
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
File: QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json)
Hash identifier: TF6wh16aVUzmqY/Xo/Y4pXIoltcmqE0SVx81PkJaB1g=
Subject key identifier: B0:CE:0C:B1:41:5E:22:A2:AA:D7:6A:AE:4C:BE:0E:52:3E:37:B8:83
Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
Certificate issuer: /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Certificate serial: 09B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
Manifest number: 09B7
Signing time: Tue 18 Aug 2026 20:14:02 +0000
Manifest this update: Tue 18 Aug 2026 20:14:01 +0000
Manifest next update: Tue 25 Aug 2026 20:14:01 +0000
Files and hashes: 1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: uAoTN9L9j6UZCCrkHIyz2dLZnJzYzxGd8hdnhJt57rs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2487 (0x9b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Validity
Not Before: Aug 18 20:14:01 2026 GMT
Not After : Aug 25 20:14:01 2026 GMT
Subject: CN=6a84bd0a-5f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:75:ac:e0:58:e1:c8:70:23:42:59:e3:cc:
b6:f1:a8:ba:1f:87:ca:71:6d:45:04:30:24:f6:d8:
94:7b:31:9e:59:90:a4:15:fd:35:b7:a1:8a:9f:5c:
8f:dc:96:9a:db:5f:53:86:69:6e:c3:84:29:7f:6f:
c3:ae:20:f9:d7:61:d3:a5:ac:d9:5a:93:61:e8:77:
96:c2:96:3b:53:f4:d8:c0:83:b9:ef:da:c5:a6:b6:
80:b1:e7:15:37:ab:51:02:d4:18:cb:ff:27:80:29:
18:af:bc:d2:1e:b8:05:9d:f0:4e:21:56:e2:99:9e:
60:ef:3e:5f:db:94:a6:3a:8a:68:3f:10:e8:bd:13:
11:7d:d3:a3:40:80:bd:a4:27:31:a8:cb:a4:f4:f1:
71:5a:0e:ed:ba:52:6b:7e:be:ce:ab:3b:0a:de:1c:
96:2f:01:33:50:16:b1:fc:cb:a8:3a:5a:8e:df:c5:
a7:00:54:d8:1e:16:60:2a:e4:76:22:67:c1:76:16:
ad:c7:ca:ed:de:fa:8b:fc:45:5f:13:14:92:da:49:
83:f8:6d:d1:b8:1e:5c:fd:3e:74:01:1d:8c:cd:c6:
26:33:6f:de:43:59:43:51:90:12:5e:0b:e9:71:1d:
e3:9c:21:01:8f:01:08:ff:45:17:f3:e4:c5:2a:7c:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CE:0C:B1:41:5E:22:A2:AA:D7:6A:AE:4C:BE:0E:52:3E:37:B8:83
X509v3 Authority Key Identifier:
keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:3e:96:e1:c5:af:83:86:5f:13:9b:0d:2c:a5:25:ba:ea:
53:fe:a6:2b:bc:87:37:d1:78:c7:48:2c:24:d3:a3:31:24:e9:
57:cf:86:4c:1f:47:c0:76:d1:de:1f:8f:44:db:c5:22:56:a6:
fc:de:da:30:67:59:63:54:69:35:67:d4:b9:aa:06:1d:d6:0e:
90:e5:3a:cb:60:a6:03:65:0e:0b:fc:b0:6c:23:66:45:25:2f:
c2:92:c8:fd:3a:0e:78:de:44:35:ed:fe:f9:b4:dc:cd:9f:68:
d4:ba:7e:0b:fc:34:3a:8a:6a:cf:78:50:fe:26:49:f7:8b:12:
55:40:fe:cd:1d:8e:b8:10:f5:0e:ed:0c:32:80:5b:62:4b:70:
3a:63:f9:28:af:c5:5c:6c:e1:f3:12:d2:10:a3:4a:bf:eb:fc:
d1:89:46:1d:53:35:0f:84:31:4f:a0:68:01:d5:65:26:15:1b:
16:ee:d9:fb:dc:9a:46:66:fe:89:ed:3c:d6:cd:69:2b:dd:e2:
4b:09:74:83:9c:f0:2a:5e:90:94:16:98:fe:83:04:33:b1:31:
58:a1:db:fb:e8:de:cd:b4:e1:82:6f:25:f6:31:09:ae:45:66:
16:80:6e:24:bb:ab:1b:11:ac:df:8d:82:ac:8f:13:6c:ad:7b:
e2:f6:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:39 2026 by rpki-client