
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
File: FqgerO8cn8MyDElats0MZ2Oqg2M.mft (raw, json)
Hash identifier: zvqG8J1Mj8hXQq9hadEsq4HwNpKVt3r/FTKsdzmZiwY=
Subject key identifier: F0:73:9C:68:65:3D:5D:2B:23:52:F1:04:56:0E:48:89:D7:63:BF:F4
Authority key identifier: 16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
Certificate issuer: /CN=A91DFC92/serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
Manifest number: 024E
Signing time: Tue 13 Oct 2026 02:51:40 +0000
Manifest this update: Tue 13 Oct 2026 02:51:39 +0000
Manifest next update: Tue 20 Oct 2026 02:51:39 +0000
Files and hashes: 1: FqgerO8cn8MyDElats0MZ2Oqg2M.crl (hash: te6bRJAE0/QTRG34w3YcK+FM9d1kICr/i151J8jGK+I=)
2: 0AE7E0B6421711EE97070469C4F9AE02.roa (hash: ejoWMDUgt82/44WWAbicbO1p8c1RwlyGtdpOrVgBghs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 02:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DFC92, serialNumber=16A81EACEF1C9FC3320C495AB6CD0C6763AA8363
Validity
Not Before: Oct 13 02:51:39 2026 GMT
Not After : Oct 20 02:51:39 2026 GMT
Subject: CN=6acd9cbc-40d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c0:60:94:2e:ae:56:4d:82:12:70:ab:31:75:
39:aa:be:c9:2b:8e:75:be:f7:d0:73:b5:61:27:95:
5b:f4:ef:6b:d7:44:a5:a3:63:d3:08:c9:d5:2a:1e:
aa:01:3b:12:9a:ea:ca:e5:b5:06:0f:6a:41:0e:b6:
75:ce:6a:55:dd:cc:ee:ca:77:06:5d:e0:fc:0c:16:
fd:0f:7b:db:b6:a7:6c:c4:10:ad:61:16:de:d6:8b:
2e:ef:1d:77:40:ab:71:fa:08:8e:9e:44:24:bc:43:
6e:42:f9:5d:84:fa:b9:80:7b:b6:ba:9b:05:7e:f5:
e2:34:b7:8d:fe:41:40:59:17:0a:9d:5d:3e:d2:dd:
25:46:2f:6b:55:0a:98:fd:d4:cb:b6:ff:c3:18:8f:
e6:e0:7d:f9:e7:ad:8f:4d:e1:49:b4:a2:42:d0:bb:
43:49:b9:5f:7b:ce:d8:f7:de:1d:03:57:8e:c3:ad:
4d:c0:d4:d9:4f:6d:31:1b:51:95:ea:07:9b:ad:30:
9a:41:9d:60:8c:ed:26:e9:23:71:d6:31:6d:34:18:
dd:a8:30:ea:78:95:e7:00:00:21:6b:9a:e3:a8:32:
50:06:e5:8f:cc:c7:74:93:bf:78:83:b1:b0:0b:b7:
ac:54:d7:59:72:b6:96:7d:8c:38:fb:e2:ab:60:88:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:73:9C:68:65:3D:5D:2B:23:52:F1:04:56:0E:48:89:D7:63:BF:F4
X509v3 Authority Key Identifier:
keyid:16:A8:1E:AC:EF:1C:9F:C3:32:0C:49:5A:B6:CD:0C:67:63:AA:83:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqgerO8cn8MyDElats0MZ2Oqg2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFC92/CB4ABE6A421611EE9A3EB768C4F9AE02/FqgerO8cn8MyDElats0MZ2Oqg2M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:43:bc:47:7b:e1:d7:15:6c:de:b2:67:f9:51:17:d4:a6:08:
0d:35:f1:07:0f:af:1e:60:7c:d9:94:5f:d9:63:41:d6:9c:39:
1a:c7:6c:79:cd:fe:62:a8:d1:24:25:31:11:2b:ff:e7:51:da:
17:03:f6:f1:d7:45:d4:38:03:36:ab:33:fa:12:ab:36:b8:0c:
67:80:87:f2:95:f7:e0:5c:4c:70:8f:98:76:28:bb:3e:98:8e:
13:f6:5d:f4:35:bb:90:ec:41:4d:23:a7:ee:88:fd:3b:97:d4:
2b:5f:59:4e:e1:b5:d0:0b:1b:54:63:6c:55:d8:b1:6c:1e:37:
63:68:7f:05:68:ef:09:ea:b8:8a:e4:3a:51:1e:42:0c:94:09:
03:c2:ea:54:ff:29:97:26:fe:33:d3:24:3d:b3:e2:51:48:21:
4e:f3:4a:b9:a7:62:12:2e:17:18:66:ae:5f:e8:00:92:d6:71:
13:70:46:4e:1d:8b:76:b9:6a:e6:18:ca:50:3b:41:bb:e9:97:
76:ef:72:39:43:b6:bd:05:0a:51:bc:cc:9d:dc:29:45:15:3a:
05:7d:8e:0b:30:d1:15:e6:68:17:78:62:b8:c4:d2:3d:53:71:
fe:c1:f9:2b:c7:82:d5:6a:74:6e:5b:77:49:8c:01:c2:3d:20:
eb:0a:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:07:53 2026 by rpki-client