
$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
File: QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json)
Hash identifier: abAcyOY2qI1V7ECoTsNRiKRCwOQ5d5YoQafYE8gLKTE=
Subject key identifier: 83:25:E5:EA:DF:71:52:4A:57:36:E0:3C:D3:CE:C1:31:62:22:90:FC
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial: 0904
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
Manifest number: 08E0
Signing time: Thu 16 Apr 2026 20:22:15 +0000
Manifest this update: Thu 16 Apr 2026 20:22:15 +0000
Manifest next update: Thu 23 Apr 2026 20:22:15 +0000
Files and hashes: 1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: SUDQqXPDwmuv4htHuysvPl/fhWkzAJRmGnrvqLHQ4H0=)
2: 036D9582D09611F0AF11A347C4F9AE02.roa (hash: U/Cth24XW1eH8PSpCPgWjeZm4V+I2IuNPWViPcU9EHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:22:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Validity
Not Before: Apr 16 20:22:15 2026 GMT
Not After : Apr 23 20:22:15 2026 GMT
Subject: CN=69e144f7-22d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:56:49:2c:0c:fb:6f:24:37:08:4a:78:39:
00:a3:e2:e5:90:fd:c8:62:ed:e1:7b:ee:98:36:13:
91:2a:6a:74:39:22:1d:9a:e9:97:8c:ae:cb:e9:91:
2c:f4:58:7f:ad:47:de:b5:18:00:f7:af:21:3a:c3:
8a:5b:a7:a6:a5:80:1f:13:e2:59:77:ec:75:18:23:
16:c4:17:b9:c8:cf:3b:b7:1b:09:e5:7e:93:72:72:
cd:41:4b:16:4c:45:73:47:72:0f:c2:ff:c7:cd:3e:
00:74:42:26:95:a9:c5:c6:7c:46:50:1a:7a:54:c8:
4a:e9:e3:04:80:5c:19:46:d1:cb:31:79:50:f7:01:
17:67:18:3e:c1:1d:a9:34:80:c1:7f:ae:c8:80:75:
87:09:69:ac:dd:6a:54:d8:16:28:05:6d:98:aa:de:
a9:9f:1e:ae:dc:6f:c8:62:4b:87:a6:85:fe:19:9a:
f9:6b:63:a8:2c:71:1f:e8:e1:1e:b9:19:18:45:81:
66:ff:db:9e:05:df:95:b8:d9:a1:93:e0:6d:39:4b:
5a:5b:55:3d:67:76:31:a3:68:e2:6a:a6:44:c9:7d:
9c:e3:0c:fb:88:d3:2b:5e:97:ae:b1:e9:e3:7f:ab:
ca:b4:5d:8e:80:9a:a4:9e:0d:07:6f:26:eb:cd:8c:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:E5:EA:DF:71:52:4A:57:36:E0:3C:D3:CE:C1:31:62:22:90:FC
X509v3 Authority Key Identifier:
keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:80:13:6f:c7:b6:4f:6a:1e:3f:23:57:da:42:55:b0:16:be:
15:8c:71:37:31:07:c0:62:01:b9:4d:29:c7:f3:96:0e:ce:18:
72:5e:00:e5:39:ee:6d:57:de:e4:33:b5:0d:e2:46:f4:ab:09:
a0:41:b7:f8:08:6a:f1:8f:41:e1:b8:d8:19:50:e0:6f:c8:33:
7f:59:a5:6b:ab:03:56:e9:ca:74:76:1f:27:86:49:b6:6e:c3:
2d:8f:69:2a:dd:e2:4d:bc:92:fb:59:fd:ef:73:43:68:bf:e7:
8d:ef:e7:2d:1b:14:93:31:1d:c3:dc:83:27:d6:cf:aa:fa:7e:
2d:09:71:07:14:12:dd:9a:2f:d7:e7:fb:b0:6e:9c:af:2f:7f:
4b:1a:44:b1:4f:15:ec:02:55:79:80:42:90:4b:98:ba:e5:96:
34:98:11:b9:4a:9d:46:39:c8:18:3d:0a:aa:bc:4f:ad:2a:63:
16:9e:e0:b6:8a:b2:22:29:fa:bd:68:f7:90:8e:52:d8:04:3f:
16:bc:ba:ea:ab:39:03:02:8e:65:7e:50:ea:62:40:c4:a6:85:
38:40:02:93:ea:d0:8f:49:c5:d7:7e:83:a1:4d:2b:b0:94:bd:
f9:88:41:97:ec:eb:70:70:3e:f5:c1:23:50:53:41:5d:a6:4f:
47:fa:15:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw
RkM0NTQ2Q0YwHhcNMjYwNDE2MjAyMjE1WhcNMjYwNDIzMjAyMjE1WjAYMRYwFAYD
VQQDEw02OWUxNDRmNy0yMmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvixWSSwM+28kNwhKeDkAo+LlkP3IYu3he+6YNhORKmp0OSIdmumXjK7L6ZEs
9Fh/rUfetRgA968hOsOKW6empYAfE+JZd+x1GCMWxBe5yM87txsJ5X6TcnLNQUsW
TEVzR3IPwv/HzT4AdEImlanFxnxGUBp6VMhK6eMEgFwZRtHLMXlQ9wEXZxg+wR2p
NIDBf67IgHWHCWms3WpU2BYoBW2Yqt6pnx6u3G/IYkuHpoX+GZr5a2OoLHEf6OEe
uRkYRYFm/9ueBd+VuNmhk+BtOUtaW1U9Z3Yxo2jiaqZEyX2c4wz7iNMrXpeusenj
f6vKtF2OgJqkng0HbybrzYyQFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMl5erf
cVJKVzbgPNPOwTFiIpD8MB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD
MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1
UnFTM1dHUTI3TDBQeEZSczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMoATb8e2T2oePyNX2kJVsBa+FYxxNzEHwGIBuU0px/OWDs4Ycl4A5TnubVfe
5DO1DeJG9KsJoEG3+Ahq8Y9B4bjYGVDgb8gzf1mla6sDVunKdHYfJ4ZJtm7DLY9p
Kt3iTbyS+1n973NDaL/nje/nLRsUkzEdw9yDJ9bPqvp+LQlxBxQS3Zov1+f7sG6c
ry9/SxpEsU8V7AJVeYBCkEuYuuWWNJgRuUqdRjnIGD0KqrxPrSpjFp7gtoqyIin6
vWj3kI5S2AQ/Fry66qs5AwKOZX5Q6mJAxKaFOEACk+rQj0nF136DoU0rsJS9+YhB
l+zrcHA+9cEjUFNBXaZPR/oViA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:31 2026 by rpki-client