
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
File: fqB__DIeh8j3RMqqCf_5ixzAtos.mft (raw, json)
Hash identifier: TBsWC2HI+8UMefBWNdWIB67+GraLsyZM3S5fW4/Lrfw=
Subject key identifier: 4C:05:CB:DE:F0:98:93:65:92:9E:6B:DE:90:F6:BF:47:D3:4A:BE:AB
Authority key identifier: 7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B
Certificate issuer: /CN=A91E859E/serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
Manifest number: 0F
Signing time: Tue 23 Jun 2026 09:27:36 +0000
Manifest this update: Tue 23 Jun 2026 09:27:36 +0000
Manifest next update: Tue 30 Jun 2026 09:27:36 +0000
Files and hashes: 1: fqB__DIeh8j3RMqqCf_5ixzAtos.crl (hash: gtaqmUjL2fAs6BO9WYAv6yHYJ9iO50aiFzVi3F+zElM=)
2: 0CB90268678411F1A5717FF39347A888.roa (hash: FMjrzW19UpAuLU2zd+ioPWQz9JPl11mv3uL2SMTAKOc=)
3: D22158C0674811F1B78F7ABD8247A888.roa (hash: MGUrpK1K2oupHxzWSgO6Nc9+anYE61p1UNik8Cr88aI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl
rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 09:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E859E, serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B
Validity
Not Before: Jun 23 09:27:36 2026 GMT
Not After : Jun 30 09:27:36 2026 GMT
Subject: CN=6a3a5188-8272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:1c:6a:2e:aa:87:88:19:cb:a5:99:a1:f0:
36:65:94:44:88:2e:1a:23:ea:2d:13:f2:71:7c:56:
ef:f4:6b:c4:57:db:32:8e:00:e9:2e:e6:ed:c6:92:
86:6e:b8:09:16:14:39:78:0a:a6:b0:b1:47:b1:cd:
60:1a:1f:fe:2a:8e:22:8a:95:ef:c3:66:a5:b3:29:
a0:c6:df:83:f0:43:c6:d0:0b:ed:47:98:1c:d4:36:
73:4e:a6:dc:58:b7:a6:ff:2d:2e:53:92:86:4c:35:
7e:ee:e6:b5:ca:0c:91:9d:31:9e:6d:24:2d:b0:14:
4f:27:50:48:2a:95:2a:c2:b2:41:7d:0c:c2:a4:24:
6e:31:59:28:a6:29:bb:26:6c:4d:8b:fb:17:96:25:
4d:7c:16:94:93:c1:c7:ac:51:fe:8a:45:3d:6f:48:
75:62:9d:8f:68:6d:49:3a:51:50:ca:9f:b3:76:d2:
fd:27:c8:5b:2f:c0:3c:a9:ca:4e:c3:ec:4c:9c:61:
b6:39:3d:59:02:64:ec:da:8c:11:58:4d:e5:6f:45:
ca:d0:4f:65:75:91:3a:48:bb:f4:55:80:dd:54:36:
d7:f5:b6:5a:c0:0d:01:63:8f:de:52:b8:4a:ee:69:
9e:09:69:14:40:f1:71:16:66:39:93:a8:3f:7e:19:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:CB:DE:F0:98:93:65:92:9E:6B:DE:90:F6:BF:47:D3:4A:BE:AB
X509v3 Authority Key Identifier:
keyid:7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:04:5e:7e:b6:4f:49:62:d9:31:0c:e0:81:49:92:a8:43:c9:
7b:ae:a8:5c:a2:1e:03:e6:05:79:8b:12:20:07:45:96:e6:84:
95:2a:5e:16:0d:fa:35:65:5e:94:e6:12:e7:91:bb:f8:9b:c2:
0e:96:2a:be:57:61:0f:90:30:34:29:20:6e:78:68:9e:21:4d:
a0:d7:3d:ad:98:09:0a:b4:cd:ea:eb:9f:9e:22:db:40:06:ad:
ed:f5:fd:da:88:e9:17:c1:b5:20:1f:9a:f4:a5:21:a9:97:4c:
c2:d4:92:76:f6:32:b6:d3:f3:c5:39:6e:91:c0:89:36:0e:ca:
07:28:75:0d:45:1b:c1:61:b8:0a:fa:19:63:ab:7c:90:f6:48:
d5:7c:f3:05:83:3d:c9:e1:d4:35:12:55:56:de:80:73:05:b2:
3d:c6:fa:61:7b:07:18:61:58:54:00:f4:48:df:52:0d:fb:46:
f4:d4:6f:06:99:db:92:0a:0d:fc:8a:e2:c1:d4:9b:33:be:05:
97:87:65:ea:89:c6:30:9c:1b:ef:cc:07:c5:e8:d5:c9:aa:60:
f7:47:fc:3a:c8:c7:4f:b6:f6:e5:f4:e0:ed:cf:c5:09:31:26:
8f:b7:50:98:4d:4a:7e:f1:ed:09:d4:f6:7a:bb:21:5c:11:73:
6c:db:2c:95
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
ODU5RTExMC8GA1UEBRMoN0VBMDdGRkMzMjFFODdDOEY3NDRDQUFBMDlGRkY5OEIx
Q0MwQjY4QjAeFw0yNjA2MjMwOTI3MzZaFw0yNjA2MzAwOTI3MzZaMBgxFjAUBgNV
BAMTDTZhM2E1MTg4LTgyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCqiRxqLqqHiBnLpZmh8DZllESILhoj6i0T8nF8Vu/0a8RX2zKOAOku5u3GkoZu
uAkWFDl4CqawsUexzWAaH/4qjiKKle/DZqWzKaDG34PwQ8bQC+1HmBzUNnNOptxY
t6b/LS5TkoZMNX7u5rXKDJGdMZ5tJC2wFE8nUEgqlSrCskF9DMKkJG4xWSimKbsm
bE2L+xeWJU18FpSTwcesUf6KRT1vSHVinY9obUk6UVDKn7N20v0nyFsvwDypyk7D
7EycYbY5PVkCZOzajBFYTeVvRcrQT2V1kTpIu/RVgN1UNtf1tlrADQFjj95SuEru
aZ4JaRRA8XEWZjmTqD9+GWqfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTAXL3vCY
k2WSnmvekPa/R9NKvqswHwYDVR0jBBgwFoAUfqB//DIeh8j3RMqqCf/5ixzAtosw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTlFL0YyQTc4REQyNjc0
MTExRjFBRjhEQTZBOTdGNDdBODg4L2ZxQl9fREllaDhqM1JNcXFDZl81aXh6QXRv
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZnFCX19ESWVoOGozUk1xcUNmXzVpeHpBdG9zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4
NTlFL0YyQTc4REQyNjc0MTExRjFBRjhEQTZBOTdGNDdBODg4L2ZxQl9fREllaDhq
M1JNcXFDZl81aXh6QXRvcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAtBF5+tk9JYtkxDOCBSZKoQ8l7rqhcoh4D5gV5ixIgB0WW5oSVKl4WDfo1ZV6U
5hLnkbv4m8IOliq+V2EPkDA0KSBueGieIU2g1z2tmAkKtM3q65+eIttABq3t9f3a
iOkXwbUgH5r0pSGpl0zC1JJ29jK20/PFOW6RwIk2DsoHKHUNRRvBYbgK+hljq3yQ
9kjVfPMFgz3J4dQ1ElVW3oBzBbI9xvphewcYYVhUAPRI31IN+0b01G8GmduSCg38
iuLB1JszvgWXh2XqicYwnBvvzAfF6NXJqmD3R/w6yMdPtvbl9ODtz8UJMSaPt1CY
TUp+8e0J1PZ6uyFcEXNs2yyV
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:09:32 2026 by rpki-client