
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: CmuykcEIT1crjlz0tIjpZgapRcdp2lpaPEytWy/CaGk=
Subject key identifier: 86:47:0C:CA:86:5F:81:1B:0C:F2:2B:84:4D:36:20:1C:4D:8F:DC:14
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: BF
Signing time: Mon 01 Jun 2026 07:45:37 +0000
Manifest this update: Mon 01 Jun 2026 07:45:37 +0000
Manifest next update: Mon 08 Jun 2026 07:45:37 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: E6FjTwrbvrL8S+oDw9qoJ5hHF0zTyalXSMg5Yxs5Y9k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Jun 1 07:45:37 2026 GMT
Not After : Jun 8 07:45:37 2026 GMT
Subject: CN=6a1d38a1-9dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:5c:99:0b:a4:46:62:aa:6d:01:a1:a8:d0:
55:01:91:fd:d6:b5:b1:be:04:8e:12:8e:82:30:86:
5c:0d:96:fe:88:28:1f:20:bf:cb:bb:2a:81:6a:33:
da:a1:42:eb:9f:7d:e1:d0:30:7b:d1:8f:69:8f:73:
4d:c2:21:17:c2:07:7c:30:fb:d5:ac:0c:a4:50:b3:
39:4e:2c:25:a3:06:64:66:7b:c7:32:1e:21:69:40:
42:cf:02:3e:a1:64:b5:14:21:00:50:e9:dd:2d:b5:
9d:2e:a8:08:30:40:85:60:9d:3d:14:e2:41:5b:5f:
af:6c:33:bc:e7:83:5e:5e:5a:2a:c1:7c:07:67:19:
31:b2:91:0f:a8:03:68:ae:09:7b:24:aa:9c:4b:ea:
b6:2d:9f:e1:93:70:37:49:71:d4:4a:d1:41:ef:cf:
28:59:6b:c5:61:c5:32:0a:de:37:11:99:6a:79:4c:
8b:30:80:21:ba:aa:9e:11:5b:5a:75:4b:5d:cc:91:
70:75:b9:07:40:8e:2d:2a:1c:6a:9c:f2:91:fe:5c:
b9:2b:5c:b4:55:99:7d:42:b9:db:af:b6:d2:ee:ed:
7e:2e:2f:60:0e:0a:24:5c:fe:28:af:9f:50:ec:2b:
bb:7d:b1:e4:bf:2f:4c:38:c0:b7:3f:4f:c5:16:4f:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:47:0C:CA:86:5F:81:1B:0C:F2:2B:84:4D:36:20:1C:4D:8F:DC:14
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:d2:d3:85:05:b2:1c:0f:c1:e4:21:21:23:c6:bf:12:21:6e:
52:ea:10:5f:68:fa:84:85:bb:46:34:a5:28:68:9a:d1:30:83:
1e:69:26:8f:5c:9f:8b:99:76:a4:05:1c:c4:8a:cd:5b:b2:ee:
1d:84:84:10:33:7d:07:22:98:03:c9:04:b0:da:fa:6c:b3:de:
05:39:6c:76:cb:5d:77:52:43:fb:d4:0b:93:69:d3:2b:71:8a:
80:b9:4e:09:09:ea:7f:9a:51:48:3d:94:1a:9b:0b:d9:25:1a:
8e:7a:99:0d:9a:d3:dc:8b:10:28:be:1d:77:53:57:e2:72:10:
e4:0c:ed:92:60:26:f7:f0:46:46:d0:36:3f:79:37:6c:b9:a9:
77:a8:0b:f9:a2:bf:e2:8c:0d:0a:76:75:51:cf:19:20:1f:44:
cb:df:1e:e7:8d:41:4f:ae:b5:6c:c1:a0:13:eb:6a:ce:0e:60:
17:60:f7:f3:df:13:3c:eb:75:39:53:4a:51:41:80:14:b8:d3:
1a:ca:88:6c:3f:27:de:b0:1a:6d:9c:c3:f5:cc:94:db:c8:a9:
05:aa:b4:88:6f:46:f5:29:4c:62:3a:da:d9:3d:77:4e:ec:49:
df:e0:6c:ea:b4:9f:0a:47:f0:67:8d:3e:54:dd:fc:27:4f:c4:
c5:55:47:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:44 2026 by rpki-client