
$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier: lk1kxA/XYAo6JeyD9dA/fECv2Ywxu/sgO2Pv4SQtyY8=
Subject key identifier: FA:3D:69:2A:63:0B:2C:E0:56:13:FC:28:6B:5E:67:F2:1B:B1:33:1D
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 099C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number: 0977
Signing time: Tue 18 Aug 2026 20:23:27 +0000
Manifest this update: Tue 18 Aug 2026 20:23:27 +0000
Manifest next update: Tue 25 Aug 2026 20:23:27 +0000
Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: DTQcbgkfhpbPFZJXfo8+Sf/Se+XJ9GC7uPg6jUSBTrY=)
2: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: cRIt74/EhMf0mQxlPqsu7XxxEJsoIXE7EgeFboWTLII=)
3: 6E0C35EC601A11F1B26B161B8C47A888.roa (hash: gCv8hvsMmufktnBWJht8DKD8gQprxuubW5PR2yNEdx0=)
4: 2E80100E2BFB11F18DDEEB6ECA833773.roa (hash: IfKC7mL5PQRcQK+z+6XZAxN6UfG/8LMwj3MgKMvwh2k=)
5: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: AkCuLpeFDS7FBikpLUxOfI5nypbddfpSvNUG3WZ/ieo=)
6: 2F1CC8AE2BFB11F18DDEEB6ECA833773.roa (hash: Ekx7P+D8wtKi049B4QoJeCc3VhTmcnsOMFvkT/BQMCA=)
7: 99A80E166AD211F1892A90326B47A888.roa (hash: U8Xv2GI61D8swh1fpd27sHFqyLEGO2FX3CjLCpWiajY=)
8: D7B2B26A6AD211F1951BA8426B47A888.roa (hash: UZlEmsuH7aBX5JJJlcDuNSkw6edtRsPrybI8JUsckjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460 (0x99c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Validity
Not Before: Aug 18 20:23:27 2026 GMT
Not After : Aug 25 20:23:27 2026 GMT
Subject: CN=6a84bf3f-9979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:97:0e:10:dc:b0:84:23:b5:df:f8:3f:32:
12:e9:51:65:e9:d0:96:39:72:1c:c7:87:f0:26:63:
29:8e:68:a4:27:22:47:4b:42:87:72:6e:0d:55:cd:
dd:b5:f3:90:cb:c3:1a:32:d5:87:2e:39:2f:b3:b5:
2c:5a:05:dc:0c:b9:7e:a5:39:c6:ad:bf:ca:3b:5f:
1e:a3:db:e5:68:e1:d0:68:ac:c8:89:cd:ac:05:5b:
5d:31:42:f0:32:f3:ab:e9:c6:04:43:e6:84:bf:e3:
a7:f1:e0:32:67:f3:10:e6:c4:f5:e3:77:e0:af:2c:
8f:e2:7b:a9:a4:9b:ba:28:64:ad:a4:a5:c9:72:98:
67:ad:ec:21:46:01:4c:96:98:45:32:25:22:8c:0e:
c0:35:a9:d4:6e:3d:23:d6:db:8b:94:30:aa:5b:2b:
5c:8b:e2:08:7e:66:b9:15:7b:ea:e7:f1:17:a1:3c:
64:23:41:8c:df:e6:1b:2c:45:45:d1:98:37:f9:bc:
2e:b8:1a:bd:21:b9:67:97:1e:73:a7:75:74:91:7c:
88:52:09:7d:6e:5d:ce:1b:66:07:e3:74:5b:5c:fe:
15:60:fa:c2:ff:06:ea:80:8c:91:f3:a2:7e:f6:94:
15:36:92:29:94:a1:68:df:04:42:6d:10:60:4d:af:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:69:2A:63:0B:2C:E0:56:13:FC:28:6B:5E:67:F2:1B:B1:33:1D
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:96:4f:f9:98:dd:2a:2e:cf:99:4a:3a:f1:b6:3c:cd:4d:78:
1d:f6:ec:19:5d:c0:91:5d:55:32:da:33:a3:34:9a:d1:79:89:
de:76:54:2b:b2:49:e7:2e:4e:ff:7d:b6:f8:1b:7e:68:12:3d:
b2:18:a1:98:61:42:2a:b7:72:c8:23:b3:fa:12:22:0f:de:89:
95:45:d9:18:0d:fe:2a:b3:32:90:ff:67:9a:58:8f:5e:a0:e9:
00:8b:23:11:8f:60:86:32:db:a0:3a:d2:b5:d0:2c:94:bd:58:
b5:45:5e:5e:fd:d8:af:ab:0b:72:52:78:79:e2:29:e6:8f:97:
02:54:93:ad:0a:31:6f:66:3f:50:eb:a8:b4:e6:56:58:d6:4e:
8b:bd:45:fc:6b:47:b8:31:88:94:90:44:67:72:be:fd:da:f8:
99:43:df:49:fc:a8:b8:0b:7a:f8:7a:c2:7f:5a:2b:e6:f4:2e:
5d:cb:a7:fd:00:9e:59:0e:2e:8e:31:83:bc:3a:5d:71:88:6b:
61:32:df:c1:62:3a:83:a1:94:4c:9e:2b:0b:f0:1b:4c:66:ca:
24:b7:3f:fa:b6:60:91:09:ec:e9:f9:90:03:5a:da:f0:d0:62:
82:86:22:7b:ca:f9:1d:e6:d7:be:40:3d:d5:48:1e:19:2e:06:
53:1c:79:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5RkIxMTAvBgNVBAUTKEE5RjdCOTNFOTUyNEZDNEYxNjgxQTg5MkM0NzMyMjE1
NTQyMkIxOEUwHhcNMjYwODE4MjAyMzI3WhcNMjYwODI1MjAyMzI3WjAYMRYwFAYD
VQQDEw02YTg0YmYzZi05OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq2eXDhDcsIQjtd/4PzIS6VFl6dCWOXIcx4fwJmMpjmikJyJHS0KHcm4NVc3d
tfOQy8MaMtWHLjkvs7UsWgXcDLl+pTnGrb/KO18eo9vlaOHQaKzIic2sBVtdMULw
MvOr6cYEQ+aEv+On8eAyZ/MQ5sT143fgryyP4nuppJu6KGStpKXJcphnrewhRgFM
lphFMiUijA7ANanUbj0j1tuLlDCqWytci+IIfma5FXvq5/EXoTxkI0GM3+YbLEVF
0Zg3+bwuuBq9Iblnlx5zp3V0kXyIUgl9bl3OG2YH43RbXP4VYPrC/wbqgIyR86J+
9pQVNpIplKFo3wRCbRBgTa90RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPo9aSpj
CyzgVhP8KGteZ/IbsTMdMB8GA1UdIwQYMBaAFKn3uT6VJPxPFoGoksRzIhVUIrGO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjlGQi8yMEFENDgzNEJG
MzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19FOFdnYWlTeEhNaUZWUWlz
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FmZTVQcFVrX0U4V2dhaVN4SE1pRlZRaXNZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjlGQi8yMEFENDgzNEJGMzcxMUVBQTNFM0EzNkZDNEY5QUUwMi9xZmU1UHBVa19F
OFdnYWlTeEhNaUZWUWlzWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFJZP+ZjdKi7PmUo68bY8zU14HfbsGV3AkV1VMtozozSa0XmJ3nZUK7JJ5y5O
/322+Bt+aBI9shihmGFCKrdyyCOz+hIiD96JlUXZGA3+KrMykP9nmliPXqDpAIsj
EY9ghjLboDrStdAslL1YtUVeXv3Yr6sLclJ4eeIp5o+XAlSTrQoxb2Y/UOuotOZW
WNZOi71F/GtHuDGIlJBEZ3K+/dr4mUPfSfyouAt6+HrCf1or5vQuXcun/QCeWQ4u
jjGDvDpdcYhrYTLfwWI6g6GUTJ4rC/AbTGbKJLc/+rZgkQns6fmQA1ra8NBigoYi
e8r5HebXvkA91UgeGS4GUxx52w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:51 2026 by rpki-client