
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier: oHaVWd929GxJNWjs4EzIcoc0H9Y6FxzDC9WdRASW1OI=
Subject key identifier: 9F:C6:FC:E1:E9:51:5A:AB:6F:6D:36:15:B1:BE:14:27:8A:EC:8D:47
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial: B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number: AE
Signing time: Sat 13 Jun 2026 07:18:14 +0000
Manifest this update: Sat 13 Jun 2026 07:18:13 +0000
Manifest next update: Sat 20 Jun 2026 07:18:13 +0000
Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: gfD1oHeZTtyE6mOb7GAnpx+RJfb+QqfFKWLkOyoYH14=)
2: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
3: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
4: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 07:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181 (0xb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Validity
Not Before: Jun 13 07:18:13 2026 GMT
Not After : Jun 20 07:18:13 2026 GMT
Subject: CN=6a2d0436-994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:18:32:46:26:6d:ff:04:c2:89:17:31:b0:aa:
bc:a7:a0:fd:9a:3d:cc:6f:bf:77:1f:86:a3:c6:ee:
db:9e:de:b3:e3:d6:33:ff:00:65:a8:5a:3f:54:99:
5b:94:7c:f5:17:14:3d:c3:d6:8d:55:2b:30:a0:8f:
6b:fd:47:54:18:5d:88:73:0f:47:9b:d2:a3:74:6b:
da:d2:d0:73:d7:86:59:a1:ca:a0:46:7e:f5:43:22:
08:87:fa:eb:bb:fa:57:5b:04:77:0c:6e:c0:18:43:
a3:10:e3:e3:c4:42:4c:b2:63:39:e9:a1:0a:de:1e:
7e:aa:c6:92:72:20:e0:31:53:57:20:12:96:7e:94:
68:13:31:ee:17:5d:97:c1:af:47:4c:4d:ec:db:d9:
bf:9b:ea:6a:36:52:6a:9c:b6:3f:0f:14:52:d0:df:
73:0b:69:f9:33:a8:5b:1c:92:ff:e9:62:82:db:97:
5f:c7:6e:d6:91:55:d1:ef:cb:c2:b8:dc:a2:be:80:
1e:84:d3:e4:fc:ca:79:93:bf:76:0e:84:00:0a:c9:
23:ee:05:4f:6a:2b:6a:b1:a5:38:12:e6:78:45:3b:
2b:3b:b4:f5:27:ac:5b:c6:99:c9:d1:f8:95:0f:87:
38:d6:56:32:c8:50:aa:50:66:a4:0e:ea:50:cc:29:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:FC:E1:E9:51:5A:AB:6F:6D:36:15:B1:BE:14:27:8A:EC:8D:47
X509v3 Authority Key Identifier:
keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:cc:a4:9d:1d:f7:66:b9:eb:ec:37:e6:be:ef:9c:71:2d:7a:
06:99:f3:e5:1f:06:88:e5:65:4e:ca:9b:4e:c3:7f:c5:6d:cd:
95:1f:23:c9:bd:6a:73:03:44:23:28:fe:33:ac:0b:a7:39:f0:
9b:66:99:28:ca:f1:63:06:f0:cc:14:1f:90:19:51:86:f4:77:
c8:20:1c:33:7b:df:0a:e8:d9:91:92:bb:52:63:55:3a:16:b9:
95:0f:b4:35:f5:5c:57:fe:e3:a8:4b:b0:ff:de:f1:3e:ba:fb:
c7:ec:2f:74:34:77:14:cb:cf:6a:26:c5:2b:fd:10:8c:18:bf:
19:44:c0:ce:25:b8:d6:19:63:36:90:8d:79:61:a7:78:83:43:
91:5d:df:46:1c:55:6c:7c:59:02:f5:22:d0:57:d5:a6:45:9a:
93:9e:32:40:91:3a:45:88:3f:2c:f7:c7:8a:9a:d6:e9:88:0d:
63:52:77:5e:dd:22:7c:94:75:ae:a7:34:7f:72:c0:e4:45:66:
4a:a0:be:4a:3b:ad:00:18:2e:89:f5:b9:ac:5a:f4:10:95:04:
60:46:06:44:83:51:4a:94:ac:d9:54:5f:ba:35:76:04:43:05:
1d:fe:d6:83:88:e0:ef:ca:bb:6b:f6:44:c8:36:23:38:62:8a:
23:49:22:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg1RjAxMTAvBgNVBAUTKEFBRDZBMEJDQzREQjA1N0UxNDY5RjFEREIzMDE5QjE2
NTMzMENFNDIwHhcNMjYwNjEzMDcxODEzWhcNMjYwNjIwMDcxODEzWjAYMRYwFAYD
VQQDEw02YTJkMDQzNi05OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxgyRiZt/wTCiRcxsKq8p6D9mj3Mb793H4ajxu7bnt6z49Yz/wBlqFo/VJlb
lHz1FxQ9w9aNVSswoI9r/UdUGF2Icw9Hm9KjdGva0tBz14ZZocqgRn71QyIIh/rr
u/pXWwR3DG7AGEOjEOPjxEJMsmM56aEK3h5+qsaSciDgMVNXIBKWfpRoEzHuF12X
wa9HTE3s29m/m+pqNlJqnLY/DxRS0N9zC2n5M6hbHJL/6WKC25dfx27WkVXR78vC
uNyivoAehNPk/Mp5k792DoQACskj7gVPaitqsaU4EuZ4RTsrO7T1J6xbxpnJ0fiV
D4c41lYyyFCqUGakDupQzCmocwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/G/OHp
UVqrb202FbG+FCeK7I1HMB8GA1UdIwQYMBaAFKrWoLzE2wV+FGnx3bMBmxZTMM5C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODVGMC80QkU2OUQwMjY0
MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJYNFVhZkhkc3dHYkZsTXd6
a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3prSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODVGMC80QkU2OUQwMjY0MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJY
NFVhZkhkc3dHYkZsTXd6a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZsyknR33Zrnr7Dfmvu+ccS16Bpnz5R8GiOVlTsqbTsN/xW3NlR8jyb1qcwNE
Iyj+M6wLpznwm2aZKMrxYwbwzBQfkBlRhvR3yCAcM3vfCujZkZK7UmNVOha5lQ+0
NfVcV/7jqEuw/97xPrr7x+wvdDR3FMvPaibFK/0QjBi/GUTAziW41hljNpCNeWGn
eINDkV3fRhxVbHxZAvUi0FfVpkWak54yQJE6RYg/LPfHiprW6YgNY1J3Xt0ifJR1
rqc0f3LA5EVmSqC+SjutABguifW5rFr0EJUEYEYGRINRSpSs2VRfujV2BEMFHf7W
g4jg78q7a/ZEyDYjOGKKI0kinQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:32:45 2026 by rpki-client