
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier: DjlXjNUYhvUXVm0EsC8oyjvGSOKZtGtl8SsQhPqQyWQ=
Subject key identifier: 18:CD:41:06:69:83:6A:91:AA:44:A3:C9:73:BE:41:70:2D:F3:46:6E
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number: E6
Signing time: Mon 21 Sep 2026 06:35:28 +0000
Manifest this update: Mon 21 Sep 2026 06:35:28 +0000
Manifest next update: Mon 28 Sep 2026 06:35:28 +0000
Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: L/CjEENB/Y4nmezSyBs9ho6Zlg3y2zDMo9Oa4fFhyTg=)
2: A73E47B6646611F092E66D56C4F9AE02.roa (hash: +5AmxF2Ot32SjYb4sD4AklzsQoQaBKOXNwxkLnzUCxw=)
3: D8B6AE628B7211F18C52B0985511F970.roa (hash: Tyldns6YlFiHD84mlWWmrD/ipBQh/3NigUuHVUTz170=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Validity
Not Before: Sep 21 06:35:28 2026 GMT
Not After : Sep 28 06:35:28 2026 GMT
Subject: CN=6ab0d030-70f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:0a:31:d4:2e:04:b4:dc:86:5a:b3:52:34:
56:90:10:23:b4:e6:2f:82:50:d8:8b:a7:9a:19:37:
90:5c:f7:76:28:db:ca:49:01:3c:38:b5:cf:27:fa:
e8:60:11:ff:2d:3b:7d:24:43:06:0f:1b:f9:fa:dc:
6a:f6:d9:bb:12:9b:7d:2b:68:69:1d:a3:6e:41:c8:
dc:72:51:02:c1:39:76:1b:9c:fb:13:c1:de:4a:6a:
e6:10:75:11:0c:57:f0:ab:97:6c:bd:a0:be:b5:78:
35:5d:77:5d:b7:02:32:96:02:8e:14:63:9b:ab:05:
63:05:d4:a4:16:13:2d:a7:cb:0c:4d:aa:5a:d0:82:
4e:da:a4:34:06:b5:ba:02:19:10:99:21:03:13:98:
da:c8:bd:9e:da:15:27:f2:95:f3:3a:28:12:64:09:
eb:f8:89:a0:60:ba:f5:e6:db:4d:f3:cd:b4:8c:8c:
fd:29:f9:80:2d:c6:79:c7:c5:0a:d9:87:19:d3:af:
8d:65:a8:4d:da:93:50:7b:e2:a2:57:83:cb:03:22:
bd:c4:e1:1e:36:7f:25:b6:b2:87:85:11:9c:e8:72:
7e:93:ff:cd:72:22:13:eb:f0:20:36:18:d0:4b:6d:
e7:70:ea:68:0e:83:cc:ca:f0:d8:d5:22:38:05:71:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:41:06:69:83:6A:91:AA:44:A3:C9:73:BE:41:70:2D:F3:46:6E
X509v3 Authority Key Identifier:
keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:73:cb:3f:d1:f1:0b:91:d8:2b:68:49:89:cb:a4:a7:56:
61:45:e5:98:d5:b7:8d:1b:3f:84:37:76:f1:56:23:5f:3b:9f:
74:e0:55:f5:d1:18:bf:0c:94:a5:ff:ec:eb:b2:57:05:90:d0:
81:ee:de:19:5c:bd:44:2d:57:73:38:69:61:ba:d0:70:e6:b9:
c4:52:e8:f6:7a:8b:8a:e9:1e:3e:96:8c:30:b8:d3:7a:d7:4b:
2f:e7:31:f1:91:3c:0c:cf:9b:2f:b7:17:0f:8a:ea:b5:be:a5:
05:cc:d2:b1:98:16:d0:2d:c4:f3:c0:7e:f3:23:95:d7:a8:b4:
89:0e:6f:80:b6:9b:59:1c:e3:fe:5a:4e:a0:f1:b4:29:72:55:
89:41:aa:b7:b1:e4:64:21:5f:3a:a8:fe:2b:c7:41:ef:30:d5:
1e:3d:f4:3c:33:48:3a:a4:83:75:15:1c:0e:2b:e9:37:8e:37:
75:d2:3c:44:cf:af:d0:a2:36:0a:5c:fd:92:24:0b:aa:2c:ac:
6b:17:b2:25:51:bd:43:9e:9e:1c:a2:76:29:cc:19:cc:89:68:
87:92:ac:98:dc:30:46:1c:61:05:6f:75:a7:b9:89:9c:a4:32:
ab:42:26:e4:5b:ae:df:75:d2:5c:ee:cc:bc:99:2f:7a:c1:42:
fe:f6:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:14:15 2026 by rpki-client