
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
File: FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft (raw, json)
Hash identifier: rDdOm304+rqb8LyfD+qEv0ap7jeJseC1G8VqRjZYn68=
Subject key identifier: 52:FA:EF:4E:07:59:B8:9D:C5:8B:4C:33:FA:1D:A5:66:16:57:E6:C4
Authority key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
Certificate issuer: /CN=A91A29D7/serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Certificate serial: 5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
Manifest number: 5F
Signing time: Fri 17 Apr 2026 07:43:43 +0000
Manifest this update: Fri 17 Apr 2026 07:43:42 +0000
Manifest next update: Fri 24 Apr 2026 07:43:42 +0000
Files and hashes: 1: FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl (hash: Fi/hMKwuT1o6ssqDwfNxFv4P2xt/iYVez694uBYFfOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Validity
Not Before: Apr 17 07:43:42 2026 GMT
Not After : Apr 24 07:43:42 2026 GMT
Subject: CN=69e1e4af-f091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:35:86:c2:79:54:60:96:d8:e0:2b:5a:8a:
be:ec:ea:8b:b6:9a:7f:45:9d:60:fd:ae:02:8f:bc:
c4:73:f4:53:2e:6b:51:0b:44:42:84:2e:46:1b:0b:
c1:f9:ef:6f:a7:05:a8:4f:75:ab:f2:b3:4e:61:4d:
f9:95:22:4c:58:6a:e5:42:f2:15:98:e9:c9:e2:aa:
3b:27:7f:33:a2:38:55:d2:52:67:d9:2f:d4:75:6d:
3b:0a:5e:7d:03:f3:33:a0:70:3d:a0:67:d4:fb:db:
94:cf:8e:bf:41:8a:9c:60:8b:a3:67:e0:23:62:28:
1b:24:70:8c:d7:85:d7:2a:fe:8c:2f:1d:7e:97:2e:
b6:2a:d5:04:66:40:8d:9c:7f:90:d5:52:06:56:28:
79:67:99:ec:60:33:d9:08:b6:0f:7c:29:e2:98:42:
ba:86:7d:11:1f:15:6a:92:a2:94:9b:32:b4:57:04:
46:d3:7f:17:a2:b8:a8:82:fc:fe:26:83:f0:bb:5a:
89:a0:4b:68:c3:70:da:ca:ff:db:e4:9d:11:bc:7c:
54:7c:76:09:2c:fd:30:fa:1e:ee:93:1d:5c:27:94:
2f:99:96:a9:50:fc:dc:2c:68:07:15:e0:d1:e9:3e:
f0:0f:0d:69:39:52:ac:34:e2:33:23:4e:d8:00:de:
c6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:EF:4E:07:59:B8:9D:C5:8B:4C:33:FA:1D:A5:66:16:57:E6:C4
X509v3 Authority Key Identifier:
keyid:16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:0b:a0:3b:d8:dd:b3:c4:3d:05:c2:8e:46:97:2d:dc:c1:
bb:ee:f6:51:b5:84:93:f9:9b:c2:9f:c5:97:f6:c3:b9:c7:25:
c8:7a:5c:b2:3c:ee:4f:4a:33:92:14:33:6c:18:45:92:28:5c:
3a:cd:25:a9:4b:e7:95:2b:95:75:48:de:ad:36:e3:49:47:02:
e5:ca:d3:4e:01:9c:12:32:80:83:17:a8:66:c4:c1:e2:53:1b:
52:37:d9:45:d6:5e:01:34:3f:be:33:84:a5:65:6d:fa:98:40:
72:ec:44:ab:d8:86:d2:6c:02:1c:cc:c4:92:71:e2:08:18:1a:
16:ba:f3:37:84:c8:d2:05:f1:45:98:09:a2:e4:28:1d:76:0d:
4c:ae:6b:c7:f1:c3:47:f8:79:f0:d4:79:aa:c3:a3:96:02:97:
d2:da:dd:4c:43:d7:c1:c6:b9:bd:94:c1:17:15:d7:13:ee:d2:
47:79:4e:2a:8a:e6:ad:0a:c8:19:9c:d7:4e:40:83:c2:48:a3:
5a:ee:98:49:5a:e5:62:e4:30:b5:4e:01:8f:47:4f:e5:85:83:
f2:e6:fe:61:82:4c:03:1a:4e:32:4d:bf:ed:1d:77:63:de:2e:
28:50:1d:50:13:17:33:c6:cc:12:55:b2:c0:52:ef:fa:20:da:
87:c4:f3:09
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MjlENzExMC8GA1UEBRMoMTZBQzkzRDhEMTA2NjIxMUYwODQxMTZBRDQyQTQzNDRF
RDUxQzQwMjAeFw0yNjA0MTcwNzQzNDJaFw0yNjA0MjQwNzQzNDJaMBgxFjAUBgNV
BAMTDTY5ZTFlNGFmLWYwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvGzWGwnlUYJbY4Ctair7s6ou2mn9FnWD9rgKPvMRz9FMua1ELREKELkYbC8H5
72+nBahPdavys05hTfmVIkxYauVC8hWY6cniqjsnfzOiOFXSUmfZL9R1bTsKXn0D
8zOgcD2gZ9T725TPjr9Bipxgi6Nn4CNiKBskcIzXhdcq/owvHX6XLrYq1QRmQI2c
f5DVUgZWKHlnmexgM9kItg98KeKYQrqGfREfFWqSopSbMrRXBEbTfxeiuKiC/P4m
g/C7WomgS2jDcNrK/9vknRG8fFR8dgks/TD6Hu6THVwnlC+ZlqlQ/NwsaAcV4NHp
PvAPDWk5Uqw04jMjTtgA3sYtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUvrvTgdZ
uJ3Fi0wz+h2lZhZX5sQwHwYDVR0jBBgwFoAUFqyT2NEGYhHwhBFq1CpDRO1RxAIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyOUQ3L0ZCNTYwQjRFQUQ3
MzExRjBBRjY1MDI1NEM0RjlBRTAyL0ZxeVQyTkVHWWhId2hCRnExQ3BEUk8xUnhB
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRnF5VDJORUdZaEh3aEJGcTFDcERSTzFSeEFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
OUQ3L0ZCNTYwQjRFQUQ3MzExRjBBRjY1MDI1NEM0RjlBRTAyL0ZxeVQyTkVHWWhI
d2hCRnExQ3BEUk8xUnhBSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB9oQugO9jds8Q9BcKORpct3MG77vZRtYST+ZvCn8WX9sO5xyXIelyyPO5PSjOS
FDNsGEWSKFw6zSWpS+eVK5V1SN6tNuNJRwLlytNOAZwSMoCDF6hmxMHiUxtSN9lF
1l4BND++M4SlZW36mEBy7ESr2IbSbAIczMSSceIIGBoWuvM3hMjSBfFFmAmi5Cgd
dg1MrmvH8cNH+Hnw1Hmqw6OWApfS2t1MQ9fBxrm9lMEXFdcT7tJHeU4qiuatCsgZ
nNdOQIPCSKNa7phJWuVi5DC1TgGPR0/lhYPy5v5hgkwDGk4yTb/tHXdj3i4oUB1Q
ExczxswSVbLAUu/6INqHxPMJ
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:02 2026 by rpki-client