
$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier: WTucxQLjM26xAL0TOiYIeJJ5oKX00sRVB0RhpAXcGz8=
Subject key identifier: 75:5A:F4:FA:DF:BC:99:23:85:B7:18:4E:3F:6F:60:A3:4E:EB:BD:2B
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 098E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number: 0969
Signing time: Wed 22 Jul 2026 20:32:49 +0000
Manifest this update: Wed 22 Jul 2026 20:32:48 +0000
Manifest next update: Wed 29 Jul 2026 20:32:48 +0000
Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: 3V3g5JFH4qWrd0mDva6Uq3NEyLFw4AxFCRvdF4ZYauc=)
2: 2F1CC8AE2BFB11F18DDEEB6ECA833773.roa (hash: Ekx7P+D8wtKi049B4QoJeCc3VhTmcnsOMFvkT/BQMCA=)
3: 6E0C35EC601A11F1B26B161B8C47A888.roa (hash: gCv8hvsMmufktnBWJht8DKD8gQprxuubW5PR2yNEdx0=)
4: 2E80100E2BFB11F18DDEEB6ECA833773.roa (hash: IfKC7mL5PQRcQK+z+6XZAxN6UfG/8LMwj3MgKMvwh2k=)
5: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: cRIt74/EhMf0mQxlPqsu7XxxEJsoIXE7EgeFboWTLII=)
6: 99A80E166AD211F1892A90326B47A888.roa (hash: U8Xv2GI61D8swh1fpd27sHFqyLEGO2FX3CjLCpWiajY=)
7: D7B2B26A6AD211F1951BA8426B47A888.roa (hash: UZlEmsuH7aBX5JJJlcDuNSkw6edtRsPrybI8JUsckjo=)
8: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: AkCuLpeFDS7FBikpLUxOfI5nypbddfpSvNUG3WZ/ieo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2446 (0x98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Validity
Not Before: Jul 22 20:32:48 2026 GMT
Not After : Jul 29 20:32:48 2026 GMT
Subject: CN=6a6128f1-6f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:43:31:7c:a7:e9:9a:d7:72:84:6a:79:26:
7b:d1:b4:02:e0:13:f1:7f:f0:6c:eb:54:b6:26:8d:
7b:5c:13:ae:7a:fe:c3:a5:d5:31:b9:30:69:db:eb:
82:dd:22:14:f9:23:1c:52:c7:7b:3e:e0:d7:78:ea:
2a:e6:2b:c0:15:35:0a:34:a6:bc:b5:02:cb:d4:45:
e4:84:19:2f:33:b5:d7:ec:8c:6f:0a:89:98:41:ed:
38:c0:9d:45:9e:69:bc:57:21:bf:22:4b:03:78:49:
c0:e8:9d:eb:76:3e:e3:3b:d2:25:9e:57:1e:25:09:
02:30:7a:c2:e5:09:ef:31:42:8b:dc:e3:87:0d:fe:
6d:76:10:4b:80:f9:7c:51:b0:d4:7f:69:c5:05:5f:
40:bb:2b:88:de:0a:9d:80:47:9f:99:af:51:25:88:
98:7f:ee:c7:97:a5:e2:a6:2e:43:8d:0b:93:d7:a3:
1f:35:2b:38:69:e2:6b:ff:56:ba:5e:f4:4a:7d:29:
16:95:f1:60:4c:37:92:fb:9b:42:79:da:77:9e:eb:
31:bd:03:5c:79:6d:20:d3:1f:70:d3:8c:9e:53:7f:
f9:18:62:b7:c9:c9:af:5c:71:f1:77:af:52:d9:30:
b5:7b:6b:ce:d0:7d:78:d3:5f:80:1b:b3:57:97:9e:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5A:F4:FA:DF:BC:99:23:85:B7:18:4E:3F:6F:60:A3:4E:EB:BD:2B
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:66:3f:e9:e8:33:88:6a:b5:a9:77:67:d7:d6:1f:5b:7a:11:
48:cb:73:14:34:c1:e5:a8:9f:05:01:fb:07:55:bf:99:59:e2:
e4:61:69:2a:89:9a:cf:af:21:53:3a:03:66:b3:d8:21:35:56:
ca:36:71:58:2d:6e:d8:f2:87:23:f7:71:28:eb:b1:5d:03:42:
a5:2f:62:63:3e:f6:b3:81:3c:d2:b5:0c:69:6d:bf:e9:bc:87:
86:32:22:e6:c8:3c:4a:89:f8:1a:e5:3a:62:9b:6c:32:ce:63:
05:09:05:d2:ce:32:7f:39:e9:b0:bc:63:79:2a:f2:85:26:74:
e8:7a:d4:85:0e:02:2d:5c:4c:5e:21:eb:61:3d:f9:d4:36:7c:
7f:80:ba:a9:7a:21:2b:8b:26:ed:e9:40:8f:5e:5e:0c:67:1b:
4d:f4:00:18:93:86:25:73:a2:b6:e5:be:23:a6:fb:bf:64:ec:
b4:60:2c:37:0e:12:51:5e:1b:ee:2c:6c:a0:67:93:71:3e:bf:
f1:c6:9a:7c:8f:cf:a9:ef:94:2b:bc:35:b2:56:b1:83:32:73:
9f:6c:fe:04:bf:55:29:b4:0c:de:43:d2:04:c3:23:6d:dd:af:
0d:15:12:29:c4:63:a1:39:a6:e6:0e:90:3c:52:3d:b0:41:99:
bb:d6:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:57 2026 by rpki-client