
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
File: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json)
Hash identifier: hm+e6q1GynfH4/IhL8q+HYaWqXr2PcAjB/YMc8ZG1xY=
Subject key identifier: 59:A5:CD:E4:11:C8:7F:48:EF:6E:9A:4A:84:57:5E:B1:E9:01:C2:08
Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Certificate issuer: /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
Manifest number: 57
Signing time: Fri 21 Aug 2026 08:12:57 +0000
Manifest this update: Fri 21 Aug 2026 08:12:57 +0000
Manifest next update: Fri 28 Aug 2026 08:12:57 +0000
Files and hashes: 1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: 0pgQcfuTRPvwchFte1dSiUoIBoG8HzZtk7d9dKRswUc=)
2: CDBA019C39F311F1ADEB5DEEC0833773.roa (hash: iidMH4KhBMhVgK4N0PlQBp3CYB4iLSSSQ1RpsnRFm3E=)
3: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 08:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Validity
Not Before: Aug 21 08:12:57 2026 GMT
Not After : Aug 28 08:12:57 2026 GMT
Subject: CN=6a880889-ba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:88:73:f9:31:0f:14:d6:d7:37:b4:6e:26:
af:b0:50:c1:17:88:5e:d1:40:51:c1:a0:a6:92:a2:
4f:fc:27:61:28:bf:1a:a9:8f:6f:6c:00:01:dc:18:
02:e8:62:3e:5b:04:d7:8e:1a:98:1b:f1:e9:ef:ca:
19:b6:b2:c8:be:3a:83:3e:e7:7b:c2:6e:3d:46:3c:
c9:c8:e4:4c:3a:cb:0e:53:67:fa:d9:38:51:b1:9e:
58:63:5d:5f:27:4b:bc:b1:22:f7:09:54:6a:ed:dc:
a3:31:a7:39:be:9b:e3:8d:33:89:dc:1b:da:ce:a9:
8e:e7:9e:1d:a6:b7:d1:b6:5e:12:25:26:c7:2d:9f:
0b:48:ce:18:a7:32:8d:8f:44:04:66:1a:50:f7:2a:
3e:c6:a8:c3:90:09:98:56:55:07:94:3f:84:5d:71:
c6:49:7c:79:a0:a0:3f:67:1d:9f:41:d7:48:05:b5:
97:26:da:fd:4a:ac:af:54:a7:1b:b7:3f:6b:2c:f2:
77:ad:74:25:c3:8d:74:ab:75:9b:34:77:14:35:44:
6d:df:d8:b8:13:3e:7e:a7:2b:d1:65:23:f3:36:9e:
2c:13:f6:e3:42:c7:07:41:6c:82:34:13:b3:47:fe:
67:4a:d4:80:68:c9:0a:55:ad:64:d1:28:93:81:72:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A5:CD:E4:11:C8:7F:48:EF:6E:9A:4A:84:57:5E:B1:E9:01:C2:08
X509v3 Authority Key Identifier:
keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:30:6d:f6:76:c0:cd:fa:66:4b:5b:3c:06:17:77:2d:c7:e2:
64:e6:45:14:22:26:ae:18:3b:3d:ce:82:22:2c:fb:64:8a:ee:
65:6c:e5:32:d0:fe:e3:02:14:ae:32:9c:5f:41:76:cc:13:3b:
a5:af:6f:9f:96:3f:3b:46:e7:74:34:b6:23:c7:f3:12:a8:fe:
9c:fa:2a:03:a9:02:63:5d:34:c3:8d:26:6f:86:9d:4f:83:8f:
e4:1e:59:01:34:58:e5:3a:66:e3:d2:37:b2:70:b5:b0:90:91:
1f:94:b1:67:63:44:8b:6f:a9:ba:ab:9b:36:d2:28:ad:ff:d8:
1e:5c:dc:cd:8a:c9:50:97:0e:5f:ec:90:ea:c7:fc:7f:6f:3a:
81:f4:fb:85:05:0e:aa:e2:bb:00:9d:b8:57:3a:e2:a5:76:d0:
ec:06:0b:7b:f8:cc:ca:e5:2c:58:c3:ca:31:c2:5e:e9:fe:65:
79:22:fd:63:46:2a:19:6d:a7:04:42:05:e5:74:3a:87:cc:fc:
2e:0c:0c:2b:45:66:d6:b8:9b:cb:ae:ba:c4:ca:e0:c1:4f:4d:
04:78:56:9b:53:9e:63:e1:9f:e2:b6:bf:21:ec:a3:10:65:68:
91:ec:30:78:6c:f6:c2:bf:42:b6:bd:fe:7e:36:f4:4c:91:ec:
43:29:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:05:11 2026 by rpki-client