
$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier: GuxYTRfvEzT/7TpCDzBQjqyi5KvN/PQgJ2N7tHRcshw=
Subject key identifier: 79:D2:4B:6F:AF:42:07:79:1B:BF:7D:6D:93:9D:8E:FA:13:0D:64:DF
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number: 92
Signing time: Fri 17 Apr 2026 07:16:20 +0000
Manifest this update: Fri 17 Apr 2026 07:16:19 +0000
Manifest next update: Fri 24 Apr 2026 07:16:19 +0000
Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: xmnuVD7PRlP+IGe6QCSIRaQNnxMZmi5kb3W3ORfBfQY=)
2: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
3: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
4: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Validity
Not Before: Apr 17 07:16:19 2026 GMT
Not After : Apr 24 07:16:19 2026 GMT
Subject: CN=69e1de44-7877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:21:7c:06:e9:f4:35:d0:2f:01:15:44:3d:
ac:90:34:5a:fe:97:f4:15:80:c4:d7:e2:f3:1a:79:
d7:28:30:0e:db:94:8c:f0:73:02:48:69:6d:79:9d:
e3:54:99:d8:22:a9:fa:75:ca:b4:cd:cc:57:2a:f6:
5c:f1:2f:97:c2:1f:b9:b9:3b:8a:17:de:fb:45:58:
95:c7:d1:53:b5:11:73:d5:ff:7d:66:dc:1c:1b:b9:
35:2b:85:cd:35:75:15:ed:1f:9d:22:4e:85:01:46:
bf:b3:15:e4:59:64:5b:51:f3:ff:7b:ae:91:41:a2:
23:01:2a:83:d3:75:d4:9a:96:2d:d2:55:97:44:16:
0a:1f:0a:65:f9:e7:87:5f:8f:f9:9f:dd:b9:d2:77:
30:52:05:91:36:ae:d0:0a:02:14:66:5c:34:7d:d4:
04:a0:3a:28:35:e2:3b:65:ba:bc:f6:b3:67:b6:df:
d0:49:02:31:f8:f3:0c:0d:03:ee:6e:79:72:67:42:
97:79:77:3d:dc:52:49:6e:c8:7f:70:35:ee:d0:80:
eb:59:c4:9b:c5:26:d4:87:e8:f9:d9:43:41:84:82:
e3:04:9f:c6:8d:e3:e1:34:d7:f1:f8:eb:79:b1:ae:
95:f0:04:5c:02:c1:c6:7f:25:12:81:28:71:90:14:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:4B:6F:AF:42:07:79:1B:BF:7D:6D:93:9D:8E:FA:13:0D:64:DF
X509v3 Authority Key Identifier:
keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:43:26:0d:71:76:79:08:63:50:4a:7d:07:5f:8e:e0:60:3d:
61:41:66:9b:7c:76:a0:76:f8:49:df:05:6f:ec:39:3b:de:bd:
69:a6:d4:6a:90:05:e1:b7:0c:5b:0e:ed:75:97:30:06:77:a7:
6e:74:6e:b4:5f:b7:48:bd:1e:a4:94:b3:05:06:15:c0:4b:c9:
63:78:9b:a0:cb:d7:b5:0f:65:07:14:6e:0d:c3:dc:a2:ae:38:
c3:c5:b4:96:a1:ca:61:92:3e:d9:28:38:f4:2f:ab:2f:5a:6f:
2c:22:1e:1a:e2:e8:27:4f:5e:48:72:1a:52:47:ca:f9:50:25:
a8:cf:a8:92:b1:e3:11:57:c4:c5:64:57:93:c0:92:de:7a:8f:
80:78:f7:74:37:c7:99:ea:f4:5d:77:32:a7:53:93:2c:9f:cf:
41:ef:57:62:6e:1c:0f:a6:4f:07:ee:cb:24:ff:61:68:ab:ec:
06:20:a8:21:0d:8a:e9:73:99:7e:cf:8e:5a:fc:23:af:58:f7:
55:54:74:7f:b7:ad:c0:9d:14:b7:16:4b:d9:3d:86:5f:93:e9:
f3:ba:62:f4:a4:95:f9:f9:27:40:42:47:3f:45:1a:23:2d:eb:
d7:66:1b:9b:56:16:db:03:ca:a6:fa:75:83:ce:df:82:e4:55:
a6:b5:0c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:53 2026 by rpki-client