
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier: SNhULr5xOgo/RfswMDHccBlRI0EVPpmhclvlBGKJGAc=
Subject key identifier: 3F:15:E1:0C:AC:EE:C5:63:02:15:B3:86:F7:52:C5:8D:C8:AD:6D:3D
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 19C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number: 1984
Signing time: Wed 10 Jun 2026 16:24:40 +0000
Manifest this update: Wed 10 Jun 2026 16:24:40 +0000
Manifest next update: Wed 17 Jun 2026 16:24:40 +0000
Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: gGJnqpTmvXvpWRUgSb6etoqIl6SMLTScuwWFofgiOSQ=)
2: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
4: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6599 (0x19c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Jun 10 16:24:40 2026 GMT
Not After : Jun 17 16:24:40 2026 GMT
Subject: CN=6a298fc8-bedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:c1:85:b3:2c:7e:14:f5:5d:da:4a:13:41:
e1:24:6f:38:51:1c:66:38:df:e3:18:b1:24:c5:db:
48:07:f9:30:69:9c:90:d3:d0:7f:01:6f:bc:0d:f8:
80:bf:a4:68:d9:65:7f:01:bf:2f:c5:99:37:27:75:
86:ea:7e:a7:fb:95:bc:29:7b:3e:9c:a7:04:60:3f:
58:44:79:0a:47:8c:1c:5a:52:e6:d0:7e:9e:d9:d2:
10:cb:15:f5:31:78:ff:90:82:58:f4:87:dd:8e:cd:
6a:13:09:90:2e:2c:87:b0:af:28:4e:74:11:b0:1c:
a5:71:7b:2d:46:8a:f6:e3:46:50:63:5c:7f:c9:8d:
2e:77:4b:a1:65:1a:0c:8e:1b:f9:0d:23:c1:37:f3:
b2:c8:75:56:63:ef:bf:25:a0:72:33:8c:99:03:eb:
d3:06:c0:7f:2f:7f:3e:55:1d:3c:cf:5d:e6:46:a7:
64:73:84:83:af:0a:bf:5a:1a:a3:f9:d9:77:b8:c0:
a5:3f:98:41:09:fc:87:94:42:46:74:ba:d8:08:a4:
40:6d:50:2d:ef:97:c1:38:18:f4:8e:1b:97:bb:58:
2f:aa:0d:0a:65:6c:9f:34:98:ff:ff:12:60:db:64:
5a:40:66:0a:2d:1e:83:ec:c5:ef:71:d5:ab:85:ee:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:15:E1:0C:AC:EE:C5:63:02:15:B3:86:F7:52:C5:8D:C8:AD:6D:3D
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:12:ba:37:d1:0b:85:a6:4c:74:d6:5e:48:3e:fa:3d:7c:
ad:57:b2:39:76:a1:1b:8a:22:7e:12:a3:2f:79:5f:aa:cd:5c:
cd:d5:67:f9:6a:ea:b1:cb:37:95:c3:f5:1f:76:f3:be:58:9c:
de:57:5d:21:06:81:80:9e:5a:b7:f9:3b:b2:c2:0e:c4:3e:26:
45:f9:d6:82:03:06:6d:de:d5:03:ef:98:9d:23:37:3e:f1:b8:
20:88:d7:cb:e1:51:c3:cf:64:69:9b:6c:b2:8d:72:b2:2d:45:
14:5f:8b:1e:8f:22:54:f1:e1:7d:8d:fd:6d:29:a9:51:1b:88:
57:76:71:11:95:51:52:d7:c6:e6:ae:5f:dc:aa:9d:19:75:b7:
2c:47:4e:d9:26:df:3c:6b:fe:05:cd:f4:fc:c3:d4:0a:74:70:
81:70:03:3c:8c:b3:ca:1d:d9:ec:64:d5:32:10:6e:47:54:d2:
19:cc:44:4c:d1:0a:57:7a:bc:9d:6c:98:91:a2:b5:9c:16:9b:
eb:c9:25:d7:16:d9:12:36:4d:ce:d0:03:a7:b3:4b:ba:07:78:
ef:ae:4f:da:b6:8b:cd:d9:20:97:1f:09:56:e1:8f:55:bd:3f:
7f:fd:1b:49:bf:8b:cf:75:89:61:7a:29:01:09:20:31:f7:d8:
bf:29:ef:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF
MkQxMUExQTYwHhcNMjYwNjEwMTYyNDQwWhcNMjYwNjE3MTYyNDQwWjAYMRYwFAYD
VQQDEw02YTI5OGZjOC1iZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAouHBhbMsfhT1XdpKE0HhJG84URxmON/jGLEkxdtIB/kwaZyQ09B/AW+8DfiA
v6Ro2WV/Ab8vxZk3J3WG6n6n+5W8KXs+nKcEYD9YRHkKR4wcWlLm0H6e2dIQyxX1
MXj/kIJY9Ifdjs1qEwmQLiyHsK8oTnQRsBylcXstRor240ZQY1x/yY0ud0uhZRoM
jhv5DSPBN/OyyHVWY++/JaByM4yZA+vTBsB/L38+VR08z13mRqdkc4SDrwq/Whqj
+dl3uMClP5hBCfyHlEJGdLrYCKRAbVAt75fBOBj0jhuXu1gvqg0KZWyfNJj//xJg
22RaQGYKLR6D7MXvcdWrhe7j1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8V4Qys
7sVjAhWzhvdSxY3IrW09MB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5
MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT
ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjmcSujfRC4WmTHTWXkg++j18rVeyOXahG4oifhKjL3lfqs1czdVn+Wrqscs3
lcP1H3bzvlic3lddIQaBgJ5at/k7ssIOxD4mRfnWggMGbd7VA++YnSM3PvG4IIjX
y+FRw89kaZtsso1ysi1FFF+LHo8iVPHhfY39bSmpURuIV3ZxEZVRUtfG5q5f3Kqd
GXW3LEdO2SbfPGv+Bc30/MPUCnRwgXADPIyzyh3Z7GTVMhBuR1TSGcxETNEKV3q8
nWyYkaK1nBab68kl1xbZEjZNztADp7NLugd4765P2raLzdkglx8JVuGPVb0/f/0b
Sb+Lz3WJYXopAQkgMffYvynv+A==
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:43:09 2026 by rpki-client