
$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier: cmMzO1zzXsRQOrtO5NcQTRYWYeIZg16tXVnHqYdKWoM=
Subject key identifier: 03:A8:A7:60:1C:FF:55:18:00:B3:C8:11:4C:65:91:C0:58:94:87:48
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 0976
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number: 0953
Signing time: Fri 12 Jun 2026 20:10:19 +0000
Manifest this update: Fri 12 Jun 2026 20:10:18 +0000
Manifest next update: Fri 19 Jun 2026 20:10:18 +0000
Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: gK6ACXnb+qqIn5c2N8+XyObR6+r5PwGnYaOabxPMgZ0=)
2: 2F1CC8AE2BFB11F18DDEEB6ECA833773.roa (hash: Ekx7P+D8wtKi049B4QoJeCc3VhTmcnsOMFvkT/BQMCA=)
3: 6E0C35EC601A11F1B26B161B8C47A888.roa (hash: gCv8hvsMmufktnBWJht8DKD8gQprxuubW5PR2yNEdx0=)
4: 2E80100E2BFB11F18DDEEB6ECA833773.roa (hash: IfKC7mL5PQRcQK+z+6XZAxN6UfG/8LMwj3MgKMvwh2k=)
5: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: cRIt74/EhMf0mQxlPqsu7XxxEJsoIXE7EgeFboWTLII=)
6: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: AkCuLpeFDS7FBikpLUxOfI5nypbddfpSvNUG3WZ/ieo=)
7: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: ThPhPFjf2z6RkR7o5fC+yxP5nnTVqCbFqDIKXObgwzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422 (0x976)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Validity
Not Before: Jun 12 20:10:18 2026 GMT
Not After : Jun 19 20:10:18 2026 GMT
Subject: CN=6a2c67ab-dd93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:f4:72:a9:d3:4a:9d:36:17:a7:ff:14:4e:
e9:9c:53:1b:bd:bf:9c:f1:a3:6c:94:35:37:97:2e:
ea:4d:11:5f:05:f9:51:7d:52:02:50:d9:b0:f3:3b:
a1:7a:7d:87:b2:9c:28:4c:c2:e9:4d:6b:91:1f:6f:
9f:e5:90:8e:37:ac:6a:2d:01:d2:6b:14:32:9a:a5:
e4:42:5b:5c:db:f2:8d:f7:6a:2e:12:4a:49:94:16:
73:93:02:5d:06:d6:79:78:6b:e7:79:ea:ec:2c:0f:
7c:9e:ca:8e:22:35:2f:21:42:ca:42:18:ad:51:7b:
3e:d8:d9:03:91:66:7c:f3:af:e6:71:e1:74:40:23:
9e:66:98:f3:5d:ce:69:53:78:14:e7:54:e4:d8:56:
8f:be:53:6c:f3:88:be:b8:ad:d1:08:10:dd:b3:87:
29:dd:39:f1:b3:b8:0f:78:6e:1f:31:ab:de:84:ff:
5a:6d:ab:79:6f:a0:0b:05:f0:d1:98:ca:20:49:69:
56:3a:5e:64:9e:b7:d0:1f:dc:08:16:97:16:46:b6:
56:c1:2c:6c:01:20:d5:02:bd:b2:4c:5a:36:88:2c:
df:66:e0:65:89:bf:4d:b5:6f:55:12:4c:57:0d:1f:
b3:d8:b7:5d:a9:d0:3a:34:f1:25:1c:b2:ba:3f:dc:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A8:A7:60:1C:FF:55:18:00:B3:C8:11:4C:65:91:C0:58:94:87:48
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:40:6c:7e:32:f9:bc:07:ac:7a:d9:f3:fe:e7:7a:3f:13:f9:
02:45:f1:27:13:b6:be:b0:e0:bd:9c:6b:c6:a4:73:21:2b:08:
f0:4c:b1:ec:16:c9:f0:1a:f3:8a:68:d1:b3:5b:de:81:2a:60:
8c:3b:70:f4:97:70:fd:fd:65:11:eb:50:64:96:68:6e:a0:3e:
52:6a:65:06:84:f5:f1:c0:fa:7d:2b:41:6b:96:4f:ce:9e:c2:
d0:48:bd:74:ad:8b:c2:06:47:07:61:a0:e8:8b:9c:cb:03:3c:
fa:e6:72:8b:87:e6:9e:43:e4:82:91:79:05:05:3e:58:52:f0:
7e:74:dd:a2:2c:1c:b2:91:33:12:56:ea:3f:2b:38:05:cf:26:
39:72:7a:87:c3:26:31:e9:e3:5c:67:47:44:30:be:97:a6:fb:
d7:2e:43:49:2c:24:03:83:6b:b3:e6:fe:8b:bb:bf:ff:8d:ca:
7b:76:26:69:40:ff:f9:2f:5d:7c:c6:2d:8c:94:78:92:51:5b:
1e:8a:66:7c:5f:59:35:2d:d4:e6:23:f8:e3:90:89:b3:05:e2:
16:8b:a3:6a:ee:c4:7b:91:1f:0e:2c:6d:fc:c1:78:c2:f9:1c:
0b:10:75:d9:26:1b:b6:40:44:67:77:e7:57:d5:90:6c:44:6b:
17:a4:1c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:49:14 2026 by rpki-client