
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier: +Zqi9ispG7uzTuHfWQV8fZ1D9I4wxHNEy8HqNaEHgdk=
Subject key identifier: EA:FF:94:38:7C:EB:10:AD:A4:70:95:16:AB:F5:38:0D:67:51:28:46
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number: 0244
Signing time: Wed 23 Sep 2026 02:18:08 +0000
Manifest this update: Wed 23 Sep 2026 02:18:08 +0000
Manifest next update: Wed 30 Sep 2026 02:18:08 +0000
Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: 4CJN1g6ilVihia0g3hYM8ZW/k0D2sDBoLX1bYXs8Wu8=)
2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: ejoWMDUgt82/44WWAbicbO1p8c1RwlyGtdpOrVgBghs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Validity
Not Before: Sep 23 02:18:08 2026 GMT
Not After : Sep 30 02:18:08 2026 GMT
Subject: CN=6ab336e0-6dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:3e:19:9a:c7:2a:51:4f:3a:17:73:a5:f7:
73:2e:8b:21:c4:87:9a:cd:e7:3e:95:31:ad:ed:40:
00:18:94:c0:d2:a9:f8:de:76:dc:37:8d:24:21:10:
a8:64:bf:e2:f5:25:58:41:d1:bb:8e:16:7d:ae:b0:
00:74:2d:9e:8a:18:d5:b8:79:90:69:0b:ef:a8:c3:
f0:82:58:9c:1d:3f:9f:d0:fe:62:fe:2a:c6:f8:b9:
3e:9c:07:cf:47:77:19:7d:1f:e1:50:68:45:5d:2b:
cb:d7:ca:76:a3:e8:f3:66:5f:53:36:c4:6d:0d:5f:
1a:a5:54:1f:bb:09:9d:d3:72:dc:7c:a2:69:b0:97:
96:fa:be:fc:91:be:67:2b:0c:0b:29:6d:36:2b:e0:
d3:04:23:76:0f:94:e6:ea:bc:6d:bd:b4:09:fa:55:
13:fe:48:72:47:00:89:52:b9:1b:0b:dc:3f:05:91:
ff:df:01:9c:d7:93:88:40:50:e2:cd:77:8c:81:76:
e8:74:1b:2a:24:b9:d9:0c:ba:0c:37:25:e9:0d:c3:
55:d0:d4:95:1e:50:f4:e6:1e:3d:d7:f0:77:9c:e7:
ac:63:16:d3:27:69:01:d5:ce:29:ce:a5:25:c3:aa:
ac:93:3e:f9:e7:9b:69:4a:58:77:2e:24:11:bc:36:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:94:38:7C:EB:10:AD:A4:70:95:16:AB:F5:38:0D:67:51:28:46
X509v3 Authority Key Identifier:
keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2b:1a:c3:ca:e8:0b:cf:98:56:59:67:1b:5b:33:79:2c:36:
ba:03:70:6e:79:3e:e4:2e:72:dc:64:bf:17:34:a2:0d:a6:3b:
b1:5c:48:6e:1e:af:59:09:d3:91:08:ac:b1:6e:24:4d:7d:80:
45:0d:f7:be:54:e7:0c:94:5b:2b:fb:f0:ba:65:5a:82:7b:60:
cf:db:5f:16:1e:8e:54:b1:a5:1d:bb:ef:8a:1c:d2:e7:50:70:
94:c3:a0:1d:d7:0a:85:00:96:03:12:65:71:f2:7c:42:5a:51:
f9:4e:5f:ea:ad:a5:da:61:ef:02:d8:29:c2:d9:fe:09:ba:18:
94:d2:a1:2c:39:8a:eb:d6:2a:8b:ee:99:54:d2:76:cf:a9:f5:
dc:e1:4b:42:80:64:c9:88:fa:ef:85:9d:84:81:a9:3c:42:b7:
da:f2:bc:06:11:05:74:94:f6:ae:99:8a:9c:25:2b:ca:a4:8d:
e2:cf:29:1c:02:54:84:ea:2d:6e:98:fb:12:b8:21:84:bb:17:
1d:fc:57:1d:3d:92:32:a3:c5:a2:8f:f9:1e:41:9f:5a:e7:6c:
5b:03:17:82:23:b5:41:db:9a:a1:49:3c:cd:27:69:3f:14:73:
6b:b9:82:48:8f:36:0f:bb:83:17:fc:ba:21:46:25:16:a8:83:
01:59:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:06:28 2026 by rpki-client