
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier: sATuJRo71rs5cM6MhJZHCtlbFsHGRX0FQvhQe3/13Io=
Subject key identifier: A3:AC:6A:D5:8E:35:24:11:86:DE:A2:CF:C6:C7:65:9A:5A:E4:A3:9D
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial: 87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number: 80
Signing time: Fri 13 Mar 2026 06:41:34 +0000
Manifest this update: Fri 13 Mar 2026 06:41:33 +0000
Manifest next update: Fri 20 Mar 2026 06:41:33 +0000
Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: Cmg0Qd9AYCFl0tsKMOcTJPK9VMjedig3JkE1FkDlkSE=)
2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
3: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
4: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 06:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Validity
Not Before: Mar 13 06:41:33 2026 GMT
Not After : Mar 20 06:41:33 2026 GMT
Subject: CN=69b3b19e-8ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:76:40:34:a8:ec:c6:2b:a8:65:d8:99:85:
2c:13:45:60:86:a2:ba:5e:a0:d3:ad:29:96:4c:fb:
c6:1a:26:52:3a:bf:ec:72:95:a1:38:65:76:58:24:
58:5a:83:d7:83:33:5a:32:37:09:c6:89:46:ef:67:
b9:82:40:ef:93:38:8a:55:aa:d4:58:a0:9e:70:11:
c3:9d:08:9b:03:ef:56:b4:62:0a:0c:7c:e5:7e:d6:
3c:81:d7:8a:a6:f1:37:97:91:37:18:b2:f8:06:9b:
d7:6c:5d:c0:c4:ca:f8:f0:7d:9c:c4:b5:40:fa:b4:
27:cd:44:44:e9:fb:33:55:7a:29:43:09:ba:30:79:
2d:e9:11:da:28:35:8f:16:51:04:cb:ef:66:73:5e:
3a:5b:79:15:28:19:65:bb:44:8e:43:5e:0f:03:cd:
a5:2b:2d:64:49:73:77:13:61:55:35:71:a4:92:ce:
39:01:f3:b1:e6:4c:83:ba:d3:4b:9b:79:02:ac:2c:
90:87:e1:bb:a5:55:ef:66:49:62:0a:55:0d:ef:a5:
df:96:48:fd:b3:2e:5a:53:de:e4:a4:c4:76:e3:65:
61:a1:0e:6a:a4:2a:f8:17:96:00:c7:33:f0:da:fe:
8c:4d:34:f6:0d:a9:f9:cf:41:11:5c:12:11:5c:df:
5f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:6A:D5:8E:35:24:11:86:DE:A2:CF:C6:C7:65:9A:5A:E4:A3:9D
X509v3 Authority Key Identifier:
keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:12:aa:fa:28:95:e4:e3:a1:b3:94:d1:db:d3:86:02:6a:50:
de:38:83:6a:31:9e:93:cf:53:ce:89:3b:07:be:d7:bd:fb:1b:
15:4b:6d:0d:7e:45:3a:ce:e1:a3:df:1d:ad:ec:1b:6e:17:9d:
97:e4:68:76:c9:9f:6c:5e:37:cf:87:f0:58:bd:88:c0:91:33:
38:ad:2d:e6:0b:65:9f:8a:46:f3:9f:d4:74:bc:60:4b:cc:11:
32:cd:90:62:c6:15:4b:68:ff:47:aa:3a:96:f8:a6:60:ff:a8:
d7:25:2d:b2:2f:10:9d:6b:87:bd:c9:92:eb:72:eb:64:18:9e:
ab:54:33:da:89:d9:a6:2d:c6:0d:de:af:cf:f5:56:67:e1:6b:
1a:98:1a:1b:f4:f8:fa:b3:20:e9:87:33:9c:7d:6e:33:9b:08:
9e:b1:1b:cd:74:ae:58:05:4a:70:06:ae:4e:96:40:d2:b8:03:
19:d4:10:48:00:3e:bd:9c:b8:fe:61:4e:bf:bb:bd:46:cd:8f:
50:b5:63:e6:ca:77:25:8e:9a:5a:f7:01:bb:38:8c:92:86:3e:
91:fa:c5:82:cd:7e:ca:c0:de:33:21:db:3a:aa:b0:f7:b2:62:
bc:20:4c:11:41:7b:18:1c:8b:a3:fc:e8:f3:49:1a:3b:d6:f4:
40:db:3f:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg1RjAxMTAvBgNVBAUTKEFBRDZBMEJDQzREQjA1N0UxNDY5RjFEREIzMDE5QjE2
NTMzMENFNDIwHhcNMjYwMzEzMDY0MTMzWhcNMjYwMzIwMDY0MTMzWjAYMRYwFAYD
VQQDEw02OWIzYjE5ZS04ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoFt2QDSo7MYrqGXYmYUsE0VghqK6XqDTrSmWTPvGGiZSOr/scpWhOGV2WCRY
WoPXgzNaMjcJxolG72e5gkDvkziKVarUWKCecBHDnQibA+9WtGIKDHzlftY8gdeK
pvE3l5E3GLL4BpvXbF3AxMr48H2cxLVA+rQnzURE6fszVXopQwm6MHkt6RHaKDWP
FlEEy+9mc146W3kVKBllu0SOQ14PA82lKy1kSXN3E2FVNXGkks45AfOx5kyDutNL
m3kCrCyQh+G7pVXvZkliClUN76Xflkj9sy5aU97kpMR242VhoQ5qpCr4F5YAxzPw
2v6MTTT2Dan5z0ERXBIRXN9fFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOsatWO
NSQRht6iz8bHZZpa5KOdMB8GA1UdIwQYMBaAFKrWoLzE2wV+FGnx3bMBmxZTMM5C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODVGMC80QkU2OUQwMjY0
MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJYNFVhZkhkc3dHYkZsTXd6
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3prSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODVGMC80QkU2OUQwMjY0MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJY
NFVhZkhkc3dHYkZsTXd6a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfBKq+iiV5OOhs5TR29OGAmpQ3jiDajGek89Tzok7B77XvfsbFUttDX5FOs7h
o98drewbbhedl+RodsmfbF43z4fwWL2IwJEzOK0t5gtln4pG85/UdLxgS8wRMs2Q
YsYVS2j/R6o6lvimYP+o1yUtsi8QnWuHvcmS63LrZBieq1Qz2onZpi3GDd6vz/VW
Z+FrGpgaG/T4+rMg6YcznH1uM5sInrEbzXSuWAVKcAauTpZA0rgDGdQQSAA+vZy4
/mFOv7u9Rs2PULVj5sp3JY6aWvcBuziMkoY+kfrFgs1+ysDeMyHbOqqw97JivCBM
EUF7GByLo/zo80kaO9b0QNs/DA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:54:34 2026 by rpki-client