
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier: 2xePhClZEpNhmU7sexC8bDyLqB/5Bm7O0uZJIoKWwbw=
Subject key identifier: EE:F1:EF:05:E2:E8:C6:5C:D3:E1:2F:0F:82:A7:24:8F:11:53:88:33
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial: 0983
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number: 0964
Signing time: Tue 22 Sep 2026 19:58:34 +0000
Manifest this update: Tue 22 Sep 2026 19:58:33 +0000
Manifest next update: Tue 29 Sep 2026 19:58:33 +0000
Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: uMxXaZd7zk8QXjwUVNwHgWchati66ERxwriB5aCi0h4=)
2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: Sq9EIeOgYCx84pdJfu94sh0DvGiS1iot7O0NRrEDMaM=)
3: F688C1749A0311F1B9C2572E4E11F970.roa (hash: uDwcKFCtBop5x5ag99shj4WahPLVPggKhirCH0wXKZ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435 (0x983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Validity
Not Before: Sep 22 19:58:33 2026 GMT
Not After : Sep 29 19:58:33 2026 GMT
Subject: CN=6ab2ddea-02e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:33:10:77:c0:8d:f8:0d:ac:89:93:eb:b6:
60:86:74:c3:4c:ca:f0:ae:5c:55:fa:f1:63:2c:dc:
28:a0:bd:a8:30:af:b9:08:09:b1:8b:32:f1:7e:5e:
26:25:4f:ce:ba:d4:3f:1e:f4:0f:48:fb:bf:d9:2b:
f7:82:ce:69:72:c8:5b:5a:38:e7:23:84:27:4e:50:
38:48:f3:9b:6a:4b:5a:12:0b:7f:49:52:36:a7:d9:
b6:54:90:47:2c:79:68:a2:48:db:75:fb:fe:1d:44:
55:44:8d:a4:88:75:86:fb:e7:34:bd:f4:79:3e:78:
dd:55:7f:a9:b2:12:27:5a:ee:04:44:b4:9c:80:f0:
c2:55:f0:22:6f:31:f8:12:0c:00:88:92:35:c9:f0:
33:25:27:33:e6:7a:a9:18:cb:26:57:ef:ca:45:1b:
d2:4b:54:2f:77:90:17:d4:28:b5:f4:80:e5:e7:8f:
f9:37:e7:e8:ce:cf:44:15:e6:50:54:98:5f:9a:68:
8a:79:32:25:57:39:19:75:8b:21:06:5d:88:94:e4:
81:49:28:22:b9:e4:7e:16:dd:f5:85:85:5f:d5:a1:
3e:73:16:30:98:06:33:7c:29:f8:ff:0a:4d:ab:21:
da:b6:04:be:43:ba:28:b7:84:96:02:ae:f4:2c:b0:
d7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F1:EF:05:E2:E8:C6:5C:D3:E1:2F:0F:82:A7:24:8F:11:53:88:33
X509v3 Authority Key Identifier:
keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a1:59:29:40:6f:5d:7a:67:67:db:d9:09:1b:6b:05:c4:e8:
ed:3f:9f:90:5e:c6:51:c3:21:3a:2e:99:2e:36:f0:4d:7c:2a:
c0:c0:33:4b:cf:16:3f:40:12:6f:06:45:a7:15:c2:ca:ef:6b:
22:0c:da:8b:03:aa:63:c7:1d:7c:d8:f0:87:98:be:5c:de:9f:
d7:d1:38:fb:f0:99:5d:fe:f2:5e:24:35:da:f9:ad:eb:3e:33:
84:ef:87:8f:10:d3:43:1f:21:b9:71:ce:46:93:15:7d:40:c4:
c0:ef:06:77:6b:2d:70:c5:d6:4c:c9:07:ed:d5:c0:3b:4a:99:
10:ff:76:7e:41:38:63:fc:7e:8d:90:99:3d:77:79:58:d4:b3:
e8:8e:23:7e:57:e0:1c:6f:11:8d:6f:05:f1:03:05:2a:b9:28:
34:55:31:8f:33:46:29:eb:4f:97:20:17:53:d1:61:a6:fb:e8:
c7:19:d3:67:2c:5a:e3:f3:82:50:88:71:54:16:db:58:76:66:
4c:0b:5c:c0:c1:9d:b5:fd:fb:07:23:71:5b:e8:2b:bc:db:b6:
4c:d8:c9:99:9f:6b:8c:66:0f:b1:69:91:ce:2d:7e:de:c0:5f:
af:ae:4d:62:20:8a:f0:5b:70:62:63:88:73:62:36:27:35:ae:
7d:5d:68:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKEZFQTE0RjIzRkRCOTc3QUM2NDg5RDIxMDZFMzVFMDIz
QjI4OTY4REMwHhcNMjYwOTIyMTk1ODMzWhcNMjYwOTI5MTk1ODMzWjAYMRYwFAYD
VQQDEw02YWIyZGRlYS0wMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1KgzEHfAjfgNrImT67ZghnTDTMrwrlxV+vFjLNwooL2oMK+5CAmxizLxfl4m
JU/OutQ/HvQPSPu/2Sv3gs5pcshbWjjnI4QnTlA4SPObaktaEgt/SVI2p9m2VJBH
LHlookjbdfv+HURVRI2kiHWG++c0vfR5PnjdVX+pshInWu4ERLScgPDCVfAibzH4
EgwAiJI1yfAzJScz5nqpGMsmV+/KRRvSS1Qvd5AX1Ci19IDl54/5N+fozs9EFeZQ
VJhfmmiKeTIlVzkZdYshBl2IlOSBSSgiueR+Ft31hYVf1aE+cxYwmAYzfCn4/wpN
qyHatgS+Q7oot4SWAq70LLDXbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7x7wXi
6MZc0+EvD4KnJI8RU4gzMB8GA1UdIwQYMBaAFP6hTyP9uXesZInSEG414COyiWjc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9GMDc3NTk4RUND
M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2eGtpZElRYmpYZ0k3S0ph
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19xRlBJXzI1ZDZ4a2lkSVFialhnSTdLSmFOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RENCNi9GMDc3NTk4RUNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9fcUZQSV8yNWQ2
eGtpZElRYmpYZ0k3S0phTncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnqFZKUBvXXpnZ9vZCRtrBcTo7T+fkF7GUcMhOi6ZLjbwTXwqwMAzS88WP0AS
bwZFpxXCyu9rIgzaiwOqY8cdfNjwh5i+XN6f19E4+/CZXf7yXiQ12vmt6z4zhO+H
jxDTQx8huXHORpMVfUDEwO8Gd2stcMXWTMkH7dXAO0qZEP92fkE4Y/x+jZCZPXd5
WNSz6I4jflfgHG8RjW8F8QMFKrkoNFUxjzNGKetPlyAXU9FhpvvoxxnTZyxa4/OC
UIhxVBbbWHZmTAtcwMGdtf37ByNxW+grvNu2TNjJmZ9rjGYPsWmRzi1+3sBfr65N
YiCK8FtwYmOIc2I2JzWufV1odQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:33:49 2026 by rpki-client