
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
File: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json)
Hash identifier: RPXs2SUbWdpG1/n54j8j+fUW/86nzJdyWVJ1cp4AyeM=
Subject key identifier: 26:90:F1:D8:CC:82:4B:87:B3:FE:2D:8A:63:F7:B7:24:84:D6:C8:00
Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
Certificate issuer: /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
Manifest number: 67
Signing time: Mon 21 Sep 2026 08:01:57 +0000
Manifest this update: Mon 21 Sep 2026 08:01:57 +0000
Manifest next update: Mon 28 Sep 2026 08:01:57 +0000
Files and hashes: 1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: L4cUiceiwGmrCXoHpwcxu6uCIR5Jsb1A1e0Jg21cUZI=)
2: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=)
3: CDBA019C39F311F1ADEB5DEEC0833773.roa (hash: iidMH4KhBMhVgK4N0PlQBp3CYB4iLSSSQ1RpsnRFm3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C
Validity
Not Before: Sep 21 08:01:57 2026 GMT
Not After : Sep 28 08:01:57 2026 GMT
Subject: CN=6ab0e475-9553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:fb:ee:6d:dc:1e:33:f2:a3:7f:6c:c2:34:
ca:33:b1:34:c5:66:84:c9:39:39:71:30:6c:68:45:
f3:a8:30:ba:c3:f0:c7:9f:8a:ad:c3:ed:b8:bc:7c:
ca:e7:62:9d:53:78:b2:98:1b:7d:2d:07:af:d3:03:
15:54:60:ad:c7:21:80:e7:6f:68:ee:dd:d7:af:5b:
35:15:95:d2:68:78:a2:91:07:95:f1:71:ea:e4:8a:
ba:cc:5b:20:2e:89:fb:e0:71:89:4f:73:7b:ea:65:
6c:64:81:63:ee:2d:e8:25:0a:2f:ff:18:a9:43:f6:
42:03:6a:8d:92:5c:cd:1f:1c:5d:a8:04:7b:67:6d:
56:22:4b:13:48:23:fd:61:ed:13:60:a9:4d:23:7b:
28:ee:cf:8d:55:7d:5b:6e:cd:f4:65:93:88:21:30:
91:54:14:57:4e:57:0f:62:b6:36:8c:1e:30:50:1d:
00:f1:ba:91:99:1a:88:fb:07:ec:1a:b8:8a:25:f0:
f2:48:52:94:e6:62:5e:5f:b4:67:17:0f:5a:53:28:
38:ef:bf:c4:de:13:36:4f:8e:d7:19:d8:f8:55:ec:
c5:6c:1c:c2:ec:b3:40:12:5c:b9:f2:88:01:e2:fd:
4f:22:f9:89:49:2e:cb:a4:4c:e7:cc:21:0f:c0:20:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:90:F1:D8:CC:82:4B:87:B3:FE:2D:8A:63:F7:B7:24:84:D6:C8:00
X509v3 Authority Key Identifier:
keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a0:23:ec:91:e7:53:f1:17:ba:6f:88:a2:97:bd:54:b5:ef:
1f:2a:1f:e8:5c:ef:df:26:eb:cc:98:7d:85:39:c1:e9:85:be:
c8:c9:e6:0f:74:e7:bb:6c:e8:d4:22:0c:d5:a9:36:14:9c:90:
a1:9b:38:77:54:26:98:c0:2e:5f:b9:f1:91:f3:80:ba:9d:35:
e3:da:87:ed:ba:62:fb:bc:09:72:1e:96:45:ff:d5:ea:70:2c:
fc:01:fb:42:fe:33:60:8e:6c:bf:82:77:ab:4e:5d:ff:bf:51:
e1:57:58:b6:d2:d5:3e:06:fe:99:2b:23:65:be:6e:26:f2:96:
cc:95:67:7f:35:c9:0d:59:8f:1d:1b:5f:b8:03:ff:1a:a9:f2:
02:92:2d:d3:ae:14:92:d3:9c:80:b2:db:04:1d:ad:e4:68:cc:
88:75:6f:40:6c:39:25:54:33:8a:08:d9:9b:59:bf:92:b6:3d:
b5:46:62:1f:5d:21:9a:1e:34:af:21:e7:8e:af:fc:ab:bc:ae:
e9:16:ac:e6:bd:25:cd:07:29:20:3a:6d:9b:74:30:3e:ad:7e:
b5:89:9e:56:28:7d:da:da:c6:10:f9:43:aa:f1:82:26:bd:12:
28:4e:95:b7:e2:e9:8b:61:fe:56:ce:ca:38:44:3a:8e:87:4a:
79:13:a5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:10:08 2026 by rpki-client