
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
File: qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json)
Hash identifier: eqf35htI4Jn8sEaM/uIifDsxIC67K6+nCek4L5AcSSs=
Subject key identifier: 5F:1D:F7:68:40:A9:EE:39:CE:35:7F:99:D9:65:80:92:2D:CF:00:18
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Certificate issuer: /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial: 1AA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
Manifest number: 1A96
Signing time: Thu 16 Apr 2026 16:16:48 +0000
Manifest this update: Thu 16 Apr 2026 16:16:47 +0000
Manifest next update: Thu 23 Apr 2026 16:16:47 +0000
Files and hashes: 1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: fBuU+FnhD4vIuCMXUP4nJS8paEmm8Q7MGXPWT70+Giw=)
2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: IsnopfiraJYXUMgM3zC6fdbepjtRf+a2njqVEtH3VtA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6816 (0x1aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Validity
Not Before: Apr 16 16:16:47 2026 GMT
Not After : Apr 23 16:16:47 2026 GMT
Subject: CN=69e10b70-8567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:90:9f:74:f5:2e:bf:cb:37:87:6f:a1:82:
7c:21:4f:e2:a9:e1:32:b9:f3:0e:94:5b:0e:65:0e:
c8:57:f7:a5:d4:e3:23:8a:67:1f:db:2e:fc:6a:bf:
07:e5:05:90:3f:8f:7d:83:35:ba:b6:da:76:1a:7b:
16:4e:61:a8:03:97:19:aa:98:a6:2b:c2:3a:e9:b4:
17:21:1d:f4:62:49:33:e5:0a:f3:ac:de:4b:46:48:
4e:55:12:2a:68:6c:82:8b:7a:5c:cc:7d:bf:74:b0:
6d:fd:a4:9a:5a:7a:48:58:d9:32:c1:b0:e9:90:66:
ea:39:b4:1a:cd:a9:d5:ef:d4:d5:2b:56:c4:c8:38:
2a:31:ea:85:e8:96:3e:c0:58:3b:0b:64:94:97:f3:
6e:9c:05:37:1e:c9:81:63:be:29:d4:26:a3:ee:2f:
5d:ba:0a:b4:c4:93:c5:96:76:a0:f1:ae:fa:3c:5d:
fb:bc:c1:c9:76:f7:54:6f:ed:96:6c:af:62:e6:ae:
b9:a2:7a:e4:d3:8b:6d:8e:99:91:51:89:95:b6:21:
52:9e:ed:6c:f2:ea:cd:f9:7e:2c:27:b4:01:d8:e0:
89:c8:45:ce:29:32:68:40:87:73:41:42:65:b6:29:
2d:66:1a:81:e5:5b:4e:8f:67:bf:d0:eb:46:69:42:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1D:F7:68:40:A9:EE:39:CE:35:7F:99:D9:65:80:92:2D:CF:00:18
X509v3 Authority Key Identifier:
keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c6:1b:b9:9e:f0:0c:29:e3:9d:3f:4d:30:53:33:13:8d:35:
b3:e0:af:82:76:db:0a:7a:aa:c7:87:aa:9b:14:33:7f:cd:ed:
9f:12:20:e3:50:77:d4:fa:e2:23:9c:b8:f2:fa:a6:8d:9b:7c:
19:a2:2f:0a:dc:53:13:5f:af:25:c0:98:23:54:45:36:3e:56:
db:af:75:53:fe:47:b3:ab:0e:06:10:cc:d8:72:e9:4f:9c:48:
27:fa:4e:53:8e:81:91:53:f6:57:af:07:29:29:c4:b6:87:eb:
48:93:2a:af:04:29:16:06:86:bf:a6:1e:c9:83:37:20:fa:07:
8a:2c:e9:2d:31:a5:14:8f:2a:5d:2c:ec:f9:15:ff:25:0e:b5:
9d:13:e6:fd:31:6d:64:44:4b:57:e3:f8:a3:66:0a:09:41:ab:
7e:07:4b:d1:7c:40:ff:de:db:93:e9:e7:f9:8d:13:00:02:9b:
e5:74:b2:ba:76:10:4e:37:f1:e2:f9:21:c4:4e:33:d4:a2:e7:
5f:aa:a7:4f:74:94:a6:21:59:46:73:e7:16:99:c5:f8:22:72:
cf:1f:5c:4c:d8:62:cc:09:c2:0f:90:a6:58:62:7d:88:6b:2a:
e5:07:e2:3a:31:f7:a3:67:da:ac:22:80:ad:53:c7:42:9c:e2:
e3:15:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:22 2026 by rpki-client