
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier: KeoRLRbuH5DDj/jMwwsdBY33u1mScCeQmEPFSRVyJsI=
Subject key identifier: 06:8A:05:14:85:52:62:DD:1E:C5:51:89:37:04:C9:87:54:B5:9A:BC
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial: 097A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number: 095B
Signing time: Fri 04 Sep 2026 20:04:19 +0000
Manifest this update: Fri 04 Sep 2026 20:04:18 +0000
Manifest next update: Fri 11 Sep 2026 20:04:18 +0000
Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: u3vlNNsiF76LFxXTEhHNwlriXcJdKY9YdpXBV9cC0aM=)
2: F688C1749A0311F1B9C2572E4E11F970.roa (hash: uDwcKFCtBop5x5ag99shj4WahPLVPggKhirCH0wXKZ4=)
3: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: Sq9EIeOgYCx84pdJfu94sh0DvGiS1iot7O0NRrEDMaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:04:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426 (0x97a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Validity
Not Before: Sep 4 20:04:18 2026 GMT
Not After : Sep 11 20:04:18 2026 GMT
Subject: CN=6a9b2443-fa61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:56:0f:c1:16:a1:89:be:0b:c9:a8:b5:00:
89:ff:22:56:4a:d5:2c:48:34:2f:fa:27:4d:91:ec:
0b:63:80:5a:73:08:c6:89:05:8e:3b:35:48:d7:c2:
c4:59:3f:6f:a5:90:cf:b8:76:a7:d9:cb:a3:ed:33:
c5:ee:1c:da:26:bd:43:dd:a9:06:7c:88:64:28:7a:
33:64:2f:64:9d:26:a2:2a:0a:09:64:31:b9:4b:1e:
bf:68:07:fa:b5:14:73:41:84:ad:13:b2:0b:d5:e6:
97:65:3c:6a:84:e3:82:0a:f0:85:af:2b:42:89:1e:
e0:ab:39:f4:e7:88:59:43:5e:04:86:ab:71:e8:9e:
72:75:d2:76:3b:e3:ee:5a:27:10:dd:47:09:f7:11:
fb:fa:d3:80:bd:6a:2a:02:2f:e9:21:b2:c0:a7:c8:
09:43:87:25:27:9c:36:97:c1:2e:1f:6e:56:91:b9:
d6:90:bb:97:de:fd:40:a0:fa:8f:42:0e:21:d5:fb:
35:0c:77:75:53:5f:7e:e6:86:21:18:90:bb:d5:43:
e4:2c:4a:fe:e5:d0:a5:e5:79:90:ae:d8:73:95:53:
b7:6f:e3:6b:76:c4:e5:12:70:c6:dc:7b:d0:93:4c:
2f:c9:aa:44:f9:7d:95:30:ee:13:a3:bf:a2:93:35:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:05:14:85:52:62:DD:1E:C5:51:89:37:04:C9:87:54:B5:9A:BC
X509v3 Authority Key Identifier:
keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:d1:72:b8:40:46:7b:4d:8c:91:90:9c:1b:3e:e0:1a:51:
ae:09:99:29:18:74:4f:0b:de:c2:01:47:d2:05:35:70:48:84:
b7:34:87:35:e1:1f:e0:91:6e:4d:c1:07:06:f3:dd:a9:9d:d6:
7d:5b:7d:58:24:0a:44:c9:54:4e:be:41:7b:67:59:6d:85:26:
cf:28:6e:c8:4e:99:b1:fa:df:a0:60:7e:1d:d1:57:4c:07:94:
1b:b5:f7:25:3d:c8:ce:42:97:5b:a8:c8:0b:c4:a0:ce:7a:4d:
c3:10:37:23:f1:c0:f2:c3:f3:4c:27:f2:f0:1c:4b:48:88:90:
54:cb:01:af:74:f6:67:3c:19:42:79:40:7f:4d:ee:34:ee:18:
5b:8b:e5:13:5e:b5:02:a8:ea:9a:8d:36:4d:b6:c2:bf:5a:9b:
5b:bd:b5:da:5e:8a:3f:d1:f5:04:76:6e:b7:2e:f9:16:55:f1:
7d:7c:8e:1c:14:da:2c:72:3b:97:8a:e4:4a:d0:85:e7:c8:80:
a6:35:88:c9:c9:e6:d4:c4:68:ea:ba:71:e7:b3:22:dd:1c:36:
76:ad:f8:1f:c1:67:5f:ae:43:c7:8d:e5:1b:29:da:9a:45:23:
5e:4d:fe:9f:48:50:26:1a:2d:11:7f:7b:9c:96:82:5e:49:1f:
7b:36:ed:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz
QjI4OTY4REMwHhcNMjYwOTA0MjAwNDE4WhcNMjYwOTExMjAwNDE4WjAYMRYwFAYD
VQQDEw02YTliMjQ0My1mYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwS5WD8EWoYm+C8motQCJ/yJWStUsSDQv+idNkewLY4BacwjGiQWOOzVI18LE
WT9vpZDPuHan2cuj7TPF7hzaJr1D3akGfIhkKHozZC9knSaiKgoJZDG5Sx6/aAf6
tRRzQYStE7IL1eaXZTxqhOOCCvCFrytCiR7gqzn054hZQ14Ehqtx6J5yddJ2O+Pu
WicQ3UcJ9xH7+tOAvWoqAi/pIbLAp8gJQ4clJ5w2l8EuH25WkbnWkLuX3v1AoPqP
Qg4h1fs1DHd1U19+5oYhGJC71UPkLEr+5dCl5XmQrthzlVO3b+NrdsTlEnDG3HvQ
k0wvyapE+X2VMO4To7+ikzVfDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAaKBRSF
UmLdHsVRiTcEyYdUtZq8MB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND
M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2
eGtpZElRYmpYZ0k3S0phTncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH0LRcrhARntNjJGQnBs+4BpRrgmZKRh0TwvewgFH0gU1cEiEtzSHNeEf4JFu
TcEHBvPdqZ3WfVt9WCQKRMlUTr5Be2dZbYUmzyhuyE6ZsfrfoGB+HdFXTAeUG7X3
JT3IzkKXW6jIC8SgznpNwxA3I/HA8sPzTCfy8BxLSIiQVMsBr3T2ZzwZQnlAf03u
NO4YW4vlE161Aqjqmo02TbbCv1qbW7212l6KP9H1BHZuty75FlXxfXyOHBTaLHI7
l4rkStCF58iApjWIycnm1MRo6rpx57Mi3Rw2dq34H8FnX65Dx43lGynamkUjXk3+
n0hQJhotEX97nJaCXkkfezbtcA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:37:24 2026 by rpki-client