
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier: xA65sAiUxj9fdemorFC2fht8dnFv1bGoHZ3R6JZeOSo=
Subject key identifier: CE:27:DF:AA:4E:85:40:64:52:75:A2:91:8C:D0:A0:A4:C8:42:CE:34
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2999
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number: 2906
Signing time: Tue 12 May 2026 15:36:10 +0000
Manifest this update: Tue 12 May 2026 15:36:09 +0000
Manifest next update: Tue 19 May 2026 15:36:09 +0000
Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: X3k3Zf3dgsto4vBSxAkQcGgpPSyGtXtRg7Vd+c110/k=)
2: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: z56uJ2U87y4BZLiIWCO/gwAwKZ33is7HYYG+KYeN+9U=)
3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: 00gpwc2zOnyGovrxz5NLVNWOFFs8dFrjb8ZlbuA2tCY=)
4: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: CH+P1DrpmZpd0ULB0EGA0EwiZi1YaDYI+NO8M1bemyE=)
5: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: VLiSpEsf9qV7L6/Fw29gbB6h1KnjaO5VGM7Rak0+JP4=)
6: BC85BF12986611F099AC837DC4F9AE02.roa (hash: ou4cUOcNjqtElt4sr1NAu49lP8L4hmyuw27B/RIohB0=)
7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: eTadtDYNDPp/pHk3FfF1hzmaueMz7ziMe0kecofm1oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 15:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10649 (0x2999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: May 12 15:36:09 2026 GMT
Not After : May 19 15:36:09 2026 GMT
Subject: CN=6a0348e9-3773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:6e:22:f4:26:a2:eb:dd:dc:f1:07:31:76:
7a:05:4c:9f:db:16:27:53:f7:c2:d4:3f:9e:c0:a8:
1f:1d:1c:9b:fe:f7:94:1b:f2:6d:8e:fd:bf:11:f8:
ad:66:4a:5e:e5:4c:26:86:d5:79:0a:54:df:4f:d2:
d0:d9:c8:43:38:16:de:b9:14:d0:cd:c6:4f:02:fd:
16:8b:ba:ee:22:27:fb:33:08:44:fe:1f:35:99:0e:
85:e5:d1:bf:8a:6d:98:a8:85:21:80:d6:61:52:15:
b6:11:ae:3f:09:ef:8d:b2:44:68:71:d6:9c:a4:ad:
43:ff:ff:ed:31:62:71:22:ff:f0:b5:56:5c:ea:b1:
f4:02:68:ef:3c:6e:c8:20:63:ab:6f:ed:fa:21:0c:
8e:3b:05:c6:e6:a4:7e:9d:52:48:42:c7:fd:07:ac:
42:6a:32:ea:05:5e:2a:7c:7f:06:19:05:1e:42:45:
8e:b4:cf:9c:e9:e2:b2:d7:0f:82:7b:84:7c:25:15:
1f:37:9c:c6:fa:2b:e9:85:56:f6:ec:d0:08:d3:b3:
aa:8d:9c:a7:23:bb:01:2d:7f:05:01:cf:21:67:93:
b8:e7:8e:4c:f4:76:84:8b:a9:58:ec:a6:7e:5e:bc:
69:c5:0f:3e:0d:f1:01:8d:e2:38:54:4b:87:98:47:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:27:DF:AA:4E:85:40:64:52:75:A2:91:8C:D0:A0:A4:C8:42:CE:34
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:79:26:6b:a0:f0:82:cc:2f:31:c2:67:15:08:bb:cf:52:57:
95:cc:0d:63:af:a1:61:05:fc:c4:2d:64:26:f8:61:5f:79:ac:
fb:4b:6f:a9:8d:9a:e0:a4:ca:71:56:a2:ab:1f:2e:db:c0:97:
e4:d7:ca:a9:6a:c3:66:82:73:22:9f:c1:b5:13:25:ee:d8:89:
6b:b8:ed:d4:b0:07:39:3d:05:d5:6e:dd:90:ab:c8:a3:36:dd:
53:24:b5:11:0b:6a:f2:be:66:5c:85:fd:ad:a2:21:88:57:c1:
17:c8:f6:e6:cf:87:9e:f0:f3:42:8f:c2:0d:c4:8e:85:d7:50:
aa:b4:c9:ee:e2:d0:4c:29:40:e1:14:e5:ad:e5:91:7d:69:b5:
3f:b0:e2:41:ff:01:d5:4d:ed:b8:66:92:e2:18:3d:fb:af:6d:
83:09:19:be:88:47:d5:fd:ac:8c:05:89:25:c3:b7:a7:48:1b:
52:b6:17:04:93:93:56:ab:05:28:c0:01:4c:20:70:43:e3:09:
23:67:d0:9c:3d:60:d8:9e:ae:b0:f8:5e:2d:19:31:35:7d:45:
7b:8a:1c:bc:be:c9:0e:92:93:24:8c:d9:36:3f:24:0c:77:77:
f6:af:b2:6c:bb:eb:28:6a:b7:f5:19:13:44:b1:9d:f0:ba:37:
ea:a3:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:34:58 2026 by rpki-client