
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
File: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json)
Hash identifier: JN8wWn1OcPK9b4p0ovV3LufiNQDbvkfWnzeOH2qbZ44=
Subject key identifier: 80:DA:C7:44:7E:46:3B:4D:94:D6:D6:89:64:A9:D8:6E:0F:21:F3:90
Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Certificate issuer: /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
Manifest number: 10
Signing time: Sun 05 Apr 2026 08:23:31 +0000
Manifest this update: Sun 05 Apr 2026 08:23:31 +0000
Manifest next update: Sun 12 Apr 2026 08:23:31 +0000
Files and hashes: 1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: v0o4fPpFef0rpj39CvJ0xrFiobIpf//WeEnevIWI6TY=)
2: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:23:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Validity
Not Before: Apr 5 08:23:31 2026 GMT
Not After : Apr 12 08:23:31 2026 GMT
Subject: CN=69d21c03-6810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:d0:94:47:49:b5:66:e1:f4:48:fa:0d:4a:
f7:94:d0:42:1d:07:bf:0d:63:38:5e:3d:85:d4:24:
7a:f5:3f:21:33:f0:3f:07:d8:c3:4f:ce:16:31:df:
e1:b4:21:5b:9c:10:4e:b9:e6:7d:bb:46:25:20:47:
52:5d:eb:63:51:fa:45:5e:af:43:47:37:89:f4:99:
0e:c3:a0:15:46:f4:da:a3:e6:ae:83:58:35:f7:8a:
2e:d6:de:f5:e0:42:34:6f:96:d9:f4:c5:bb:73:a4:
09:ce:18:0b:4e:01:05:af:88:eb:14:0c:68:14:0e:
fd:72:c5:c2:a5:fe:8b:1d:fc:62:5b:73:d3:c2:94:
be:03:06:21:6c:32:83:e8:ab:0e:7f:09:9e:af:34:
45:d8:50:9e:76:7e:e7:a4:f8:30:26:60:10:d0:1d:
e1:fe:1c:3d:0a:ba:1f:b0:12:37:b4:fb:8d:5a:5a:
27:e3:49:01:c6:52:30:9a:96:e1:19:7e:a6:e4:55:
0a:3f:8f:e2:42:fb:8e:b8:7b:f9:4d:05:79:a8:f2:
dc:bf:93:0b:a1:d9:4a:f0:c6:b8:e9:a4:67:d9:bc:
50:2f:ab:f7:26:36:df:e4:97:ba:42:8e:35:0d:4a:
8a:87:bd:ea:fb:89:46:55:db:09:36:4d:b6:51:7d:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DA:C7:44:7E:46:3B:4D:94:D6:D6:89:64:A9:D8:6E:0F:21:F3:90
X509v3 Authority Key Identifier:
keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:08:df:e3:ef:66:f9:c2:68:b2:34:94:d2:96:ff:bb:3d:85:
6c:a7:6e:ae:99:d0:69:ce:dd:95:c0:b3:34:cb:23:4e:c1:27:
94:6f:cc:de:7d:e6:01:e3:a0:f6:41:aa:41:51:d1:b3:95:3f:
bf:c5:ea:55:c9:9a:64:b4:c6:7c:4a:8d:22:b5:e3:d3:ce:ee:
21:7d:d9:2d:d8:6a:2a:da:d7:5c:ed:e2:9b:52:8d:33:a9:02:
29:6c:46:d3:c3:78:79:b3:5a:ef:76:00:03:7f:51:c4:a2:92:
dc:e1:a4:04:65:fb:db:ff:13:bb:f1:7f:9b:f9:dd:e1:62:0c:
d8:45:e6:63:d6:7b:4b:8e:20:fa:ad:c5:00:c7:ce:84:ce:a2:
14:d8:ad:94:3e:70:62:34:61:6b:d4:cb:7e:33:bf:18:da:c6:
2f:2b:85:79:35:61:0a:f0:40:8c:38:6d:fc:94:f1:f8:cc:10:
cf:a8:fc:14:9a:9a:0f:97:8f:0f:41:f8:b6:76:d7:15:35:fb:
14:70:d8:54:6b:88:8a:af:55:28:b8:ca:13:1a:66:ed:71:ec:
74:c9:4e:ca:43:f1:2f:8b:93:d8:82:6d:0f:78:b7:f7:a7:34:
d7:28:1f:d8:8f:7b:51:bd:44:18:7c:a8:53:eb:d6:ce:38:c5:
b2:52:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:15:31 2026 by rpki-client