
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier: 9AY91KK0FVwdkJwcFxRzPyKF/+vFYUvGliw6X2m7stg=
Subject key identifier: C8:52:46:BD:72:41:03:80:8B:1D:C3:4F:B5:DB:B8:42:4A:4E:84:1A
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 298C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number: 28F9
Signing time: Thu 16 Apr 2026 15:34:06 +0000
Manifest this update: Thu 16 Apr 2026 15:34:06 +0000
Manifest next update: Thu 23 Apr 2026 15:34:06 +0000
Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: S2l9c/dS99kbBXNmZgKqPA53HMD9xVJc9LkHKjlNX5o=)
2: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: 00gpwc2zOnyGovrxz5NLVNWOFFs8dFrjb8ZlbuA2tCY=)
3: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: z56uJ2U87y4BZLiIWCO/gwAwKZ33is7HYYG+KYeN+9U=)
4: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: CH+P1DrpmZpd0ULB0EGA0EwiZi1YaDYI+NO8M1bemyE=)
5: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: VLiSpEsf9qV7L6/Fw29gbB6h1KnjaO5VGM7Rak0+JP4=)
6: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: eTadtDYNDPp/pHk3FfF1hzmaueMz7ziMe0kecofm1oc=)
7: BC85BF12986611F099AC837DC4F9AE02.roa (hash: ou4cUOcNjqtElt4sr1NAu49lP8L4hmyuw27B/RIohB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10636 (0x298c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Apr 16 15:34:06 2026 GMT
Not After : Apr 23 15:34:06 2026 GMT
Subject: CN=69e1016e-acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:ce:be:67:ff:95:61:44:dd:07:d6:58:c5:
b0:62:02:06:d3:ee:8a:ea:95:0e:1e:cb:a0:6f:0f:
6f:5a:f6:42:17:b2:35:ea:6c:95:89:80:b5:42:1e:
fd:9c:b2:45:62:40:59:90:87:a1:d1:56:10:bf:c2:
06:66:0e:f2:c6:d6:b6:e7:9b:37:43:e4:c9:78:b1:
9d:14:14:8c:16:ff:08:5f:66:d9:62:3c:6d:fb:3a:
ce:3d:06:23:cf:0d:a6:41:29:36:bc:98:eb:ac:45:
24:1e:05:75:b8:f3:5a:04:48:75:a3:b9:e7:c3:de:
e7:1d:94:99:7d:ab:aa:7f:8f:7e:15:c1:9f:a9:65:
5c:45:cd:16:25:22:bf:0c:fa:e2:c1:ec:f9:e5:fe:
71:ec:31:92:36:80:02:49:69:90:30:24:81:f6:c5:
fd:33:bd:a2:e4:36:a9:85:36:1f:38:5c:2f:bf:c9:
f2:a5:2b:cf:fb:65:04:61:81:b6:f8:aa:68:1a:d4:
d4:ac:2c:18:05:0f:cb:60:d6:6c:8d:b9:86:a5:62:
be:2f:77:b6:60:99:9b:c9:c0:b5:82:4e:2d:62:27:
7b:b6:05:8f:cd:79:96:44:82:06:7b:df:e0:ae:99:
74:93:b9:fa:a8:e3:1b:0e:e9:39:e8:d7:32:5b:84:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:46:BD:72:41:03:80:8B:1D:C3:4F:B5:DB:B8:42:4A:4E:84:1A
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:c5:94:f9:72:c5:8d:18:47:fa:cb:74:ea:66:17:2b:aa:01:
6d:c9:bd:4e:f1:79:e2:02:06:d2:da:91:35:94:d5:c9:6c:fa:
e2:94:cf:11:f7:a6:1a:c3:7d:e1:37:eb:e4:54:b4:4b:c3:95:
ed:f0:20:0d:00:36:7b:04:36:02:e3:0f:36:f9:26:e2:d1:b4:
d2:05:c7:dd:90:0e:bf:0d:7f:69:7a:19:02:35:b2:69:8e:09:
53:2c:0c:25:43:99:8a:01:76:5a:00:7e:a1:4f:d8:7f:ea:c7:
22:d4:0e:55:10:4d:54:f2:bb:f6:d3:ed:89:e7:70:44:2c:79:
79:ab:1a:9a:33:93:e1:26:70:0b:13:e3:02:26:b4:2c:29:22:
f7:a6:86:97:33:f2:e9:7f:77:8d:05:23:65:12:b2:70:4f:68:
3a:c7:5f:ea:d9:77:95:30:48:98:4d:4d:00:dd:58:b5:37:5d:
02:ad:a7:06:ba:9e:73:ce:90:8b:45:55:a1:57:66:f0:79:06:
ea:4f:73:97:dd:48:ff:09:da:f2:9f:7c:d2:0d:ef:36:54:22:
dd:ff:15:3c:7e:6b:00:6a:46:b0:ca:5c:f6:ab:2d:fe:0c:58:
64:fd:8f:8f:3d:c6:da:b2:c3:36:4e:30:24:7d:64:05:93:f8:
85:23:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:30 2026 by rpki-client