
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.mft
File: qXBizuykqD8S6-i6FeanorMFL-o.mft (raw, json)
Hash identifier: reM0AyHOVimbPegVWe6dAa+SkJ5zjejVH7JzMgZDVq0=
Subject key identifier: 2D:FE:A2:3C:F4:C0:41:BF:99:C9:51:28:46:7E:E2:83:72:C9:F5:F4
Authority key identifier: A9:70:62:CE:EC:A4:A8:3F:12:EB:E8:BA:15:E6:A7:A2:B3:05:2F:EA
Certificate issuer: /CN=A91799DA/serialNumber=A97062CEECA4A83F12EBE8BA15E6A7A2B3052FEA
Certificate serial: 39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXBizuykqD8S6-i6FeanorMFL-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.mft
Manifest number: 39
Signing time: Fri 25 Sep 2026 08:42:13 +0000
Manifest this update: Fri 25 Sep 2026 08:42:13 +0000
Manifest next update: Fri 02 Oct 2026 08:42:13 +0000
Files and hashes: 1: qXBizuykqD8S6-i6FeanorMFL-o.crl (hash: 6ubLxfN2BZaOspfp7R3f0iEzlN4UXA5sCw2CD+W/nzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.crl
rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXBizuykqD8S6-i6FeanorMFL-o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91799DA, serialNumber=A97062CEECA4A83F12EBE8BA15E6A7A2B3052FEA
Validity
Not Before: Sep 25 08:42:13 2026 GMT
Not After : Oct 2 08:42:13 2026 GMT
Subject: CN=6ab633e5-5da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:06:e5:30:56:2c:bc:02:f9:47:32:57:e6:
cb:e4:de:5b:3b:38:1f:08:c8:4f:b9:b1:94:98:29:
2a:a4:de:01:1f:08:9c:e0:66:92:7d:e1:e9:53:0c:
ec:84:79:c3:32:15:da:5d:d4:f3:8d:57:9c:4f:a6:
95:24:9f:e5:3a:c9:c7:34:b4:7f:50:2b:21:4a:82:
1d:c7:e2:ea:6f:e0:d5:73:7e:6f:45:d8:fe:0f:3a:
42:cd:76:62:92:98:b7:16:9d:65:e5:dd:3d:43:ea:
95:43:29:5b:18:34:a2:63:55:58:45:61:c4:bc:73:
e4:40:f1:1a:c6:f9:33:4e:95:66:b9:80:20:76:42:
48:11:fe:24:0a:6b:68:8d:89:f0:cc:97:15:1a:ff:
ea:f0:f8:24:2b:27:8d:8d:bd:7a:da:cc:98:77:97:
8b:8f:5f:d8:0a:9a:0c:72:2d:39:f6:4f:d5:03:f2:
33:78:1e:c6:ce:90:98:d9:07:13:c2:79:55:28:7e:
e6:47:e4:92:63:25:bb:a1:45:c7:76:38:e0:cc:9e:
d2:bc:f1:64:38:f9:04:4e:ed:3d:a2:d4:77:72:17:
22:c9:5c:bf:d8:a2:b9:2b:82:cc:39:0e:95:71:0d:
b4:d8:2b:1b:01:81:c8:40:c0:5a:3c:67:b3:c7:4d:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:A2:3C:F4:C0:41:BF:99:C9:51:28:46:7E:E2:83:72:C9:F5:F4
X509v3 Authority Key Identifier:
keyid:A9:70:62:CE:EC:A4:A8:3F:12:EB:E8:BA:15:E6:A7:A2:B3:05:2F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXBizuykqD8S6-i6FeanorMFL-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799DA/7045E944638911F193BC26626A47A888/qXBizuykqD8S6-i6FeanorMFL-o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9e:75:02:56:c5:36:ab:f8:b2:b6:5f:d5:fe:71:90:c8:a4:
02:22:7f:0b:62:4c:5f:14:2a:03:16:66:ac:14:65:8d:3f:cd:
d6:af:a6:38:8e:0e:b6:51:99:b6:ab:46:c7:0f:d3:d6:98:52:
b8:a2:21:8e:3c:0b:2c:55:da:13:86:f0:b8:97:50:a3:3d:1c:
03:cb:09:72:12:f0:5a:46:a0:57:f2:d9:ae:35:c0:6d:30:e3:
d6:9b:ef:98:0d:29:bb:f1:82:f3:ab:d6:db:37:43:8f:28:20:
44:43:d1:9e:f8:c4:6c:8f:7e:f5:17:66:29:95:54:c0:cf:fb:
7f:9f:be:44:e6:09:72:a5:a6:ee:71:e5:26:de:76:25:6e:22:
04:59:24:62:fc:57:14:66:b5:45:15:17:cf:87:4d:46:56:59:
1e:8d:8a:84:ca:7f:81:ca:bb:ef:89:0b:2c:60:f3:a2:d5:6e:
dc:a2:39:d4:d8:50:b0:e6:43:c6:2b:73:4c:73:ac:e2:d9:44:
91:68:90:b7:a3:99:71:da:ae:8d:45:f2:cd:17:bb:f5:d5:a5:
17:0b:b1:dc:92:3a:88:fd:8a:12:ab:6f:68:01:6f:93:ae:bf:
d2:5c:d9:3a:b9:71:6f:f0:21:eb:be:dc:3b:16:7f:79:13:25:
1f:7f:32:76
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OTlEQTExMC8GA1UEBRMoQTk3MDYyQ0VFQ0E0QTgzRjEyRUJFOEJBMTVFNkE3QTJC
MzA1MkZFQTAeFw0yNjA5MjUwODQyMTNaFw0yNjEwMDIwODQyMTNaMBgxFjAUBgNV
BAMTDTZhYjYzM2U1LTVkYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCzEgblMFYsvAL5RzJX5svk3ls7OB8IyE+5sZSYKSqk3gEfCJzgZpJ94elTDOyE
ecMyFdpd1PONV5xPppUkn+U6ycc0tH9QKyFKgh3H4upv4NVzfm9F2P4POkLNdmKS
mLcWnWXl3T1D6pVDKVsYNKJjVVhFYcS8c+RA8RrG+TNOlWa5gCB2QkgR/iQKa2iN
ifDMlxUa/+rw+CQrJ42NvXrazJh3l4uPX9gKmgxyLTn2T9UD8jN4HsbOkJjZBxPC
eVUofuZH5JJjJbuhRcd2OODMntK88WQ4+QRO7T2i1HdyFyLJXL/Yorkrgsw5DpVx
DbTYKxsBgchAwFo8Z7PHTXS/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULf6iPPTA
Qb+ZyVEoRn7ig3LJ9fQwHwYDVR0jBBgwFoAUqXBizuykqD8S6+i6FeanorMFL+ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5OURBLzcwNDVFOTQ0NjM4
OTExRjE5M0JDMjY2MjZBNDdBODg4L3FYQml6dXlrcUQ4UzYtaTZGZWFub3JNRkwt
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcVhCaXp1eWtxRDhTNi1pNkZlYW5vck1GTC1vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5
OURBLzcwNDVFOTQ0NjM4OTExRjE5M0JDMjY2MjZBNDdBODg4L3FYQml6dXlrcUQ4
UzYtaTZGZWFub3JNRkwtby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA+nnUCVsU2q/iytl/V/nGQyKQCIn8LYkxfFCoDFmasFGWNP83Wr6Y4jg62UZm2
q0bHD9PWmFK4oiGOPAssVdoThvC4l1CjPRwDywlyEvBaRqBX8tmuNcBtMOPWm++Y
DSm78YLzq9bbN0OPKCBEQ9Ge+MRsj371F2YplVTAz/t/n75E5glypabuceUm3nYl
biIEWSRi/FcUZrVFFRfPh01GVlkejYqEyn+ByrvviQssYPOi1W7cojnU2FCw5kPG
K3NMc6zi2USRaJC3o5lx2q6NRfLNF7v11aUXC7HckjqI/YoSq29oAW+Trr/SXNk6
uXFv8CHrvtw7Fn95EyUffzJ2
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:15 2026 by rpki-client