
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier: 68Bk0p33J/pXEAmfre4vVUIasXN762INJKnwk+ocWjM=
Subject key identifier: 95:0E:97:69:CC:83:A9:16:50:4B:C2:F8:D5:45:BB:39:2E:86:CA:A3
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number: AD
Signing time: Thu 11 Jun 2026 09:32:43 +0000
Manifest this update: Thu 11 Jun 2026 09:32:43 +0000
Manifest next update: Thu 18 Jun 2026 09:32:43 +0000
Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: F/ngvSlGwst5arR7R+OCIn/pPhmaOTQgKg7GmyLT3Mo=)
2: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
3: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
4: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 09:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Validity
Not Before: Jun 11 09:32:43 2026 GMT
Not After : Jun 18 09:32:43 2026 GMT
Subject: CN=6a2a80bb-df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:70:75:3b:8d:56:09:34:6e:09:c5:29:47:
1d:ea:64:54:fe:a6:d8:0f:5a:46:59:57:57:9d:8b:
3e:42:f8:47:97:3b:9f:a2:ec:1e:49:c2:39:a8:5c:
ba:7f:b3:c7:8d:b5:79:d3:d5:ea:6a:ba:83:2a:75:
c7:10:8e:50:1c:5c:ff:24:10:7a:f9:e5:10:81:6d:
bd:7e:07:cb:f0:e4:2c:6e:ff:19:0a:b6:c5:79:2e:
cb:06:3a:34:3b:ea:bf:9d:e8:45:df:73:43:34:a5:
6f:f8:06:70:6f:53:45:af:8a:99:45:7e:04:c3:93:
4b:83:c3:bd:c9:d2:59:46:33:35:58:95:56:8c:42:
d4:03:45:05:2e:c5:09:f8:7e:6a:47:47:8b:1d:13:
6c:f9:70:2f:30:f2:1f:be:e1:3c:55:4f:9b:15:c2:
c0:f1:8d:a3:0f:ad:f3:11:38:97:ca:c7:33:63:88:
82:fd:56:df:50:4e:62:c0:58:45:2f:d0:73:2f:ad:
6f:d2:3c:ef:92:e1:67:b4:6d:b3:db:f7:ca:ee:59:
74:8c:67:b4:78:d1:dc:5a:6a:d4:79:7e:79:c8:a1:
40:54:d9:76:4b:ba:37:4f:d3:d5:06:09:a2:ab:6d:
98:96:06:49:44:c4:c8:98:02:e4:72:12:18:88:55:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:97:69:CC:83:A9:16:50:4B:C2:F8:D5:45:BB:39:2E:86:CA:A3
X509v3 Authority Key Identifier:
keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:36:bb:fb:1d:c9:ad:a4:94:6d:1d:34:72:9d:22:4c:57:87:
85:8a:74:19:38:0a:68:ce:49:5a:7c:6c:58:fe:c1:f2:f2:1c:
b0:3e:0f:83:34:ea:36:e7:9d:99:29:72:e7:f2:76:6c:1d:a3:
a6:fd:b2:04:f3:29:a3:b7:6a:e5:a4:8b:05:b2:2a:a4:50:9e:
39:06:59:3c:1c:b9:58:2f:84:19:79:67:72:34:1f:4c:dc:68:
79:4f:74:fc:66:84:db:a8:b8:e5:04:a4:af:95:b2:a2:32:5f:
aa:f7:44:24:9e:d8:f3:a4:40:af:6b:ba:6a:85:66:28:57:49:
ef:0e:e5:fd:0e:dd:d1:86:c5:52:af:49:fb:ee:db:8f:15:15:
89:d7:0d:66:a1:41:b2:37:ca:a7:2d:ae:d7:1b:af:80:34:10:
0a:d4:a2:58:b4:9e:49:17:74:e2:2c:44:1d:f0:bf:85:31:cf:
73:2e:da:fa:30:69:49:5a:ca:10:7e:fc:0b:fc:64:fd:b9:80:
dd:76:47:6e:40:57:61:1c:5b:28:3e:f5:9a:06:1a:61:5d:d6:
a4:58:77:2e:eb:ca:d2:de:b4:0c:9c:08:db:91:24:02:15:5d:
f6:3e:97:3c:fd:61:9a:72:50:da:ec:98:39:b6:eb:21:5d:9e:
8c:d1:90:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 23:43:15 2026 by rpki-client