
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
File: fqB__DIeh8j3RMqqCf_5ixzAtos.mft (raw, json)
Hash identifier: 8BF8j4c3Q/H4cbw8XBb65Ec0eG7ILMCOoI/OXvcZQDA=
Subject key identifier: 1C:55:BE:F7:87:CF:73:F0:5B:DB:1A:44:B8:DC:DB:D8:0A:8F:83:EA
Authority key identifier: 7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B
Certificate issuer: /CN=A91E859E/serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
Manifest number: 43
Signing time: Mon 05 Oct 2026 09:01:18 +0000
Manifest this update: Mon 05 Oct 2026 09:01:17 +0000
Manifest next update: Mon 12 Oct 2026 09:01:17 +0000
Files and hashes: 1: fqB__DIeh8j3RMqqCf_5ixzAtos.crl (hash: 17Vh/hDjYCedOyI4GrPkiLKmXYeZvxIkeN+cFwVtRVc=)
2: D22158C0674811F1B78F7ABD8247A888.roa (hash: MGUrpK1K2oupHxzWSgO6Nc9+anYE61p1UNik8Cr88aI=)
3: 0CB90268678411F1A5717FF39347A888.roa (hash: FMjrzW19UpAuLU2zd+ioPWQz9JPl11mv3uL2SMTAKOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl
rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E859E, serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
Validity
Not Before: Oct 5 09:01:17 2026 GMT
Not After : Oct 12 09:01:17 2026 GMT
Subject: CN=6ac3675d-0f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:be:2c:32:c0:3a:0c:73:81:a8:d7:b3:d3:fe:
f0:f1:07:69:3c:ca:9b:23:d0:36:c7:85:ad:a7:75:
92:46:b8:cd:fe:16:fc:66:8b:f4:e2:f4:82:96:61:
02:0a:ce:8d:3e:e9:fa:e5:63:1d:68:12:01:0f:34:
eb:e1:c3:39:db:89:56:cf:8b:32:f7:8c:6a:28:ff:
90:91:e7:f2:2e:d3:90:20:af:92:b0:4d:8d:03:e9:
a8:e3:d5:92:d3:78:05:58:2d:00:58:b6:5f:6c:a4:
b6:61:da:f2:c9:e3:76:cc:f5:2e:b9:c9:dc:1d:78:
13:61:e6:bb:f2:d0:af:08:20:c5:f4:80:a2:72:1f:
9e:ba:49:9b:05:2c:30:3b:7b:1c:83:2d:70:0b:32:
e9:5c:ab:2f:eb:bc:44:cd:d1:36:25:98:de:4c:46:
b2:04:f0:ad:20:6f:76:18:ad:00:09:19:52:e6:fb:
23:f6:06:41:e4:fa:17:6a:64:8b:1d:18:b6:a8:4c:
2a:23:b7:1d:20:7b:02:ae:90:00:1f:fe:87:27:dd:
83:d8:dc:4b:40:ed:be:6b:90:8a:c9:d3:6a:11:b8:
8c:5a:47:3d:5c:3e:54:ba:b4:a6:84:cc:37:2b:e1:
52:f8:a6:46:33:0d:4c:2e:57:63:00:01:58:da:60:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:55:BE:F7:87:CF:73:F0:5B:DB:1A:44:B8:DC:DB:D8:0A:8F:83:EA
X509v3 Authority Key Identifier:
keyid:7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fd:79:e5:a9:43:03:26:28:4e:9d:cc:b8:93:44:26:21:ef:
43:17:d3:0a:1f:19:62:39:68:df:bb:71:a2:ce:a7:68:56:d3:
b8:f0:b0:b2:f2:c2:d2:5e:0e:db:6b:48:7e:1a:ee:61:a5:33:
9e:e1:18:99:25:4b:df:0c:28:5d:86:d8:ed:17:96:a4:63:16:
54:c1:ce:5a:e2:0c:83:f1:fe:e6:43:eb:87:90:a0:61:ea:c7:
6a:a1:67:66:ae:a6:97:49:e8:eb:d4:82:90:ac:39:82:72:86:
6a:65:2c:8c:a2:f8:6b:2d:d8:d4:e3:6f:c4:ab:be:1c:70:c6:
9e:33:97:50:42:d6:29:0f:0f:dc:b2:5e:d4:ea:ed:6c:a9:65:
d5:f3:77:16:0d:0a:3e:29:83:47:a0:ff:e1:94:7a:16:d6:a1:
e6:d8:26:dd:79:db:fd:01:2d:cf:18:d4:88:81:7d:81:3b:54:
4e:2c:7a:5b:4d:49:7c:7b:32:57:26:ef:23:a0:fd:1e:42:1c:
bd:cb:95:30:94:77:c1:07:60:6b:26:cc:be:e2:83:43:0f:2d:
72:49:62:84:fe:37:7d:28:cf:82:e2:cb:c4:c3:02:21:0a:e1:
1e:20:ca:79:70:97:97:aa:7f:c7:6e:9d:c0:25:03:52:81:bb:
a1:b1:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:13:46 2026 by rpki-client