
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json)
Hash identifier: YB28PCrDBCTSDnV64DfiZ42RZ5CDmux7X5Ngy40+plE=
Subject key identifier: 6A:E5:38:0C:88:B2:54:F3:86:75:E6:E4:82:61:A6:1E:DE:F1:BD:63
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial: 0473
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
Manifest number: 046A
Signing time: Mon 27 Jul 2026 01:11:40 +0000
Manifest this update: Mon 27 Jul 2026 01:11:39 +0000
Manifest next update: Mon 03 Aug 2026 01:11:39 +0000
Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: x84XlWkKb9q/iM3RLMK+vfNBV25aEZtOVxDMhGkPPQA=)
2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: 6lKTziOdOqmTb1PCIIO9sZDwLoUVQCnoQ63nhna/M3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1139 (0x473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Validity
Not Before: Jul 27 01:11:39 2026 GMT
Not After : Aug 3 01:11:39 2026 GMT
Subject: CN=6a66b04c-2def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:1f:14:3d:56:f6:95:88:0f:0b:56:62:75:
4a:55:d2:b9:aa:e6:b9:e9:c5:7e:f8:b5:79:b9:12:
4a:62:16:bb:04:f3:33:6a:12:51:0d:ad:21:5c:df:
d6:c4:4c:8e:62:95:46:9d:0f:ac:57:55:35:87:ce:
42:da:90:72:8e:b4:17:0f:d6:35:ee:b3:0d:5d:d9:
af:1f:bf:74:ae:cc:51:00:24:a9:be:99:76:11:44:
45:9d:44:68:f8:3d:62:3e:55:c6:22:38:f3:10:60:
42:5b:af:e2:a2:a0:f5:b9:d0:77:fb:97:0a:ed:ae:
28:db:2e:2b:0a:62:75:2a:23:1a:d9:fb:09:e2:0e:
2e:e9:b9:31:89:e6:52:42:dc:90:99:94:56:91:ef:
cb:75:e9:e5:b7:62:e8:9f:16:f6:02:84:e6:fd:2b:
d1:af:e7:85:f9:7f:0d:88:0a:95:17:47:e8:55:b4:
e5:10:3e:0b:3d:a0:7f:45:16:e0:26:e7:b1:79:a2:
65:c7:8c:f9:85:bb:52:1e:80:35:79:a0:81:05:c2:
c0:26:fe:da:0d:d4:f1:f1:1c:76:ea:89:2e:d9:57:
c0:e4:a4:c8:4b:4c:9f:86:b4:74:78:2e:b4:b0:be:
25:38:82:43:8d:3f:86:32:b6:0d:bc:61:82:c3:f5:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:38:0C:88:B2:54:F3:86:75:E6:E4:82:61:A6:1E:DE:F1:BD:63
X509v3 Authority Key Identifier:
keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:85:f6:42:2f:d3:01:93:04:4e:7c:66:09:fd:eb:d8:2d:aa:
d8:27:f8:91:8f:b8:fe:e0:52:a1:90:e8:d2:98:90:48:a5:94:
b4:ab:19:86:fc:ae:40:f4:31:62:d2:cf:c4:16:c0:70:74:35:
2a:d9:0d:e5:f6:4e:f4:bb:e0:66:b3:cc:e0:8f:ca:e3:31:22:
ca:54:e9:52:bc:f8:ce:c2:4e:41:e3:06:67:42:16:20:cd:55:
1e:42:21:b0:cd:1f:24:78:c6:45:91:66:c3:95:db:d3:25:fc:
f3:7d:c4:88:81:8c:3e:2e:3c:ad:89:5a:cf:14:2f:04:1f:62:
80:d8:9f:eb:4d:df:8a:50:5f:ad:78:02:3e:36:90:02:42:46:
fb:06:be:32:0d:93:58:d2:eb:6f:4a:1b:93:82:18:68:03:05:
b1:4a:b9:9e:b0:1b:fa:02:92:e5:cc:c2:4d:25:f2:03:1c:e3:
4f:2c:26:3c:96:ae:1a:fe:e6:17:da:a7:62:ad:e2:b3:0c:68:
06:03:8e:75:75:dc:5b:ba:65:4e:98:24:d5:1a:9c:3d:dd:0c:
b1:90:ed:eb:8c:15:d1:e0:9f:0a:50:c6:0c:14:2d:05:33:1d:
51:e1:76:d9:e3:87:bd:81:5b:a0:13:88:04:73:53:6b:23:5f:
ad:8d:49:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE1ODIxMTAvBgNVBAUTKEFBNDhEMEI1N0UwODVDRDk0MERCQTE3OTFEQUE1ODcz
Q0MxOUM3RkUwHhcNMjYwNzI3MDExMTM5WhcNMjYwODAzMDExMTM5WjAYMRYwFAYD
VQQDEw02YTY2YjA0Yy0yZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwYwfFD1W9pWIDwtWYnVKVdK5qua56cV++LV5uRJKYha7BPMzahJRDa0hXN/W
xEyOYpVGnQ+sV1U1h85C2pByjrQXD9Y17rMNXdmvH790rsxRACSpvpl2EURFnURo
+D1iPlXGIjjzEGBCW6/ioqD1udB3+5cK7a4o2y4rCmJ1KiMa2fsJ4g4u6bkxieZS
QtyQmZRWke/Ldenlt2Lonxb2AoTm/SvRr+eF+X8NiAqVF0foVbTlED4LPaB/RRbg
JuexeaJlx4z5hbtSHoA1eaCBBcLAJv7aDdTx8Rx26oku2VfA5KTIS0yfhrR0eC60
sL4lOIJDjT+GMrYNvGGCw/VHbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrlOAyI
slTzhnXm5IJhph7e8b1jMB8GA1UdIwQYMBaAFKpI0LV+CFzZQNuheR2qWHPMGcf+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTU4Mi85NzRGQ0FBMEEx
MTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhObEEyNkY1SGFwWWM4d1p4
XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FralF0WDRJWE5sQTI2RjVIYXBZYzh3WnhfNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTU4Mi85NzRGQ0FBMEExMTkxMUVDOEM0RkZBODNDNEY5QUUwMi9xa2pRdFg0SVhO
bEEyNkY1SGFwWWM4d1p4XzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK4X2Qi/TAZMETnxmCf3r2C2q2Cf4kY+4/uBSoZDo0piQSKWUtKsZhvyuQPQx
YtLPxBbAcHQ1KtkN5fZO9LvgZrPM4I/K4zEiylTpUrz4zsJOQeMGZ0IWIM1VHkIh
sM0fJHjGRZFmw5Xb0yX8833EiIGMPi48rYlazxQvBB9igNif603filBfrXgCPjaQ
AkJG+wa+Mg2TWNLrb0obk4IYaAMFsUq5nrAb+gKS5czCTSXyAxzjTywmPJauGv7m
F9qnYq3iswxoBgOOdXXcW7plTpgk1RqcPd0MsZDt64wV0eCfClDGDBQtBTMdUeF2
2eOHvYFboBOIBHNTayNfrY1J+Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:21 2026 by rpki-client