:0c:f9:b3:08:90:0e:
fb:ad:8e:f0:16:25:45:c7:05:a1:6c:bc:1c:21:b6:25:82:59:
f2:61:d5:85:70:ab:78:61:80:50:da:e2:88:64:98:30:4e:4f:
f6:4d:d5:85:bd:95:0b:a3:fd:45:14:27:b8:38:77:29:20:8d:
d7:cd:81:a7:3f:6d:c4:13:3e:ac:1d:d2:d4:54:6e:bc:f0:73:
56:d1:29:a2:bb:b3:d0:eb:93:55:52:34:36:68:f7:d2:a2:69:
b4:e5:d2:dd:56:78:d7:1f:0d:a0:d4:fa:1f:57:c9:c2:27:73:
ce:38:00:c4:84:19:d3:bf:98:b9:72:6b:d4:4a:08:cb:31:80:
f3:97:12:c2:e5:40:7a:1d:8c:31:70:55:d5:4c:3a:79:01:d1:
6c:ec:25:4f:4f:33:a5:a3:23:66:1d:80:4a:be:c4:04:29:97:
81:17:51:8e:06:1b:74:85:16:3e:b5:5d:46:be:95:07:62:cb:
2c:bc:b7:eb:55:c2:32:c0:a8:31:89:77:f3:22:54:06:12:4f:
81:ea:df:3a:bb:f6:e0:45:8c:35:67:a2:7f:18:3d:f2:8b:62:
f4:f8:b4:61:47:87:7b:70:33:6d:b5:31:de:10:c7:be:ff:44:
42:4d:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:58:43 2026 by rpki-client