
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
File: qTjv-5Y64q628LJmWWuKQSN3ydk.mft (raw, json)
Hash identifier: 1a11xHMvTGNZpkHPv7w+mVemXFrJzIW05bFG/99FMs8=
Subject key identifier: 1A:8A:E4:DB:1A:3F:91:A0:84:D4:AF:68:4C:76:F8:49:0A:ED:BE:68
Authority key identifier: A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
Certificate issuer: /CN=A9120832/serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
Manifest number: C0
Signing time: Thu 21 May 2026 07:03:37 +0000
Manifest this update: Thu 21 May 2026 07:03:36 +0000
Manifest next update: Thu 28 May 2026 07:03:36 +0000
Files and hashes: 1: qTjv-5Y64q628LJmWWuKQSN3ydk.crl (hash: TYs0Kl4mHjk/ogkMTlwEdxYFQ6Q/0sSsWoTB+/g47CI=)
2: 605C88EC362811F08A82E10DC4F9AE02.roa (hash: CGs40+aol+xWoOZNaUP5JXbvindhbNJ3rxtLBcaqmRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120832, serialNumber=A938EFFB963AE2AEB6F0B266596B8A412377C9D9
Validity
Not Before: May 21 07:03:36 2026 GMT
Not After : May 28 07:03:36 2026 GMT
Subject: CN=6a0eae49-403d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:bd:9c:a4:44:8b:3d:88:43:4a:aa:16:d9:
ac:ba:b5:a4:fd:72:f9:d3:f4:d5:f4:5b:06:09:28:
e2:7e:2f:2a:58:13:54:f3:be:42:cb:d4:52:33:99:
4a:7c:fb:d9:fb:7e:c4:01:b4:56:e8:20:e6:95:89:
47:47:4d:59:47:da:7d:5d:31:a9:5f:b2:de:9a:34:
5e:ba:6f:7d:87:48:c1:74:f5:e3:31:67:62:30:ac:
1a:ae:1c:14:3d:5b:6a:f8:88:08:f7:31:71:bb:7e:
de:8e:24:51:2a:33:d0:04:6d:c4:f0:3a:d4:b1:ca:
f2:29:bd:a7:e6:28:1f:f0:8e:e7:4b:b8:38:00:5b:
f0:50:15:f7:26:2c:6e:a3:c4:80:b9:56:6b:8b:8b:
1b:0f:6d:26:07:f2:83:c2:5b:fe:bc:87:25:9f:c3:
28:fc:83:33:15:cf:50:fb:a9:0e:bd:b0:b4:8f:88:
44:05:45:8b:6c:9e:fb:4e:32:60:2d:68:0f:df:f7:
67:0c:43:21:63:86:10:f5:e8:3a:2e:3e:c2:cd:e1:
b4:4c:11:76:a9:86:1e:a3:8c:dc:5a:3c:c0:61:7b:
21:58:13:01:23:ec:ed:b0:85:d1:9c:29:69:8c:a1:
31:8a:92:03:8e:06:58:13:eb:03:a3:76:69:6d:4c:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8A:E4:DB:1A:3F:91:A0:84:D4:AF:68:4C:76:F8:49:0A:ED:BE:68
X509v3 Authority Key Identifier:
keyid:A9:38:EF:FB:96:3A:E2:AE:B6:F0:B2:66:59:6B:8A:41:23:77:C9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qTjv-5Y64q628LJmWWuKQSN3ydk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120832/C259F6B2362611F0B35AFA86C4F9AE02/qTjv-5Y64q628LJmWWuKQSN3ydk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:40:3b:70:d5:76:a7:08:64:80:63:a7:35:6d:0b:8a:2d:49:
09:f7:a1:51:64:3a:51:15:0f:23:fe:80:fa:d0:80:7f:6d:de:
56:a9:61:23:e2:0f:99:30:54:6a:00:87:c1:44:9b:c2:1b:46:
33:b5:c2:5c:31:8d:5a:71:2b:ed:a8:c9:26:87:b9:6e:a7:05:
f0:10:0f:2f:9d:c5:ad:fa:fc:ec:b7:6e:06:1a:00:38:14:fa:
1d:71:2f:6d:85:a8:ec:ce:75:59:b5:8c:c5:ee:da:f7:25:d4:
0f:aa:99:2a:80:ed:d3:9f:47:c7:a2:55:28:a1:fb:87:53:e9:
e6:fb:21:8b:2e:f0:7a:e8:6b:97:e9:29:63:d1:60:f0:c2:0e:
22:6e:32:2e:21:02:f6:55:46:83:a8:0d:3d:bd:16:e0:17:d1:
02:3c:94:e8:64:55:b5:05:3b:c9:5f:19:25:ca:d5:b1:3d:2c:
16:af:d5:79:7d:d5:75:77:1d:b1:da:ff:7d:66:d5:10:9b:e3:
b0:94:fb:3b:83:57:bf:b2:3c:79:ac:f9:5e:59:da:79:ec:25:
48:26:1d:21:54:26:cc:f0:79:4b:0e:4e:32:c8:90:b6:f9:d1:
67:2f:41:be:44:76:57:75:32:33:b5:60:26:f4:47:d2:73:bf:
b7:7e:d4:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA4MzIxMTAvBgNVBAUTKEE5MzhFRkZCOTYzQUUyQUVCNkYwQjI2NjU5NkI4QTQx
MjM3N0M5RDkwHhcNMjYwNTIxMDcwMzM2WhcNMjYwNTI4MDcwMzM2WjAYMRYwFAYD
VQQDEw02YTBlYWU0OS00MDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6G9nKREiz2IQ0qqFtmsurWk/XL50/TV9FsGCSjifi8qWBNU875Cy9RSM5lK
fPvZ+37EAbRW6CDmlYlHR01ZR9p9XTGpX7LemjReum99h0jBdPXjMWdiMKwarhwU
PVtq+IgI9zFxu37ejiRRKjPQBG3E8DrUscryKb2n5igf8I7nS7g4AFvwUBX3Jixu
o8SAuVZri4sbD20mB/KDwlv+vIcln8Mo/IMzFc9Q+6kOvbC0j4hEBUWLbJ77TjJg
LWgP3/dnDEMhY4YQ9eg6Lj7CzeG0TBF2qYYeo4zcWjzAYXshWBMBI+ztsIXRnClp
jKExipIDjgZYE+sDo3ZpbUzLZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqK5Nsa
P5GghNSvaEx2+EkK7b5oMB8GA1UdIwQYMBaAFKk47/uWOuKutvCyZllrikEjd8nZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgzMi9DMjU5RjZCMjM2
MjYxMUYwQjM1QUZBODZDNEY5QUUwMi9xVGp2LTVZNjRxNjI4TEptV1d1S1FTTjN5
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FUanYtNVk2NHE2MjhMSm1XV3VLUVNOM3lkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDgzMi9DMjU5RjZCMjM2MjYxMUYwQjM1QUZBODZDNEY5QUUwMi9xVGp2LTVZNjRx
NjI4TEptV1d1S1FTTjN5ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOEA7cNV2pwhkgGOnNW0Lii1JCfehUWQ6URUPI/6A+tCAf23eVqlhI+IPmTBU
agCHwUSbwhtGM7XCXDGNWnEr7ajJJoe5bqcF8BAPL53Frfr87LduBhoAOBT6HXEv
bYWo7M51WbWMxe7a9yXUD6qZKoDt059Hx6JVKKH7h1Pp5vshiy7weuhrl+kpY9Fg
8MIOIm4yLiEC9lVGg6gNPb0W4BfRAjyU6GRVtQU7yV8ZJcrVsT0sFq/VeX3VdXcd
sdr/fWbVEJvjsJT7O4NXv7I8eaz5XlnaeewlSCYdIVQmzPB5Sw5OMsiQtvnRZy9B
vkR2V3UyM7VgJvRH0nO/t37UDw==
-----END CERTIFICATE-----
Generated at Thu May 21 11:15:39 2026 by rpki-client