
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: NUauqb+tOlGiZigdSIMCQok6O5KAiy5BLzDtFc0gC+I=
Subject key identifier: 19:D4:1D:89:71:25:81:9E:0C:85:10:09:74:A2:75:50:89:B7:1E:54
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: D5
Signing time: Fri 17 Jul 2026 07:54:09 +0000
Manifest this update: Fri 17 Jul 2026 07:54:09 +0000
Manifest next update: Fri 24 Jul 2026 07:54:09 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: 1MDB9/WJCSAbmrTtr8p0dRv2lCzu4p/e6quzdfNvY/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Jul 17 07:54:09 2026 GMT
Not After : Jul 24 07:54:09 2026 GMT
Subject: CN=6a59dfa1-c439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:dd:47:bf:76:1f:18:82:f1:35:fd:7e:a4:
a1:5a:4a:c2:df:cf:c6:aa:5a:71:ff:d1:98:5b:d5:
8a:0a:10:6b:d6:14:c7:a6:3a:74:1b:70:78:03:38:
ce:5a:d9:38:70:ad:73:75:46:1f:d8:25:c7:c3:bb:
a3:51:40:99:a7:7c:7c:42:97:9b:95:a4:d8:6a:88:
20:fc:4f:c6:82:d1:79:e4:0d:82:06:e9:96:c4:0f:
cb:e2:9b:59:cd:e0:91:64:a8:4e:42:c3:31:d8:34:
62:cb:00:74:5a:bc:fc:ee:35:23:8e:4c:88:b4:11:
86:fa:32:f8:48:a6:23:91:66:db:11:11:35:0a:6a:
88:80:08:25:cd:40:b9:7d:fe:4c:98:b2:cb:b1:47:
3b:61:13:76:a5:56:83:49:5f:c6:4b:f3:e1:2c:e2:
ba:79:01:4e:a8:7c:9a:9b:d6:2b:8e:78:9c:8b:54:
72:7c:10:75:f7:c5:0d:54:29:47:02:b1:a8:53:b6:
62:89:39:3b:a5:17:d3:11:29:12:7e:62:b0:c1:13:
af:b7:24:3e:40:6e:c4:d2:92:38:56:bb:27:95:fb:
01:5d:af:9a:af:44:20:42:7d:3a:e5:dc:e1:e1:19:
d1:2e:dd:b9:f8:a4:7a:d3:36:e0:9d:1a:a2:f5:93:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D4:1D:89:71:25:81:9E:0C:85:10:09:74:A2:75:50:89:B7:1E:54
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:de:29:ee:59:5b:61:93:6d:39:78:98:c1:54:81:ab:81:
bb:c9:6a:a1:53:39:fb:ce:d0:f5:1b:52:89:18:0b:74:7f:04:
f7:ee:7a:90:89:8b:c6:db:f8:01:c7:93:6e:e4:cc:85:8e:a4:
ff:f5:7b:b6:a0:c1:ad:e2:eb:87:e6:c4:0e:05:ee:da:75:80:
51:9d:de:38:ce:8f:1e:52:2b:cc:86:ee:18:4e:ac:b5:93:c8:
44:48:c3:8f:be:da:ef:2f:8c:85:e5:2a:3f:d7:79:49:41:40:
02:b4:cd:11:57:63:d9:be:b2:4c:60:15:65:e1:23:07:ce:4c:
ca:2d:54:b9:10:e6:c0:df:96:54:bb:cc:f8:39:25:c6:29:60:
28:7e:95:1d:37:c1:15:9f:c7:3e:a2:f5:a0:a9:95:bb:9a:a5:
e5:5e:1e:44:d9:56:c6:03:9d:6f:49:22:70:db:7e:8a:eb:eb:
70:b1:db:7d:b3:43:65:4e:37:42:43:fa:df:3f:45:8f:31:57:
d6:67:a2:e9:c2:4f:07:b7:d1:81:b1:6b:87:67:09:07:42:a1:
5a:72:80:be:7e:11:75:0b:de:ef:22:a9:ca:35:a7:a2:5f:78:
89:52:61:4b:93:c5:b8:8b:ee:1a:af:a7:8c:12:a1:ff:df:1a:
81:50:94:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhCQjExMTAvBgNVBAUTKDQxMkE4RDE3REY5MDdBNzgzNzY1MDEyQTgzQjc4QjdD
QjFDQTI1MTIwHhcNMjYwNzE3MDc1NDA5WhcNMjYwNzI0MDc1NDA5WjAYMRYwFAYD
VQQDEw02YTU5ZGZhMS1jNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtordR792HxiC8TX9fqShWkrC38/Gqlpx/9GYW9WKChBr1hTHpjp0G3B4AzjO
Wtk4cK1zdUYf2CXHw7ujUUCZp3x8QpeblaTYaogg/E/GgtF55A2CBumWxA/L4ptZ
zeCRZKhOQsMx2DRiywB0Wrz87jUjjkyItBGG+jL4SKYjkWbbERE1CmqIgAglzUC5
ff5MmLLLsUc7YRN2pVaDSV/GS/PhLOK6eQFOqHyam9Yrjnici1RyfBB198UNVClH
ArGoU7ZiiTk7pRfTESkSfmKwwROvtyQ+QG7E0pI4VrsnlfsBXa+ar0QgQn065dzh
4RnRLt25+KR60zbgnRqi9ZM7kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBnUHYlx
JYGeDIUQCXSidVCJtx5UMB8GA1UdIwQYMBaAFEEqjRffkHp4N2UBKoO3i3yxyiUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEJCMS81MUY5RjYxNDNE
MjUxMUYwODBDNDg5NTVDNEY5QUUwMi9RU3FORjktUWVuZzNaUUVxZzdlTGZMSEtK
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEJCMS81MUY5RjYxNDNEMjUxMUYwODBDNDg5NTVDNEY5QUUwMi9RU3FORjktUWVu
ZzNaUUVxZzdlTGZMSEtKUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU0neKe5ZW2GTbTl4mMFUgauBu8lqoVM5+87Q9RtSiRgLdH8E9+56kImLxtv4
AceTbuTMhY6k//V7tqDBreLrh+bEDgXu2nWAUZ3eOM6PHlIrzIbuGE6stZPIREjD
j77a7y+MheUqP9d5SUFAArTNEVdj2b6yTGAVZeEjB85Myi1UuRDmwN+WVLvM+Dkl
xilgKH6VHTfBFZ/HPqL1oKmVu5ql5V4eRNlWxgOdb0kicNt+iuvrcLHbfbNDZU43
QkP63z9FjzFX1mei6cJPB7fRgbFrh2cJB0KhWnKAvn4RdQve7yKpyjWnol94iVJh
S5PFuIvuGq+njBKh/98agVCUdg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:12 2026 by rpki-client