
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
File: qkjQtX4IXNlA26F5HapYc8wZx_4.mft (raw, json)
Hash identifier: huhPX8u/n+/bwo1WmJKUcivbA4X5fGE99NqO9Lphml4=
Subject key identifier: EE:96:6E:0F:C9:F5:80:BA:DF:13:DD:6C:B1:20:39:7D:5D:18:D5:20
Authority key identifier: AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
Certificate issuer: /CN=A91EA582/serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Certificate serial: 0471
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
Manifest number: 0468
Signing time: Thu 23 Jul 2026 01:01:46 +0000
Manifest this update: Thu 23 Jul 2026 01:01:46 +0000
Manifest next update: Thu 30 Jul 2026 01:01:46 +0000
Files and hashes: 1: qkjQtX4IXNlA26F5HapYc8wZx_4.crl (hash: 3nV4sfgnVoIyvtAHMKz9NAmC9wfQzWLT7bpyw7kQaA0=)
2: 9924B750A1AF11EC9A73D814C4F9AE02.roa (hash: 6lKTziOdOqmTb1PCIIO9sZDwLoUVQCnoQ63nhna/M3E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA582, serialNumber=AA48D0B57E085CD940DBA1791DAA5873CC19C7FE
Validity
Not Before: Jul 23 01:01:46 2026 GMT
Not After : Jul 30 01:01:46 2026 GMT
Subject: CN=6a6167fa-fa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:d3:0b:2b:37:d7:23:25:8f:e2:0f:df:ae:
90:58:7f:1e:82:c6:4f:38:d2:93:eb:e1:89:7c:52:
ee:0b:e5:45:ad:66:ba:b5:2d:46:f3:75:43:42:bd:
72:6e:88:85:0e:14:50:ee:ba:41:f4:87:50:fa:b5:
ed:33:44:cb:c5:4a:f9:91:17:de:ab:c1:f3:16:30:
d2:53:87:02:c5:a2:06:23:28:1e:15:1f:fc:5b:be:
36:05:ee:5a:41:be:34:cb:0d:11:fa:d1:06:7e:58:
fd:bd:97:ef:2c:d0:0b:32:53:f6:9f:46:92:fa:37:
63:fc:ba:63:d6:89:82:e7:22:5c:c8:0e:50:2b:d5:
29:98:3e:31:4f:c6:ec:4a:70:ec:29:11:2e:4c:8d:
2a:5e:71:10:de:a9:35:c5:7f:53:0f:e6:fe:58:43:
db:96:d2:61:e6:4f:17:1a:49:c8:81:b3:f7:31:ed:
be:55:a1:95:67:f9:fe:41:5b:14:c5:7d:8a:0f:da:
98:8c:94:ae:85:90:c3:9f:d2:36:8f:92:6f:72:21:
26:56:04:ef:a4:29:a2:0f:00:27:9a:a1:3c:c1:d6:
c6:d4:a5:01:56:5d:53:b2:31:c2:a5:fe:94:94:08:
ea:ea:2e:1e:9e:62:ee:ed:f6:78:be:ff:79:f6:25:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:96:6E:0F:C9:F5:80:BA:DF:13:DD:6C:B1:20:39:7D:5D:18:D5:20
X509v3 Authority Key Identifier:
keyid:AA:48:D0:B5:7E:08:5C:D9:40:DB:A1:79:1D:AA:58:73:CC:19:C7:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkjQtX4IXNlA26F5HapYc8wZx_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA582/974FCAA0A11911EC8C4FFA83C4F9AE02/qkjQtX4IXNlA26F5HapYc8wZx_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a2:12:30:03:43:9e:d2:b6:5b:52:82:92:a5:df:72:fa:aa:
a3:3f:a5:42:4d:35:08:08:69:87:14:5c:79:8c:be:fb:83:34:
26:a3:4b:fe:c9:7d:68:75:4b:c3:bd:32:41:60:4a:f0:0e:fd:
bc:f1:e5:1c:ec:ab:e1:fb:77:99:d4:5d:f2:1d:92:f0:0c:77:
d6:10:1c:de:46:79:90:8d:4c:3f:c8:e8:25:19:fc:03:21:36:
0a:83:3b:ad:37:98:2f:c6:09:fa:86:fc:06:57:7f:0f:87:a6:
5e:56:99:45:d4:ec:5e:34:ab:73:30:27:19:14:8c:5a:87:bb:
d1:bc:bc:42:2c:78:b6:02:b2:89:17:8a:30:d4:39:aa:42:f2:
04:22:c8:93:01:64:00:d0:04:5d:fa:f6:8b:bd:db:6f:1e:7a:
ab:21:2c:1a:eb:f7:07:68:be:40:2a:e8:43:38:98:77:4a:ca:
2d:2e:63:d1:ba:28:a2:5c:cd:24:d2:b4:48:ce:43:99:34:e3:
e8:8e:b7:2d:0a:a2:cb:88:32:6c:5d:29:76:67:ce:87:3a:21:
c3:b9:81:5e:e0:b4:ed:64:4f:c4:83:92:0c:fc:4f:15:e4:3f:
4f:15:5a:cc:0b:7a:3d:2f:9a:a7:5b:43:c9:dd:74:2c:d2:2b:
d3:00:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:40:15 2026 by rpki-client