
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier: ZIU8OJIAHVE9wVD5+n7pvR+tE0wXTwTbGj1ishLob24=
Subject key identifier: 5B:B0:33:98:C9:2B:11:DE:74:02:6A:9E:57:7D:C7:4F:00:C0:16:22
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 19DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number: 199B
Signing time: Sun 26 Jul 2026 16:31:42 +0000
Manifest this update: Sun 26 Jul 2026 16:31:42 +0000
Manifest next update: Sun 02 Aug 2026 16:31:42 +0000
Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: mbL7lWmQpk5Zf7jFiYUovIoKreMGFXNbgwoZy089Lg0=)
2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
4: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 16:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6622 (0x19de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Jul 26 16:31:42 2026 GMT
Not After : Aug 2 16:31:42 2026 GMT
Subject: CN=6a66366e-f635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:c0:25:22:ab:84:8e:9f:fa:ff:c0:27:7f:
8b:9b:ab:9f:5c:7d:4e:9f:0c:1b:75:3a:81:05:ae:
c2:5f:67:cb:fb:c3:9a:06:9d:aa:5a:c5:ca:9e:ef:
be:e3:20:03:31:5f:36:d6:12:1a:37:70:d1:a1:cc:
06:0e:76:0e:6e:74:29:02:42:f4:a3:f7:04:15:75:
ed:8f:a3:a4:20:20:10:15:7e:78:91:7f:dd:9a:a4:
10:72:70:06:2c:03:38:81:52:2c:97:dc:4b:84:16:
f8:a3:45:f5:5d:71:81:7d:a3:92:36:cb:66:03:8d:
dc:23:28:6e:a0:ee:4b:fb:49:71:04:35:b0:fa:16:
9f:6f:ba:0b:57:dd:e1:ec:b9:cf:bc:99:e2:97:04:
7a:da:d6:2f:db:bd:c7:d5:48:b4:d9:c9:70:49:82:
7c:f9:a3:b7:15:79:a9:75:f7:60:88:7b:e2:58:a5:
b0:d1:a9:28:cc:b2:46:3e:d9:aa:a6:80:eb:0f:ae:
03:ce:f7:98:9b:dd:fc:2e:3a:c2:9e:e7:d3:42:11:
d2:5f:8f:18:37:47:c3:5d:2e:30:c6:4b:d3:ea:26:
8f:8c:b9:dc:50:63:8a:6f:fa:15:bf:c1:97:8a:83:
e0:c9:9a:cd:bc:93:1d:39:55:fd:2a:ea:a3:ef:ec:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B0:33:98:C9:2B:11:DE:74:02:6A:9E:57:7D:C7:4F:00:C0:16:22
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:01:02:d8:d6:89:ed:9f:10:14:38:be:7b:14:76:e8:10:78:
5c:e7:4c:0e:bb:ec:93:83:f6:a2:c4:40:ce:44:c0:b8:73:e7:
81:e5:ab:e9:ef:d9:a9:c4:c5:5c:c7:e0:30:70:67:2f:6f:cc:
dd:7a:57:30:05:e0:b4:c8:e0:48:a5:dc:39:f7:9c:46:f2:19:
cc:4a:8f:22:2a:84:c8:7a:7a:84:b8:b7:42:09:46:2f:67:ee:
4f:4a:41:de:1a:1b:1d:fe:1a:bd:ff:51:26:3c:7c:be:a5:28:
68:1a:61:d4:44:8c:78:91:2d:e1:b0:71:5b:e5:c8:1a:5b:c3:
e3:b6:06:24:cb:76:f9:dd:4c:72:d1:d0:72:e8:e6:72:5b:ec:
99:bc:f9:05:98:49:f4:54:90:2a:34:ee:37:16:5e:d3:be:3a:
63:7b:be:c9:19:c3:bb:cf:de:c1:cc:81:a0:5f:60:a6:c8:68:
bc:04:ee:11:d3:3c:23:85:61:52:f6:e9:59:1b:0e:ef:18:08:
b8:0f:70:cc:3f:a0:66:ef:dc:9e:87:cc:25:ad:cf:a2:26:e7:
1f:1f:d7:d6:3f:45:e9:1d:c9:db:29:2e:c4:42:35:13:c7:72:
6c:48:22:8b:d2:44:f0:b4:0b:d5:cd:a5:ae:23:23:69:ff:9a:
65:c3:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:48:26 2026 by rpki-client