
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier: ursDJJ26FYcO5Ruq0f5ubI4YfZy5wGmj9nSnqOvUYP8=
Subject key identifier: 57:DC:28:3D:0A:62:22:3A:21:CE:96:A9:7B:F3:01:04:0A:A3:C4:9B
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 09B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number: 098C
Signing time: Thu 24 Sep 2026 19:58:14 +0000
Manifest this update: Thu 24 Sep 2026 19:58:13 +0000
Manifest next update: Thu 01 Oct 2026 19:58:13 +0000
Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: VbLN+HdG6mvVUVuiqGsMnSGO4ILd5BVzHKT43Ayzetc=)
2: 42F72ED6A5C811F1899C272B7111F970.roa (hash: /ozeGB0s+75TsTWeD/a7pV+3V7o0gvN122h66uyUDaU=)
3: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: AkCuLpeFDS7FBikpLUxOfI5nypbddfpSvNUG3WZ/ieo=)
4: B73BBBE2A79711F1BA4E50654711F970.roa (hash: owaGbSTpDw1ryOUnO52JPr9bcFe8/cHnOJR5DTd4Bqs=)
5: 2E80100E2BFB11F18DDEEB6ECA833773.roa (hash: IfKC7mL5PQRcQK+z+6XZAxN6UfG/8LMwj3MgKMvwh2k=)
6: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: cRIt74/EhMf0mQxlPqsu7XxxEJsoIXE7EgeFboWTLII=)
7: 4258A6E4A5C811F1899C272B7111F970.roa (hash: Ahnmyjer/Tq5KlPbMUHNSw4GOKBd1rboHr0F21V1iro=)
8: 99A80E166AD211F1892A90326B47A888.roa (hash: U8Xv2GI61D8swh1fpd27sHFqyLEGO2FX3CjLCpWiajY=)
9: 6E0C35EC601A11F1B26B161B8C47A888.roa (hash: gCv8hvsMmufktnBWJht8DKD8gQprxuubW5PR2yNEdx0=)
10: 2F1CC8AE2BFB11F18DDEEB6ECA833773.roa (hash: Ekx7P+D8wtKi049B4QoJeCc3VhTmcnsOMFvkT/BQMCA=)
11: D7B2B26A6AD211F1951BA8426B47A888.roa (hash: UZlEmsuH7aBX5JJJlcDuNSkw6edtRsPrybI8JUsckjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Validity
Not Before: Sep 24 19:58:13 2026 GMT
Not After : Oct 1 19:58:13 2026 GMT
Subject: CN=6ab580d6-abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:24:3a:1a:35:e3:d5:56:e9:61:e6:17:9f:
41:1f:66:4b:b8:ce:cd:7f:15:ef:bf:f5:14:74:9f:
db:a2:04:9a:29:59:22:08:ef:8f:4e:9e:49:61:c8:
a7:a2:5c:50:55:94:8d:47:32:48:d6:f9:2a:79:8b:
e1:e4:a1:d7:a6:52:ba:bd:5d:f2:4b:74:11:d3:d5:
8c:91:28:9b:59:24:33:69:51:f0:c7:8b:e7:46:60:
af:9d:cf:f9:26:1a:87:fe:00:09:6a:98:37:fb:ba:
60:86:23:aa:e3:8c:85:36:7b:10:96:e5:ee:ce:81:
e0:6c:74:6e:1c:85:f1:ad:40:86:14:28:68:df:d5:
4c:14:cf:c9:77:55:15:6e:15:17:cd:cf:76:ba:1e:
88:cc:58:2b:5a:4e:64:64:4a:72:4c:12:53:82:31:
0a:fe:cf:4b:c5:3a:2e:e6:6f:42:af:f9:1e:dc:a1:
d8:07:6f:be:e3:fc:13:3a:22:92:5c:a9:2c:75:9a:
72:1d:1f:a0:80:9c:e7:46:83:7c:7e:ac:43:63:a5:
c6:61:15:bd:53:ec:6b:d4:a1:94:bc:6d:f4:69:c7:
b4:91:13:c8:cf:eb:c9:e9:4a:95:0e:f7:54:3c:fa:
09:b2:fd:84:48:d9:19:be:91:4b:d5:d1:ef:70:d2:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DC:28:3D:0A:62:22:3A:21:CE:96:A9:7B:F3:01:04:0A:A3:C4:9B
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:74:c6:4f:f7:da:0a:9f:73:92:20:7f:66:ec:15:bd:ba:
87:36:7e:17:3f:58:d3:b0:07:9e:b1:f7:10:61:ae:8c:2a:3a:
fb:0d:5b:73:51:36:e5:09:7a:be:c8:1c:4e:42:f4:43:ea:a6:
2b:d6:ab:d3:09:27:07:ee:01:ce:81:70:c8:50:50:b1:33:3b:
9d:ec:e0:5d:31:1f:d1:0e:0a:8c:d0:9c:6d:c9:68:fe:49:d9:
6c:da:01:48:94:b2:5c:af:7f:97:30:90:16:b7:e7:bb:b4:d1:
ff:96:d4:1c:e6:49:38:13:c2:71:7f:a9:a6:2a:a9:34:bb:77:
64:80:96:bd:3e:a5:3a:b3:77:71:e4:77:29:8c:6c:4a:37:6d:
21:34:5a:2a:79:6e:2a:b5:7a:87:95:36:14:70:a6:8d:38:1c:
1b:4d:3a:a8:96:8e:97:5a:2f:4d:08:07:81:0c:3c:64:7a:e0:
a7:0b:14:99:08:b5:06:1b:55:7f:34:bb:8d:2f:e6:71:29:c7:
ac:be:00:0c:bd:3d:5d:1b:c1:ed:0c:61:83:68:e0:2e:82:98:
a8:92:23:4b:2b:2c:b3:cd:1c:7a:2e:ea:d1:c9:37:ea:61:a9:
49:9e:a6:67:09:0a:e1:de:88:c2:69:c4:ef:f1:36:c0:30:48:
16:22:02:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1
NTQyMkIxOEUwHhcNMjYwOTI0MTk1ODEzWhcNMjYxMDAxMTk1ODEzWjAYMRYwFAYD
VQQDEw02YWI1ODBkNi1hYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqA4kOho149VW6WHmF59BH2ZLuM7NfxXvv/UUdJ/bogSaKVkiCO+PTp5JYcin
olxQVZSNRzJI1vkqeYvh5KHXplK6vV3yS3QR09WMkSibWSQzaVHwx4vnRmCvnc/5
JhqH/gAJapg3+7pghiOq44yFNnsQluXuzoHgbHRuHIXxrUCGFCho39VMFM/Jd1UV
bhUXzc92uh6IzFgrWk5kZEpyTBJTgjEK/s9LxTou5m9Cr/ke3KHYB2++4/wTOiKS
XKksdZpyHR+ggJznRoN8fqxDY6XGYRW9U+xr1KGUvG30ace0kRPIz+vJ6UqVDvdU
PPoJsv2ESNkZvpFL1dHvcNI19wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfcKD0K
YiI6Ic6WqXvzAQQKo8SbMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG
MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjlGQi8yMEFENDgzNEJGMzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19F
OFdnYWlTeEhNaUZWUWlzWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALBN0xk/32gqfc5Igf2bsFb26hzZ+Fz9Y07AHnrH3EGGujCo6+w1bc1E25Ql6
vsgcTkL0Q+qmK9ar0wknB+4BzoFwyFBQsTM7nezgXTEf0Q4KjNCcbclo/knZbNoB
SJSyXK9/lzCQFrfnu7TR/5bUHOZJOBPCcX+ppiqpNLt3ZICWvT6lOrN3ceR3KYxs
SjdtITRaKnluKrV6h5U2FHCmjTgcG006qJaOl1ovTQgHgQw8ZHrgpwsUmQi1BhtV
fzS7jS/mcSnHrL4ADL09XRvB7Qxhg2jgLoKYqJIjSysss80cei7q0ck36mGpSZ6m
ZwkK4d6IwmnE7/E2wDBIFiIC1Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:56:56 2026 by rpki-client