
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json)
Hash identifier: mQrQ8nLmzGejTP9+txOQojeRT/bZz5n7PJJpzuTUSik=
Subject key identifier: 1F:34:5F:F7:F0:AE:7C:44:90:E3:A8:7A:5E:3D:DC:05:64:DE:A2:E2
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial: 1A9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
Manifest number: 1A90
Signing time: Sat 04 Apr 2026 16:14:38 +0000
Manifest this update: Sat 04 Apr 2026 16:14:38 +0000
Manifest next update: Sat 11 Apr 2026 16:14:38 +0000
Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: NhY00Wi1dXbgrQGSftoQQRYsY/BO4uL68iFT3el+vto=)
2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: IsnopfiraJYXUMgM3zC6fdbepjtRf+a2njqVEtH3VtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6810 (0x1a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Validity
Not Before: Apr 4 16:14:38 2026 GMT
Not After : Apr 11 16:14:38 2026 GMT
Subject: CN=69d138ee-980d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:9b:da:25:2b:97:c5:22:51:07:b1:98:36:
78:15:89:3e:81:a7:aa:73:81:69:43:dd:c4:bc:45:
be:df:07:d7:85:0a:3b:6f:77:41:a8:40:50:09:da:
b6:23:15:ad:02:d9:8f:df:a9:c7:97:4b:4b:b0:e4:
d4:67:db:ef:73:fa:79:dc:2a:b3:95:82:ea:d0:b7:
13:54:f7:aa:1e:42:1f:62:37:4b:3b:b6:24:96:20:
94:1f:7b:bf:2a:05:e0:7f:c0:55:b8:be:57:ac:d1:
ea:43:c5:44:6b:5a:03:4f:8c:61:be:10:72:39:b9:
59:56:8d:06:fb:84:f6:b4:5a:6e:f3:69:58:c9:3e:
ce:51:75:e8:bc:ca:64:05:cc:a0:19:7d:6c:7b:fd:
e9:49:94:0b:4a:e7:ad:c0:bb:2c:82:ab:87:fa:ef:
15:f5:e7:4a:4a:58:10:b6:0b:03:8d:2e:8e:2f:cb:
2c:0e:5f:08:8b:1f:f8:e6:5f:d5:3f:78:ca:6c:01:
d6:b4:e1:4e:c0:20:64:fb:59:7d:6b:e8:15:0e:8a:
64:52:65:e6:89:a2:84:2b:cd:f3:56:c7:2f:48:5c:
b9:77:bf:af:23:8f:51:b1:e9:4f:26:fb:4d:12:a5:
74:3f:28:3e:b6:c8:a9:cc:4c:ff:5a:3c:b2:d3:69:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:5F:F7:F0:AE:7C:44:90:E3:A8:7A:5E:3D:DC:05:64:DE:A2:E2
X509v3 Authority Key Identifier:
keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:7a:a3:fc:ac:37:ba:62:eb:5c:80:3e:b1:e7:21:20:92:8a:
e4:cf:78:e7:cd:a1:51:22:5d:db:45:c2:eb:f3:b9:58:41:cd:
b0:81:ef:73:50:03:49:cc:b9:c7:2f:e3:ab:dd:b8:96:a5:ce:
0f:dd:aa:d6:81:5c:8d:04:6c:0e:31:12:44:8d:d1:9a:4d:d0:
10:d8:e6:cc:04:1f:25:2b:37:34:43:ce:11:c0:59:81:8a:13:
2b:4c:c3:86:a6:96:5b:2b:30:e4:62:37:ad:c0:db:6e:f3:cb:
0b:b4:1c:4d:79:cd:39:d2:79:d9:5c:45:18:60:0c:b5:9f:c4:
88:a7:ea:2a:e8:fc:58:a6:10:e8:99:f3:ea:d2:b9:15:ad:05:
01:0f:b6:a5:0b:08:ae:ea:ba:f1:cb:76:f2:8c:be:7a:1d:e5:
51:dd:1b:fa:20:88:c5:01:14:42:c6:11:9e:e2:d1:1a:7e:8f:
2d:f4:5d:f8:21:6a:02:4a:0c:75:72:7f:d1:b9:5d:0e:ea:c4:
31:2e:3b:ec:d1:28:33:fd:5f:22:a6:7c:9a:e5:d6:60:da:ca:
10:a1:81:5d:bd:79:c5:34:0c:00:f6:0d:11:39:32:aa:2a:c3:
3a:89:b0:1e:a8:02:0d:23:04:19:fe:84:64:1d:d1:19:11:42:
0a:33:8a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:48 2026 by rpki-client