
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
File: FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft (raw, json)
Hash identifier: PT9ecDshYPnNahcgfSgsc8gsKoad3V/EarfDVkSF76o=
Subject key identifier: 86:FD:F8:14:47:DB:9F:0A:BE:3B:63:A7:42:1D:E2:33:05:FD:9D:95
Authority key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
Certificate issuer: /CN=A91A29D7/serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
Manifest number: 59
Signing time: Sun 05 Apr 2026 07:26:49 +0000
Manifest this update: Sun 05 Apr 2026 07:26:49 +0000
Manifest next update: Sun 12 Apr 2026 07:26:49 +0000
Files and hashes: 1: FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl (hash: rxUwNBvJ1xGmrCW5oJ1Cl/XRM6yX51KOvvtl7SDgeyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 07:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Validity
Not Before: Apr 5 07:26:49 2026 GMT
Not After : Apr 12 07:26:49 2026 GMT
Subject: CN=69d20eb9-0a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:19:1b:af:50:6e:af:79:36:e7:03:fa:ea:
1d:eb:9e:a5:ef:f0:a1:93:46:ef:83:f4:76:ab:91:
4b:98:ba:8b:9e:99:05:69:05:4e:14:ba:9a:e6:b1:
b6:4f:e7:b7:df:0a:51:fb:90:14:be:c0:d2:40:27:
35:e0:8a:2b:ff:74:f0:74:7d:c5:2f:48:1d:fc:3e:
5b:6b:4f:ae:bf:f2:af:b6:11:68:ea:1c:97:b4:64:
57:6e:0b:56:c7:86:e6:15:ff:a0:27:c1:6c:a3:83:
b6:d8:bb:cf:ac:3d:aa:3a:a7:25:d9:bd:72:b8:90:
9f:8e:c8:c0:db:be:86:4e:84:24:9f:7e:6b:a9:19:
49:19:95:de:fa:20:42:31:99:07:29:40:45:4e:e7:
ea:6d:d0:a4:2c:05:8f:70:c7:dd:6f:12:02:74:da:
04:98:ef:04:b2:c7:33:bc:98:ae:a3:c6:c7:05:be:
04:66:0f:c4:71:5e:eb:43:1c:a6:da:aa:46:0d:73:
a7:f8:d1:fd:6a:3a:f2:7b:8d:6b:7d:e1:0d:0a:6b:
89:4a:9c:fc:e7:f3:66:da:35:d8:87:59:b9:68:04:
75:8e:ad:4b:4e:32:86:59:c7:84:4a:21:e6:67:c4:
47:a2:e8:28:b5:b9:ac:31:a6:21:e7:3c:9b:29:bf:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:F8:14:47:DB:9F:0A:BE:3B:63:A7:42:1D:E2:33:05:FD:9D:95
X509v3 Authority Key Identifier:
keyid:16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ae:a0:bb:c2:3c:f1:d2:f1:a3:92:b9:03:85:c7:0a:98:64:
8c:c6:aa:09:e8:04:6e:cd:11:31:42:d3:9b:36:83:8e:70:8e:
50:a2:dd:6f:d6:e6:5c:ce:db:61:6f:af:e5:e9:14:ba:05:17:
f4:68:13:72:13:d8:75:ab:41:90:e9:90:82:b3:79:89:9f:8d:
38:fd:48:5c:e7:f8:b4:23:72:b8:0d:a9:35:13:e5:4a:8f:75:
30:20:ae:56:9f:57:76:98:36:4d:ea:32:00:ee:87:58:46:72:
02:5d:2f:db:d7:bc:5b:35:d1:e7:05:a1:8b:b6:c9:91:08:99:
69:dc:14:4b:e3:26:82:cc:9d:5f:e3:a6:06:e6:8c:2c:79:34:
ef:83:c3:98:6b:86:4b:7a:a2:ab:b7:85:61:0a:31:5b:71:1c:
e9:46:d2:63:49:d5:81:23:8d:a1:bd:e0:7b:20:9d:19:0a:42:
0f:65:83:42:61:6d:61:56:94:14:19:19:e0:ca:f9:6c:43:6f:
c1:16:61:3b:a0:91:1a:4d:07:21:1f:ee:19:52:1c:54:10:ac:
a0:f4:96:f0:2b:78:98:c8:49:86:90:91:c9:b5:3b:7f:f4:29:
9d:33:0b:d1:05:ad:8f:a2:8b:3e:22:d5:37:a1:7b:2f:0b:6e:
40:36:71:40
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MjlENzExMC8GA1UEBRMoMTZBQzkzRDhEMTA2NjIxMUYwODQxMTZBRDQyQTQzNDRF
RDUxQzQwMjAeFw0yNjA0MDUwNzI2NDlaFw0yNjA0MTIwNzI2NDlaMBgxFjAUBgNV
BAMTDTY5ZDIwZWI5LTBhMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0cxkbr1Bur3k25wP66h3rnqXv8KGTRu+D9HarkUuYuouemQVpBU4UuprmsbZP
57ffClH7kBS+wNJAJzXgiiv/dPB0fcUvSB38PltrT66/8q+2EWjqHJe0ZFduC1bH
huYV/6AnwWyjg7bYu8+sPao6pyXZvXK4kJ+OyMDbvoZOhCSffmupGUkZld76IEIx
mQcpQEVO5+pt0KQsBY9wx91vEgJ02gSY7wSyxzO8mK6jxscFvgRmD8RxXutDHKba
qkYNc6f40f1qOvJ7jWt94Q0Ka4lKnPzn82baNdiHWbloBHWOrUtOMoZZx4RKIeZn
xEei6Ci1uawxpiHnPJspv7aRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhv34FEfb
nwq+O2OnQh3iMwX9nZUwHwYDVR0jBBgwFoAUFqyT2NEGYhHwhBFq1CpDRO1RxAIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0ZCNTYwQjRFQUQ3
MzExRjBBRjY1MDI1NEM0RjlBRTAyL0ZxeVQyTkVHWWhId2hCRnExQ3BEUk8xUnhB
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRnF5VDJORUdZaEh3aEJGcTFDcERSTzFSeEFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
OUQ3L0ZCNTYwQjRFQUQ3MzExRjBBRjY1MDI1NEM0RjlBRTAyL0ZxeVQyTkVHWWhI
d2hCRnExQ3BEUk8xUnhBSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPrqC7wjzx0vGjkrkDhccKmGSMxqoJ6ARuzRExQtObNoOOcI5Qot1v1uZcztth
b6/l6RS6BRf0aBNyE9h1q0GQ6ZCCs3mJn404/Uhc5/i0I3K4Dak1E+VKj3UwIK5W
n1d2mDZN6jIA7odYRnICXS/b17xbNdHnBaGLtsmRCJlp3BRL4yaCzJ1f46YG5ows
eTTvg8OYa4ZLeqKrt4VhCjFbcRzpRtJjSdWBI42hveB7IJ0ZCkIPZYNCYW1hVpQU
GRngyvlsQ2/BFmE7oJEaTQchH+4ZUhxUEKyg9JbwK3iYyEmGkJHJtTt/9CmdMwvR
Ba2Poos+ItU3oXsvC25ANnFA
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:09 2026 by rpki-client