
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
File: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json)
Hash identifier: NK2nbxCeQvDoG+TCxkG4xlcUaNq4F12e1PCCT7yM6rI=
Subject key identifier: 45:9B:52:1B:24:AE:AB:47:8C:2A:22:27:C6:76:08:EA:1D:3A:68:9D
Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Certificate issuer: /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
Manifest number: 18
Signing time: Fri 17 Apr 2026 08:41:43 +0000
Manifest this update: Fri 17 Apr 2026 08:41:42 +0000
Manifest next update: Fri 24 Apr 2026 08:41:42 +0000
Files and hashes: 1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: QaQ1AHQchw1aVD2NVpFgZksFDQsx/7kB4RNS1DlQGpA=)
2: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=)
3: CDBA019C39F311F1ADEB5DEEC0833773.roa (hash: iidMH4KhBMhVgK4N0PlQBp3CYB4iLSSSQ1RpsnRFm3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Validity
Not Before: Apr 17 08:41:42 2026 GMT
Not After : Apr 24 08:41:42 2026 GMT
Subject: CN=69e1f246-90e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:59:f0:f1:76:33:0b:3c:88:31:36:b2:2f:
f1:21:8c:a3:d7:93:3e:8a:d6:4b:92:d3:d6:be:0f:
ae:40:89:69:69:3f:99:02:40:16:ac:39:ab:b7:2e:
57:af:33:48:39:ff:48:06:ff:c7:e9:f9:15:51:b4:
ee:34:a9:d6:42:33:74:e7:05:b1:6b:4e:62:f9:9a:
29:1f:1e:b8:94:aa:7e:c7:cc:bb:1c:91:b3:aa:5e:
d6:44:6d:f3:71:71:47:05:6b:96:de:ce:51:cb:0a:
a2:13:bb:ff:b8:3f:e1:1c:80:13:21:00:d5:58:49:
bc:74:5c:5e:36:a4:f2:83:fe:34:8f:dc:ac:a6:45:
5c:50:32:5a:23:98:06:29:00:65:d8:d5:39:14:96:
18:c4:bb:5f:63:8a:5b:75:bf:4f:c5:c1:5d:e7:8f:
c1:4e:9e:5b:0f:08:3c:90:9e:47:d9:ed:f1:e2:91:
20:2c:d8:74:c4:c5:d6:65:6c:b4:10:86:d9:09:f8:
8d:ff:3f:e9:a6:12:e9:33:3f:c8:49:4e:d2:0e:81:
23:08:d3:ca:05:3f:4a:39:40:8a:72:e6:cf:99:5f:
75:9e:29:e8:08:23:b2:d5:72:0d:bd:3f:6b:29:b7:
f6:0d:21:c8:6c:d1:0d:aa:77:65:13:22:ef:65:0c:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9B:52:1B:24:AE:AB:47:8C:2A:22:27:C6:76:08:EA:1D:3A:68:9D
X509v3 Authority Key Identifier:
keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:5e:68:20:7b:6f:b4:ff:d6:52:96:f4:d5:e9:95:e4:2b:8c:
de:45:b2:2f:62:9e:66:f4:bb:45:9f:e8:7a:a0:2a:a8:93:d4:
dd:ce:8a:df:8f:cb:0b:15:9c:96:80:34:f3:cd:eb:ba:25:d8:
88:f8:e6:6e:bf:95:fb:5f:36:c5:01:70:f1:01:70:f1:20:e9:
94:28:82:7f:26:c6:0d:13:65:b6:6f:6f:04:74:7b:42:b0:6a:
24:54:f6:59:90:4d:ce:dd:d9:ee:c7:10:84:bb:e8:0c:61:37:
e0:18:82:4e:c9:97:9c:87:83:24:4f:f0:4d:00:dd:7f:11:69:
67:7f:8a:b6:17:b9:bf:a6:65:c5:a0:fd:24:ee:67:ea:73:6b:
a3:48:63:a2:7f:f5:2d:d1:62:c7:6a:33:10:d4:9b:4b:ec:c6:
41:e7:6e:39:f1:7f:43:4f:6a:47:62:fe:73:7f:61:72:c6:f5:
01:42:72:83:04:99:cf:7a:36:e9:4e:27:c5:ed:58:8f:a3:ad:
0f:c7:d1:a9:e8:b3:08:ba:33:9e:08:92:b6:9d:c0:56:46:07:
3a:e1:0d:e6:cc:23:3a:c3:84:33:83:5f:6f:0a:81:52:b3:4b:
d5:a3:26:2f:5b:c5:4f:2f:77:bd:2c:b2:16:8e:d0:eb:94:8b:
4d:7a:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:12 2026 by rpki-client