
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier: pUqR8nWsDg955iC07MPucOBf9vYUaKze0CJcPtLzeDc=
Subject key identifier: DC:8C:BF:D9:CD:89:9D:72:CE:A0:24:C6:93:22:21:91:0B:B2:60:BC
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 29EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number: 295C
Signing time: Wed 28 Oct 2026 15:36:17 +0000
Manifest this update: Wed 28 Oct 2026 15:36:17 +0000
Manifest next update: Wed 04 Nov 2026 15:36:17 +0000
Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: xFI/egrLWXvV1EvffiKQhgX940niRmR4g3TjUYR+Ogw=)
2: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: 00gpwc2zOnyGovrxz5NLVNWOFFs8dFrjb8ZlbuA2tCY=)
3: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: z56uJ2U87y4BZLiIWCO/gwAwKZ33is7HYYG+KYeN+9U=)
4: BC85BF12986611F099AC837DC4F9AE02.roa (hash: ou4cUOcNjqtElt4sr1NAu49lP8L4hmyuw27B/RIohB0=)
5: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: CH+P1DrpmZpd0ULB0EGA0EwiZi1YaDYI+NO8M1bemyE=)
6: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: VLiSpEsf9qV7L6/Fw29gbB6h1KnjaO5VGM7Rak0+JP4=)
7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: eTadtDYNDPp/pHk3FfF1hzmaueMz7ziMe0kecofm1oc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 15:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10735 (0x29ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Oct 28 15:36:17 2026 GMT
Not After : Nov 4 15:36:17 2026 GMT
Subject: CN=6ae21671-16d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:4a:7f:28:dd:6c:17:89:1b:c7:68:3f:f6:
d8:ad:27:b5:e3:be:80:20:56:69:5f:91:59:5c:61:
c2:de:74:cf:44:21:86:09:1f:63:36:63:89:af:ee:
1e:3c:59:31:db:aa:af:82:f5:e0:93:2a:85:50:fc:
34:0d:6d:91:09:1e:fc:27:51:ab:2d:12:a0:d9:7a:
dd:e6:9f:36:93:52:b3:13:27:95:7f:b8:65:c0:c0:
87:fa:2f:55:f7:8a:90:71:3f:f1:0c:c7:eb:8c:d1:
a6:f1:88:e9:81:23:e0:fb:41:93:5e:f7:d8:8d:84:
dd:63:b2:da:3b:19:c6:2b:f6:12:83:9e:66:7c:15:
01:b0:aa:7f:ed:7e:32:04:2b:3a:51:d5:c5:d4:fd:
8e:21:89:d1:22:77:44:1a:20:be:50:93:e2:a9:8a:
57:86:e8:97:1c:08:25:e4:dc:23:8e:a4:a3:de:f5:
cf:dd:a4:49:23:ee:10:d7:fa:b0:df:16:d8:4a:71:
f2:3e:64:81:94:8c:52:c0:83:bd:73:c3:ec:18:1a:
8b:d1:66:0c:b2:ef:a3:b9:ca:25:7a:78:22:3c:29:
d9:9e:38:eb:9a:2e:44:09:95:df:fc:f2:4a:0a:8d:
65:39:51:e7:9c:6b:48:fd:1e:cd:f9:8a:93:1b:8d:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8C:BF:D9:CD:89:9D:72:CE:A0:24:C6:93:22:21:91:0B:B2:60:BC
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ff:6c:f9:aa:91:2c:7f:a3:52:75:3f:45:91:fb:2e:b1:da:
77:e2:b0:3c:8a:dd:5e:27:85:c2:85:b7:24:4c:85:0c:bc:85:
b6:e0:82:ce:76:e2:0f:7a:72:12:bc:c0:1c:30:3c:ea:56:85:
22:f3:3b:76:54:98:1c:53:86:c7:48:a9:d3:65:aa:53:cb:c0:
99:a5:f9:56:bd:5e:0e:c4:0f:db:bb:e0:d3:98:23:59:cb:91:
ea:7a:cf:97:4c:dd:4d:7f:4c:e0:51:91:aa:c7:fc:c7:07:2d:
f8:58:09:00:25:f9:92:24:3c:32:7b:1a:85:e8:fb:69:ba:83:
46:25:85:3a:3b:c8:7b:1c:ef:eb:c4:31:ac:18:24:ea:b4:38:
10:75:08:f9:08:b4:1a:9e:92:de:a3:c8:13:75:eb:d2:c2:56:
83:0b:41:95:f6:81:a9:50:6e:09:5e:69:ba:d0:7f:42:90:cc:
d3:e2:5a:c1:9a:17:f0:a2:e2:79:9d:b7:b1:70:d0:8d:5c:62:
22:69:a0:73:9b:85:3e:85:34:c2:35:27:d1:54:b3:02:63:f4:
9b:d7:f2:64:58:a5:ff:69:73:76:b3:31:ef:a2:70:46:89:fa:
62:82:ec:98:71:8c:68:c0:e5:cf:c7:30:49:fe:93:f9:54:ad:
14:df:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:27:30 2026 by rpki-client