
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier: 7jX9Pwbfy5BOWQS0DYXdVPmtxjYj+o1/bB0LmBeHGQ8=
Subject key identifier: 46:E5:16:09:70:35:10:DD:C5:63:10:CD:88:FB:C4:4A:29:A8:DF:E0
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number: 97
Signing time: Mon 27 Apr 2026 07:22:06 +0000
Manifest this update: Mon 27 Apr 2026 07:22:05 +0000
Manifest next update: Mon 04 May 2026 07:22:05 +0000
Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: GbsU9pxdc3bLTSow5TBxH2tFu4QwaB5PKYUVQdl0iCA=)
2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
3: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
4: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 07:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Validity
Not Before: Apr 27 07:22:05 2026 GMT
Not After : May 4 07:22:05 2026 GMT
Subject: CN=69ef0e9e-0909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:be:22:ba:c0:77:5b:7d:61:1a:3d:db:ce:
6e:91:60:b8:18:f7:db:92:cb:f3:1e:2f:78:9e:54:
96:5b:55:5d:7b:d8:2c:e7:ab:e0:dd:15:aa:fe:cb:
2d:15:13:03:d9:ba:3c:bb:2b:be:7c:2d:2f:4c:d2:
ed:ae:ec:78:c6:03:5a:d7:af:4a:bc:3e:43:82:5a:
99:f8:2f:75:79:16:3b:36:42:67:cb:12:12:42:86:
b6:f6:98:0a:d1:0a:64:ae:98:7e:f0:40:91:08:04:
2c:63:2c:43:d0:41:5a:5f:a4:37:58:8c:61:93:84:
3c:2e:f1:92:1d:65:0f:98:8b:b9:ee:69:92:82:1d:
df:8f:a8:15:99:4e:6b:f8:a9:37:0f:5b:22:77:28:
b6:eb:48:a2:ca:80:7e:14:14:bf:cd:d8:80:39:98:
cd:7d:ab:01:32:ee:78:e2:bb:d5:0e:c1:a9:56:ac:
4b:08:1b:e6:91:e1:00:d3:c1:72:3b:9d:7c:51:fc:
6e:52:b3:c6:77:f3:b0:94:19:53:6d:2e:9b:85:c7:
b7:a7:b6:0f:ec:15:a8:df:5c:3e:42:45:b0:e6:70:
00:02:fc:02:67:b7:09:5a:f9:88:77:57:ae:73:2a:
74:b4:2f:d1:a7:f9:10:cb:be:34:d5:fd:ff:2e:b0:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:16:09:70:35:10:DD:C5:63:10:CD:88:FB:C4:4A:29:A8:DF:E0
X509v3 Authority Key Identifier:
keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:da:ec:0b:ee:6a:23:bd:98:96:4b:b4:dd:41:81:f7:9a:73:
86:b5:5c:65:e4:d8:ba:c3:74:85:59:7d:75:40:ba:d5:54:a1:
8d:36:52:30:d8:c9:8b:b2:69:75:f6:70:f1:ef:46:fd:c3:08:
6a:bb:32:20:9c:6d:28:1c:be:a7:9d:7b:a7:39:09:61:1b:69:
b6:c6:07:4c:e3:c5:bd:fc:c1:c6:8a:36:12:20:af:bd:73:5c:
d3:f3:8b:ab:59:08:ed:2f:49:3c:c8:81:91:3f:10:19:3e:13:
3a:8f:83:7c:24:f5:29:f6:8e:6a:a2:b8:81:01:ee:d0:2a:02:
22:e2:9a:aa:99:d2:a8:11:fb:5c:2b:09:56:c6:52:1a:43:2e:
14:ae:a2:b1:11:35:01:94:15:db:a0:88:55:77:82:c5:33:59:
1f:c0:92:d5:dd:82:a2:7b:ed:3b:97:39:17:07:86:0e:53:da:
90:bc:6b:8b:b1:d0:90:fb:bb:a0:2a:b6:a8:d8:65:98:09:28:
1d:b2:98:8d:3b:32:5c:c5:92:b8:3a:2d:ed:cf:1a:bb:97:ce:
b8:79:e5:19:cf:08:46:d9:57:30:1a:d4:63:51:51:11:93:e1:
e9:51:d8:79:0c:a9:5b:b6:56:93:e9:63:77:05:7b:d0:32:86:
95:8b:fd:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg1RjAxMTAvBgNVBAUTKEFBRDZBMEJDQzREQjA1N0UxNDY5RjFEREIzMDE5QjE2
NTMzMENFNDIwHhcNMjYwNDI3MDcyMjA1WhcNMjYwNTA0MDcyMjA1WjAYMRYwFAYD
VQQDEw02OWVmMGU5ZS0wOTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHm+IrrAd1t9YRo9285ukWC4GPfbksvzHi94nlSWW1Vde9gs56vg3RWq/sst
FRMD2bo8uyu+fC0vTNLtrux4xgNa169KvD5DglqZ+C91eRY7NkJnyxISQoa29pgK
0Qpkrph+8ECRCAQsYyxD0EFaX6Q3WIxhk4Q8LvGSHWUPmIu57mmSgh3fj6gVmU5r
+Kk3D1sidyi260iiyoB+FBS/zdiAOZjNfasBMu544rvVDsGpVqxLCBvmkeEA08Fy
O518UfxuUrPGd/OwlBlTbS6bhce3p7YP7BWo31w+QkWw5nAAAvwCZ7cJWvmId1eu
cyp0tC/Rp/kQy7401f3/LrBGEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEblFglw
NRDdxWMQzYj7xEopqN/gMB8GA1UdIwQYMBaAFKrWoLzE2wV+FGnx3bMBmxZTMM5C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODVGMC80QkU2OUQwMjY0
MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJYNFVhZkhkc3dHYkZsTXd6
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3prSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODVGMC80QkU2OUQwMjY0MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJY
NFVhZkhkc3dHYkZsTXd6a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnNrsC+5qI72Ylku03UGB95pzhrVcZeTYusN0hVl9dUC61VShjTZSMNjJi7Jp
dfZw8e9G/cMIarsyIJxtKBy+p517pzkJYRtptsYHTOPFvfzBxoo2EiCvvXNc0/OL
q1kI7S9JPMiBkT8QGT4TOo+DfCT1KfaOaqK4gQHu0CoCIuKaqpnSqBH7XCsJVsZS
GkMuFK6isRE1AZQV26CIVXeCxTNZH8CS1d2ConvtO5c5FweGDlPakLxri7HQkPu7
oCq2qNhlmAkoHbKYjTsyXMWSuDot7c8au5fOuHnlGc8IRtlXMBrUY1FREZPh6VHY
eQypW7ZWk+ljdwV70DKGlYv9mw==
-----END CERTIFICATE-----
Generated at Tue Apr 28 12:44:51 2026 by rpki-client