
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier: xusw995zbWsxecByjL3GevjvsIAJOxZznla0de8Nx3g=
Subject key identifier: B4:E3:0B:F8:F9:86:52:0E:63:62:01:41:EA:23:02:F5:1E:9E:AB:C9
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2974
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number: 28E1
Signing time: Mon 02 Mar 2026 02:56:33 +0000
Manifest this update: Mon 02 Mar 2026 02:56:32 +0000
Manifest next update: Mon 09 Mar 2026 02:56:32 +0000
Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: 7uiAzxzX1s+yNKKTCq/TV+cdExSNLJa358o9Y6yhrAM=)
2: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: VLiSpEsf9qV7L6/Fw29gbB6h1KnjaO5VGM7Rak0+JP4=)
3: BC85BF12986611F099AC837DC4F9AE02.roa (hash: ou4cUOcNjqtElt4sr1NAu49lP8L4hmyuw27B/RIohB0=)
4: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: eTadtDYNDPp/pHk3FfF1hzmaueMz7ziMe0kecofm1oc=)
5: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: 00gpwc2zOnyGovrxz5NLVNWOFFs8dFrjb8ZlbuA2tCY=)
6: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: CH+P1DrpmZpd0ULB0EGA0EwiZi1YaDYI+NO8M1bemyE=)
7: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: z56uJ2U87y4BZLiIWCO/gwAwKZ33is7HYYG+KYeN+9U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10612 (0x2974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Mar 2 02:56:32 2026 GMT
Not After : Mar 9 02:56:32 2026 GMT
Subject: CN=69a4fc61-0d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:2a:c8:82:9c:e4:41:b3:cd:f8:18:53:29:
1c:50:f9:a2:0a:e0:40:3f:e9:dc:1e:73:e8:b1:f5:
08:3c:1b:ca:60:cf:5d:21:e6:05:3a:22:d6:13:c7:
4d:e0:f2:5e:02:c6:e4:61:a3:6e:be:1e:c5:7d:80:
1e:b9:17:d8:f9:67:7c:5b:45:7d:71:c6:a3:38:db:
b0:06:08:8a:d8:12:8b:4e:31:73:a0:5d:a2:6f:4f:
04:3d:dd:22:06:7c:a2:61:28:6f:4a:fb:a3:96:0d:
c3:f9:c1:7d:45:ed:ad:54:f9:09:4a:d9:fc:40:1f:
f8:cf:0f:a2:b4:96:60:34:0c:c4:c1:9f:30:0a:43:
5b:ad:c3:5a:c6:af:1e:0e:33:df:b7:50:4b:3a:04:
27:d3:05:6e:44:46:0a:0b:cf:8b:99:d0:9d:36:f6:
c7:f6:b8:b3:e9:02:ee:d5:36:76:fb:5d:dd:c6:d0:
88:d3:29:9d:a0:51:e5:84:30:4b:fa:f4:23:bd:86:
fe:2c:7d:52:02:94:93:70:6d:66:5e:1b:81:2d:64:
77:e4:bc:ae:c1:1c:78:9f:ac:18:23:19:c2:2e:18:
cd:91:fa:32:e7:b1:99:7e:83:71:0e:85:31:84:e3:
89:36:b6:be:72:ed:63:27:0b:91:f2:04:31:b2:64:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:0B:F8:F9:86:52:0E:63:62:01:41:EA:23:02:F5:1E:9E:AB:C9
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:bf:b4:c7:ee:b8:c7:bf:70:87:cf:3d:d8:a0:91:e1:2d:e9:
36:b4:fe:ff:3e:aa:e2:85:f9:47:27:00:b7:a3:51:6f:a4:c5:
fb:26:d1:4e:c8:08:07:1c:41:e3:2b:22:10:ed:e0:39:9f:e8:
3a:22:8b:42:92:ea:ff:2e:1f:02:15:37:1a:0b:f2:21:a0:25:
3f:ac:b7:51:57:e4:70:74:d2:2f:ca:0c:cc:de:6a:2a:1e:c7:
cf:b0:ea:fa:09:16:0c:4e:b4:ca:8e:a4:84:29:65:eb:51:c2:
09:7e:7e:16:5d:93:5b:8d:5a:fb:3f:4a:44:89:b7:9e:c3:07:
d0:47:f1:da:32:a5:9f:d4:a0:ea:f4:83:35:2d:bc:4d:ee:63:
8d:db:cf:0d:02:83:7d:0e:05:18:6f:4a:6b:13:c0:7d:89:f9:
80:ca:25:35:2d:11:ee:53:9d:9b:66:79:52:ec:a9:7e:1e:01:
cb:40:ba:4b:78:72:9b:5f:db:6f:a9:fc:f3:e0:67:95:e6:de:
d3:bf:85:99:df:ae:f7:fb:17:0e:ad:73:13:f1:8a:a9:84:5c:
ed:b0:ee:de:05:4b:00:ee:e4:0a:3b:a5:a7:6a:11:d1:9e:85:
13:f3:25:6a:93:e9:6c:a6:52:4b:55:f9:75:a2:63:36:84:19:
38:98:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:15 2026 by rpki-client