
$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
File: qfe5PpUk_E8WgaiSxHMiFVQisY4.mft (raw, json)
Hash identifier: WwHNVRdCRGesnwdiWAvJofNBzQH8nHxMhOx7tvZQaJs=
Subject key identifier: 12:FE:9C:96:D2:08:A3:6D:EF:4D:1C:71:D6:33:86:3F:80:AF:2C:7E
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Certificate issuer: /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial: 0957
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
Manifest number: 0935
Signing time: Thu 16 Apr 2026 20:06:37 +0000
Manifest this update: Thu 16 Apr 2026 20:06:37 +0000
Manifest next update: Thu 23 Apr 2026 20:06:37 +0000
Files and hashes: 1: qfe5PpUk_E8WgaiSxHMiFVQisY4.crl (hash: ZkLwYav1EAlMKQTRXJ0HSmsWgrqZsQfQ6JGJAiU7YEQ=)
2: 6FA4F9C44D8511EFA6073432C4F9AE02.roa (hash: AkCuLpeFDS7FBikpLUxOfI5nypbddfpSvNUG3WZ/ieo=)
3: EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (hash: cRIt74/EhMf0mQxlPqsu7XxxEJsoIXE7EgeFboWTLII=)
4: 2E80100E2BFB11F18DDEEB6ECA833773.roa (hash: IfKC7mL5PQRcQK+z+6XZAxN6UfG/8LMwj3MgKMvwh2k=)
5: 2F1CC8AE2BFB11F18DDEEB6ECA833773.roa (hash: Ekx7P+D8wtKi049B4QoJeCc3VhTmcnsOMFvkT/BQMCA=)
6: 3ABCF052301511EDA401DB3CC4F9AE02.roa (hash: ThPhPFjf2z6RkR7o5fC+yxP5nnTVqCbFqDIKXObgwzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91169FB, serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Validity
Not Before: Apr 16 20:06:37 2026 GMT
Not After : Apr 23 20:06:37 2026 GMT
Subject: CN=69e1414d-339c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:cb:ba:98:0b:24:d6:ff:00:73:47:c7:53:
1d:2a:20:85:4b:f7:af:7c:85:59:d6:10:60:c2:4c:
3b:63:21:c1:8e:fd:5f:0e:98:89:7b:d6:ae:7a:32:
87:82:9b:c6:3c:c8:13:01:a1:11:12:91:34:d1:91:
a5:a9:d7:6c:4c:a2:44:1a:83:df:bd:b5:ac:aa:c4:
d0:bf:4b:0a:ab:21:c8:22:63:42:de:a7:51:c0:e2:
dd:a7:65:41:93:aa:44:c5:66:85:0a:39:76:44:24:
da:04:dc:a6:89:7b:97:ca:29:9f:4a:9b:6c:1d:b8:
26:61:ec:3f:4d:46:61:60:5d:e5:c8:e2:96:b1:6a:
0a:4a:d5:7b:f3:45:f7:74:0f:1b:af:00:5b:fc:3c:
08:c7:fd:c0:78:05:37:99:e3:37:9b:eb:5b:f5:d9:
5c:d3:d2:81:3e:2f:06:9d:55:b7:ab:36:c0:30:0d:
50:b7:fe:e6:3a:e2:88:d9:9c:be:35:14:cf:d3:6e:
09:a8:9c:59:c4:a2:3a:25:66:a5:d8:73:58:fd:d5:
f6:83:52:33:95:0c:a3:fb:a9:e3:94:16:eb:f4:a2:
36:c6:ce:8b:50:43:87:88:82:d9:3a:86:e5:21:ac:
05:2b:37:06:c2:3f:aa:4a:3e:b5:34:d6:3c:15:9a:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:9C:96:D2:08:A3:6D:EF:4D:1C:71:D6:33:86:3F:80:AF:2C:7E
X509v3 Authority Key Identifier:
keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7f:ec:87:5e:37:7a:63:45:e9:b8:3f:93:4c:eb:8c:88:80:
b2:de:70:af:53:1b:f2:a8:e2:05:ed:d5:09:0d:9c:00:46:24:
23:6b:85:aa:19:7f:4b:9e:4f:07:c1:ce:5f:e0:43:1e:ef:c8:
2b:7e:a7:ef:d4:96:12:e7:4b:d4:52:1e:f2:c9:bc:e1:05:82:
56:a3:e6:89:a9:28:b0:c8:76:5b:37:ab:d1:1a:23:e8:a6:a9:
bc:a5:20:fa:1c:06:44:1d:14:b9:ae:05:d2:44:0f:36:d2:e1:
bc:b2:54:d7:34:c9:4f:9e:c1:8f:2d:6b:2a:b6:8b:ea:08:00:
bb:3c:24:5b:31:6a:49:3f:2b:ef:5f:23:59:0b:97:8d:0d:ce:
0d:d1:e3:a8:b1:c8:7d:94:41:de:cd:3f:ad:10:f8:b6:af:66:
c5:1e:cb:1f:fa:06:8f:ee:35:87:75:b3:04:fb:c8:97:46:8b:
5f:b8:c9:58:62:38:f3:6b:64:08:25:31:0c:5f:60:4b:d3:a2:
4a:aa:eb:18:fe:25:4e:10:6f:03:a9:bd:61:07:d1:3b:f3:6f:
9e:29:76:1b:71:68:7f:05:ea:28:c1:01:2a:42:ad:d1:08:22:
77:69:94:ab:98:95:73:41:33:d3:e2:73:11:d6:be:88:af:38:
be:cb:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:06 2026 by rpki-client