
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
File: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft (raw, json)
Hash identifier: bX9cgav/Wx4hxnWD142lk0PJ3TP8Lq5woz0wPkJNivQ=
Subject key identifier: 7C:79:7D:08:30:BF:AC:09:CA:1D:EA:09:CA:CA:D6:1A:56:18:2F:98
Authority key identifier: 40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
Certificate issuer: /CN=A91BB492/serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
Manifest number: 0108
Signing time: Wed 19 Aug 2026 06:46:43 +0000
Manifest this update: Wed 19 Aug 2026 06:46:41 +0000
Manifest next update: Wed 26 Aug 2026 06:46:41 +0000
Files and hashes: 1: QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl (hash: 58GLRd8gO5RNDWPLwKSgk4veTNXI6aCwbLHNwGCj+6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB492, serialNumber=40E4BD36AE15077FE59985D1370D5D64670A88D9
Validity
Not Before: Aug 19 06:46:41 2026 GMT
Not After : Aug 26 06:46:41 2026 GMT
Subject: CN=6a855152-aee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:57:5c:26:ef:da:17:c7:1f:25:ae:ef:27:
13:14:35:dc:82:ca:82:50:86:4d:b0:0e:4e:cc:f6:
43:27:72:76:a2:ee:13:80:4f:26:b7:1c:72:bb:fb:
60:f9:e3:49:5b:ea:b1:01:9b:50:66:5f:05:b3:0f:
82:ea:e8:e3:58:ab:e8:ae:fa:37:ed:7e:fc:96:d9:
3c:84:69:92:61:9a:5e:8e:b9:6a:06:d5:cb:15:88:
22:e3:f8:b3:07:1f:a0:ff:a4:c1:c3:b4:2a:85:3c:
7f:0d:9b:79:53:e2:91:4d:5c:b3:e6:7d:ec:4d:61:
c6:e6:3a:23:2a:de:1e:08:c3:84:c4:59:fe:4e:5e:
7a:b4:a0:ad:85:09:54:70:3d:11:31:e5:bc:65:20:
bb:67:38:28:8c:2d:1a:61:44:ef:d7:51:87:e8:31:
a7:fd:14:34:36:62:d0:5b:b3:f8:f6:32:e2:58:fd:
06:3c:64:b4:93:7e:52:63:91:eb:f8:23:09:69:6e:
e3:e4:3b:ff:a9:40:8e:86:b5:2e:e9:6c:80:4e:3e:
ba:0f:bd:89:28:b9:ab:b5:67:81:0e:29:cc:cd:7e:
33:a5:38:e6:9b:b1:0e:78:b3:8d:e3:a3:ab:81:0f:
be:28:3b:0c:3a:21:c7:f3:87:4a:0f:8f:7f:bd:34:
cb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:79:7D:08:30:BF:AC:09:CA:1D:EA:09:CA:CA:D6:1A:56:18:2F:98
X509v3 Authority Key Identifier:
keyid:40:E4:BD:36:AE:15:07:7F:E5:99:85:D1:37:0D:5D:64:67:0A:88:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB492/2C0B32D8093611F0A2842D57C4F9AE02/QOS9Nq4VB3_lmYXRNw1dZGcKiNk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:83:a4:52:0c:5a:10:3b:cb:8e:6b:05:6c:18:0f:0d:2f:b5:
25:89:0a:58:2d:00:38:04:4c:1f:47:87:fc:6b:df:c2:ea:70:
5c:f9:d5:bb:31:74:d9:e6:33:a4:7b:0d:8b:8a:f8:54:09:e4:
33:ff:a2:f6:97:c8:6d:31:c2:61:25:1f:ac:4b:b4:d4:36:3b:
83:70:ff:4b:d1:dc:98:ad:fc:58:89:68:86:ba:a1:54:1c:78:
bc:84:39:13:9a:ce:e1:60:95:4d:c5:6f:d2:52:a3:c5:ed:c1:
e3:99:fb:87:41:f3:30:90:3f:6d:de:7a:7b:48:d6:c9:ec:5d:
97:dc:90:8d:d9:82:fe:74:dd:93:db:d4:96:2c:e5:82:2b:8a:
5e:e7:1b:25:cc:05:17:0c:99:6a:23:f7:1c:1e:80:87:26:f4:
c4:f4:07:d7:c6:e3:48:7f:4c:58:1c:59:27:c6:0e:4f:df:f0:
ab:23:95:6d:88:08:dd:87:12:34:8f:02:d5:f2:07:47:c7:c0:
da:c1:61:9d:29:7f:61:69:40:2f:8e:f7:67:72:34:75:6a:ff:
3a:45:30:79:a2:f0:21:3a:53:49:8d:90:73:ff:6f:a0:35:36:
79:f9:9e:50:0f:47:68:f6:5d:40:38:2d:dd:d7:9d:4f:1f:4b:
15:b9:7d:95
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTIxMTAvBgNVBAUTKDQwRTRCRDM2QUUxNTA3N0ZFNTk5ODVEMTM3MEQ1RDY0
NjcwQTg4RDkwHhcNMjYwODE5MDY0NjQxWhcNMjYwODI2MDY0NjQxWjAYMRYwFAYD
VQQDEw02YTg1NTE1Mi1hZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslBXXCbv2hfHHyWu7ycTFDXcgsqCUIZNsA5OzPZDJ3J2ou4TgE8mtxxyu/tg
+eNJW+qxAZtQZl8Fsw+C6ujjWKvorvo37X78ltk8hGmSYZpejrlqBtXLFYgi4/iz
Bx+g/6TBw7QqhTx/DZt5U+KRTVyz5n3sTWHG5jojKt4eCMOExFn+Tl56tKCthQlU
cD0RMeW8ZSC7ZzgojC0aYUTv11GH6DGn/RQ0NmLQW7P49jLiWP0GPGS0k35SY5Hr
+CMJaW7j5Dv/qUCOhrUu6WyATj66D72JKLmrtWeBDinMzX4zpTjmm7EOeLON46Or
gQ++KDsMOiHH84dKD49/vTTLfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHx5fQgw
v6wJyh3qCcrK1hpWGC+YMB8GA1UdIwQYMBaAFEDkvTauFQd/5ZmF0TcNXWRnCojZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5Mi8yQzBCMzJEODA5
MzYxMUYwQTI4NDJENTdDNEY5QUUwMi9RT1M5TnE0VkIzX2xtWVhSTncxZFpHY0tp
TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FPUzlOcTRWQjNfbG1ZWFJOdzFkWkdjS2lOay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5Mi8yQzBCMzJEODA5MzYxMUYwQTI4NDJENTdDNEY5QUUwMi9RT1M5TnE0VkIz
X2xtWVhSTncxZFpHY0tpTmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR4OkUgxaEDvLjmsFbBgPDS+1JYkKWC0AOARMH0eH/GvfwupwXPnVuzF02eYz
pHsNi4r4VAnkM/+i9pfIbTHCYSUfrEu01DY7g3D/S9HcmK38WIlohrqhVBx4vIQ5
E5rO4WCVTcVv0lKjxe3B45n7h0HzMJA/bd56e0jWyexdl9yQjdmC/nTdk9vUlizl
giuKXucbJcwFFwyZaiP3HB6Ahyb0xPQH18bjSH9MWBxZJ8YOT9/wqyOVbYgI3YcS
NI8C1fIHR8fA2sFhnSl/YWlAL473Z3I0dWr/OkUweaLwITpTSY2Qc/9voDU2efme
UA9HaPZdQDgt3dedTx9LFbl9lQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:28 2026 by rpki-client