
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier: 8nH2AeeaU+++5tm/a1UatwyJyqeBy6PCEb/LeSGoPRw=
Subject key identifier: A5:CC:8D:4A:23:B2:41:79:E1:15:EA:7C:68:27:69:14:AB:02:F4:2D
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number: 01F4
Signing time: Fri 17 Apr 2026 02:59:09 +0000
Manifest this update: Fri 17 Apr 2026 02:59:09 +0000
Manifest next update: Fri 24 Apr 2026 02:59:09 +0000
Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: seAviFyNe10az1LfDymHekEps4Tj5kHlwL3UCbxXR9k=)
2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: ejoWMDUgt82/44WWAbicbO1p8c1RwlyGtdpOrVgBghs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Validity
Not Before: Apr 17 02:59:09 2026 GMT
Not After : Apr 24 02:59:09 2026 GMT
Subject: CN=69e1a1fd-d2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:7f:10:8d:2b:5f:bc:4d:37:a0:77:7c:6e:
8c:27:89:80:10:02:4c:c1:c2:87:86:79:b5:07:4a:
85:2f:76:c4:42:9c:17:eb:0e:d9:98:10:cc:c7:d7:
d4:7a:f6:3f:d9:b1:7f:80:85:ef:34:13:90:65:7c:
ce:b7:d5:49:d6:74:1f:98:eb:19:75:d2:35:75:e8:
53:cb:c0:d7:21:83:0f:42:23:22:0d:ce:a6:0c:a3:
ea:98:cb:12:22:85:61:3c:84:e1:f3:aa:db:b6:8d:
0a:a2:df:bc:c9:7b:8e:2a:76:52:99:08:ce:3f:58:
a7:3b:b2:13:30:0f:5c:6a:ea:b0:cf:10:93:38:2f:
95:09:0a:51:f4:50:84:85:04:76:bc:4d:1e:2b:6b:
81:8d:78:45:81:85:98:8c:ed:13:79:b1:92:52:41:
00:a1:77:09:c6:2a:db:1b:55:66:a1:ba:eb:84:37:
26:70:5d:b3:35:4d:75:06:31:4a:ab:2f:74:23:9d:
42:af:6f:ff:33:ab:e1:13:9d:57:1a:4f:79:73:cd:
23:0f:02:57:cb:a1:ab:a1:a3:a5:d4:ac:94:ea:5e:
97:39:ab:8c:2d:85:34:3b:da:08:ea:5e:e5:98:df:
85:e2:b2:86:40:cc:dd:be:5d:de:c8:e6:b9:34:b3:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CC:8D:4A:23:B2:41:79:E1:15:EA:7C:68:27:69:14:AB:02:F4:2D
X509v3 Authority Key Identifier:
keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:3c:7d:ee:ed:56:c0:79:39:d1:de:fd:e8:85:9d:1a:98:8c:
0d:da:c3:16:2e:e5:bd:eb:2b:e8:50:ab:25:e5:ca:81:a9:30:
e8:8d:ce:c7:eb:2d:a2:9c:d1:f6:e9:d4:5c:fd:ac:79:dc:cf:
14:0b:5c:09:4a:ff:81:86:8e:74:af:67:dd:7d:bf:ed:46:d0:
b8:29:11:1f:f0:6e:78:3d:8a:2c:3b:a7:cb:61:98:8a:7d:78:
7c:31:37:c7:cb:bb:a5:33:43:19:4b:3a:20:9e:01:a2:1a:7a:
23:08:5f:90:7a:c1:62:41:d2:bd:94:20:c7:63:42:14:7b:a8:
80:ff:fe:82:25:f5:99:e1:55:5c:d0:cd:31:64:e4:86:c4:ac:
01:8f:23:04:af:ab:ed:51:48:4b:59:bc:cf:87:94:43:2a:e5:
3d:83:69:ed:d0:30:70:75:28:08:d5:74:bb:b3:d3:70:8d:3e:
ba:06:df:2d:2b:6d:7a:05:51:c7:a0:4f:4a:cf:17:ff:a0:72:
fb:d9:fa:c5:47:07:d7:e0:af:6f:58:3b:fd:fe:e0:6e:16:2d:
9b:c9:d5:1d:b9:53:16:c2:54:3e:1d:c6:df:90:5f:99:c2:39:
cd:03:c1:50:8e:97:51:9b:86:b8:9e:93:d8:e2:8c:45:1f:b4:
ab:28:4c:1b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REZDOTIxMTAvBgNVBAUTKDE2QTgxRUFDRUYxQzlGQzMzMjBDNDk1QUI2Q0QwQzY3
NjNBQTgzNjMwHhcNMjYwNDE3MDI1OTA5WhcNMjYwNDI0MDI1OTA5WjAYMRYwFAYD
VQQDEw02OWUxYTFmZC1kMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCh/EI0rX7xNN6B3fG6MJ4mAEAJMwcKHhnm1B0qFL3bEQpwX6w7ZmBDMx9fU
evY/2bF/gIXvNBOQZXzOt9VJ1nQfmOsZddI1dehTy8DXIYMPQiMiDc6mDKPqmMsS
IoVhPITh86rbto0Kot+8yXuOKnZSmQjOP1inO7ITMA9cauqwzxCTOC+VCQpR9FCE
hQR2vE0eK2uBjXhFgYWYjO0TebGSUkEAoXcJxirbG1VmobrrhDcmcF2zNU11BjFK
qy90I51Cr2//M6vhE51XGk95c80jDwJXy6GroaOl1KyU6l6XOauMLYU0O9oI6l7l
mN+F4rKGQMzdvl3eyOa5NLO6KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXMjUoj
skF54RXqfGgnaRSrAvQtMB8GA1UdIwQYMBaAFBaoHqzvHJ/DMgxJWrbNDGdjqoNj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkM5Mi9DQjRBQkU2QTQy
MTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244TXlERWxhdHMwTVoyT3Fn
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZxZ2VyTzhjbjhNeURFbGF0czBNWjJPcWcyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RkM5Mi9DQjRBQkU2QTQyMTYxMUVFOUEzRUI3NjhDNEY5QUUwMi9GcWdlck84Y244
TXlERWxhdHMwTVoyT3FnMk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMjx97u1WwHk50d796IWdGpiMDdrDFi7lvesr6FCrJeXKgakw6I3Ox+stopzR
9unUXP2sedzPFAtcCUr/gYaOdK9n3X2/7UbQuCkRH/BueD2KLDuny2GYin14fDE3
x8u7pTNDGUs6IJ4Bohp6IwhfkHrBYkHSvZQgx2NCFHuogP/+giX1meFVXNDNMWTk
hsSsAY8jBK+r7VFIS1m8z4eUQyrlPYNp7dAwcHUoCNV0u7PTcI0+ugbfLSttegVR
x6BPSs8X/6By+9n6xUcH1+Cvb1g7/f7gbhYtm8nVHblTFsJUPh3G35BfmcI5zQPB
UI6XUZuGuJ6T2OKMRR+0qyhMGw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:15:35 2026 by rpki-client