
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft
File: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft (raw, json)
Hash identifier: BgKcacP6bPkf71OrJsQg6t024YENaWgSSRA0gTu8moU=
Subject key identifier: A7:FF:8D:F6:EB:2A:4D:01:A7:52:BE:0B:17:C2:90:55:EE:49:41:C1
Authority key identifier: B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7
Certificate issuer: /CN=A9185B41/serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7
Certificate serial: 0AD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft
Manifest number: 135D
Signing time: Sat 28 Feb 2026 19:40:04 +0000
Manifest this update: Sat 28 Feb 2026 19:40:04 +0000
Manifest next update: Sat 07 Mar 2026 19:40:04 +0000
Files and hashes: 1: tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl (hash: r1XwJm4zNf1vDbZHYymtXhogpwp8YnNgSAv9/59vluU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl
rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:40:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B41, serialNumber=B6A23E32B4535951615CEA4AB1B681650D694CB7
Validity
Not Before: Feb 28 19:40:04 2026 GMT
Not After : Mar 7 19:40:04 2026 GMT
Subject: CN=69a34494-1418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:e3:5b:f1:98:9e:ea:f7:2f:6b:b8:77:1b:
da:da:b8:7e:96:24:45:49:a9:a1:f9:a1:77:af:2c:
f0:45:ef:f7:1d:f0:f3:9d:56:d2:da:01:a9:05:f9:
f7:44:b8:1f:76:ec:1a:37:e2:1b:96:ec:2c:4c:2a:
b0:41:08:cb:f4:e4:fa:e0:d4:a1:f5:f5:71:57:05:
0d:d3:39:a8:e9:7b:2f:12:4a:84:29:a8:63:19:c3:
0f:85:73:4d:43:88:de:22:50:38:a0:78:2c:da:22:
13:26:a5:2c:95:92:0d:1b:34:78:ee:d5:e3:e5:4d:
7b:00:36:b0:a6:32:32:dc:6c:26:17:08:f0:00:f1:
d7:d1:98:67:b2:af:d8:39:7d:3e:70:91:2b:fd:d6:
49:55:36:30:d7:51:e2:f0:aa:2d:92:5a:f4:da:3a:
ef:1d:3c:d8:30:fb:c3:c1:9e:a7:58:1b:75:fd:13:
5b:80:3e:61:26:f6:f2:93:50:f6:22:fe:21:5a:7f:
6d:a4:a8:28:cd:96:b0:82:51:f1:0c:a3:ad:a2:4d:
40:72:06:f0:ef:76:cd:d9:68:53:88:12:5c:c9:ff:
ec:a9:87:8b:f4:e7:46:a0:bf:dd:65:e8:de:e1:e4:
78:bf:36:0e:92:19:ca:c7:9e:ae:02:56:93:6a:2b:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:8D:F6:EB:2A:4D:01:A7:52:BE:0B:17:C2:90:55:EE:49:41:C1
X509v3 Authority Key Identifier:
keyid:B6:A2:3E:32:B4:53:59:51:61:5C:EA:4A:B1:B6:81:65:0D:69:4C:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/tqI-MrRTWVFhXOpKsbaBZQ1pTLc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:27:25:0e:fb:9c:05:17:12:41:08:5a:b9:f8:4e:3c:85:e7:
01:11:81:14:18:63:6e:e5:4d:51:b4:be:87:db:5c:6d:8a:83:
06:e7:1e:a8:e3:94:aa:5a:d1:94:bf:c6:3b:e2:98:c1:10:93:
df:9b:03:3d:72:52:d6:aa:e4:ac:c5:8e:6a:27:81:30:db:f3:
0c:5a:7a:3a:b4:f5:a7:4b:de:da:72:17:f0:4f:11:74:37:41:
ed:f5:04:89:d1:3f:69:32:78:52:2d:5e:45:93:ff:a1:b8:db:
f8:d9:5d:36:6e:48:3f:c7:28:aa:eb:40:80:aa:40:2a:3a:a1:
1b:67:8a:ce:53:98:95:9d:3f:68:c3:2b:cf:90:b5:76:5e:fc:
f4:04:fd:9d:f2:92:32:70:40:8b:e8:87:79:63:07:fe:d5:05:
a3:e3:ef:1c:d7:92:c8:90:f6:d9:05:40:cf:0a:c1:b4:08:21:
d5:62:35:8b:c4:31:1d:f9:f2:2c:6b:99:80:15:53:7d:8f:8c:
99:1d:b6:55:68:bc:58:3d:0a:ad:18:58:a8:4a:c5:63:d6:dd:
a3:0e:46:b9:e4:73:67:90:ca:18:e7:37:71:cb:0c:06:fc:55:
da:b5:25:94:a3:d1:d5:da:19:b6:cd:18:78:8f:ff:86:d0:cb:
3e:8f:4c:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNDExMTAvBgNVBAUTKEI2QTIzRTMyQjQ1MzU5NTE2MTVDRUE0QUIxQjY4MTY1
MEQ2OTRDQjcwHhcNMjYwMjI4MTk0MDA0WhcNMjYwMzA3MTk0MDA0WjAYMRYwFAYD
VQQDDA02OWEzNDQ5NC0xNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYnjW/GYnur3L2u4dxva2rh+liRFSamh+aF3ryzwRe/3HfDznVbS2gGpBfn3
RLgfduwaN+IbluwsTCqwQQjL9OT64NSh9fVxVwUN0zmo6XsvEkqEKahjGcMPhXNN
Q4jeIlA4oHgs2iITJqUslZINGzR47tXj5U17ADawpjIy3GwmFwjwAPHX0Zhnsq/Y
OX0+cJEr/dZJVTYw11Hi8Kotklr02jrvHTzYMPvDwZ6nWBt1/RNbgD5hJvbyk1D2
Iv4hWn9tpKgozZawglHxDKOtok1Acgbw73bN2WhTiBJcyf/sqYeL9OdGoL/dZeje
4eR4vzYOkhnKx56uAlaTaissiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKf/jfbr
Kk0Bp1K+CxfCkFXuSUHBMB8GA1UdIwQYMBaAFLaiPjK0U1lRYVzqSrG2gWUNaUy3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI0MS9BMUVEQ0ZGRTY3
OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdWRmhYT3BLc2JhQlpRMXBU
TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RxSS1NclJUV1ZGaFhPcEtzYmFCWlExcFRMYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUI0MS9BMUVEQ0ZGRTY3OTkxMUVBQjY3QjM0ODRDNEY5QUUwMi90cUktTXJSVFdW
RmhYT3BLc2JhQlpRMXBUTGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOCclDvucBRcSQQhaufhOPIXnARGBFBhjbuVNUbS+h9tcbYqDBuceqOOUqlrR
lL/GO+KYwRCT35sDPXJS1qrkrMWOaieBMNvzDFp6OrT1p0ve2nIX8E8RdDdB7fUE
idE/aTJ4Ui1eRZP/objb+NldNm5IP8coqutAgKpAKjqhG2eKzlOYlZ0/aMMrz5C1
dl789AT9nfKSMnBAi+iHeWMH/tUFo+PvHNeSyJD22QVAzwrBtAgh1WI1i8QxHfny
LGuZgBVTfY+MmR22VWi8WD0KrRhYqErFY9bdow5GueRzZ5DKGOc3ccsMBvxV2rUl
lKPR1doZts0YeI//htDLPo9Mqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:21 2026 by rpki-client