
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier: UQkciimDwoZ9oP3QYzWEDW2MmSLC9Tevr2L/N+yO/Pw=
Subject key identifier: 83:C6:36:ED:E5:15:32:A5:9E:6A:DB:2F:D8:D7:21:E1:30:B9:DA:A6
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial: 0911
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number: 08F7
Signing time: Sat 28 Feb 2026 20:43:02 +0000
Manifest this update: Sat 28 Feb 2026 20:43:02 +0000
Manifest next update: Sat 07 Mar 2026 20:43:02 +0000
Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: yYbTftP2om7XvEL9eovXzgcBeQlOZ/Qw9E+cf+E+Iuw=)
2: 2086256888B911ECAC54E716C4F9AE02.roa (hash: yiCrf2CBs1DTx9LePbZGWl/avup1Zfij9Oz3lNKWDkU=)
3: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: /p1nc+7VxWl9wJcQ4iUMoK6PHm48jxAJkzvga1eMyM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2321 (0x911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Validity
Not Before: Feb 28 20:43:02 2026 GMT
Not After : Mar 7 20:43:02 2026 GMT
Subject: CN=69a35356-4245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:fd:72:37:90:8a:c0:62:d4:01:81:b5:a2:
83:bc:1c:15:73:33:ec:70:38:29:1b:71:a1:47:f9:
61:93:ef:31:20:b5:89:2d:c9:ad:e3:93:01:1b:f2:
07:e0:bc:45:b3:9f:2e:39:fc:7b:c0:64:30:43:bc:
1f:87:31:eb:47:e8:2d:90:ac:8e:cd:7a:f3:33:1c:
c8:b1:f2:73:62:89:48:64:05:9d:18:0d:03:ef:fb:
8e:dc:3c:e2:6b:0e:d9:96:4a:57:de:03:f3:2a:5c:
72:f9:ec:36:bb:4b:6e:ae:60:68:a4:b1:c1:92:55:
79:7e:bc:60:11:1f:12:ba:62:2e:b4:6a:b8:e0:45:
19:7c:0a:d3:0c:a6:31:d9:b1:8a:37:cb:a3:f3:cb:
68:a5:8d:51:ff:99:f2:20:b8:76:37:92:28:ed:c8:
ef:13:3e:a2:8d:fc:34:41:a5:ec:5f:b7:6a:7d:a1:
55:95:db:29:d4:0a:45:42:4e:fe:cb:4f:4e:b3:78:
d7:24:a1:7b:5a:9f:a3:6b:9e:a0:9f:ac:0d:c5:eb:
2c:37:59:b6:50:aa:ba:d1:e9:d4:01:81:82:f2:16:
32:7a:d3:0e:6d:de:77:04:85:8c:f4:74:f6:e2:da:
50:d1:90:12:e2:38:43:88:d9:a5:fc:87:1e:f5:18:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:36:ED:E5:15:32:A5:9E:6A:DB:2F:D8:D7:21:E1:30:B9:DA:A6
X509v3 Authority Key Identifier:
keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:8d:78:4a:9b:76:1b:57:03:47:ca:11:3a:aa:2a:69:c6:
1e:4b:de:d2:15:35:95:25:08:49:ea:01:00:68:5a:eb:ab:c3:
a6:85:5f:0a:50:fb:8a:ca:70:5a:77:02:47:c0:4f:7c:52:f1:
02:50:1f:c0:17:a1:30:34:c0:13:96:95:08:59:10:3c:28:b2:
01:00:b2:53:5a:8c:f6:81:0a:c7:8d:fc:31:48:d4:ff:14:4a:
73:91:d9:33:45:84:1b:43:09:2c:24:4f:aa:bb:08:ae:0d:04:
56:ee:1b:63:da:2a:32:27:45:1e:d7:19:62:55:30:9c:6e:38:
7b:46:2f:24:f7:4b:66:cf:17:68:40:73:ae:cb:5f:a5:ab:d5:
1f:5c:85:cc:96:35:82:a5:a7:12:7b:8b:f6:ed:0a:70:94:95:
b7:8b:9b:90:3a:79:2d:bc:c0:23:24:b3:5c:33:48:75:5a:86:
a3:2a:40:c8:08:a5:4d:25:18:bf:b6:47:ac:fc:13:5d:43:a3:
de:2f:41:cc:87:54:cc:94:82:fd:d0:c0:fe:5a:d4:b2:55:2b:
54:83:95:a4:00:b6:13:b4:5d:05:92:1a:85:b3:7d:05:2c:4d:
b7:87:f3:56:75:d4:41:ff:0c:97:d4:ac:59:ba:5d:68:6c:d5:
0f:0b:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:28 2026 by rpki-client