
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json)
Hash identifier: NYjd7wwTuPFCXcn0iuRt9NJdJPsg+h6ZdUIXZUkM6Tw=
Subject key identifier: D6:E4:B8:13:7B:BB:3B:A7:39:8F:FB:6A:D0:EF:0F:57:1E:35:95:A3
Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
Manifest number: F7
Signing time: Mon 02 Mar 2026 11:37:56 +0000
Manifest this update: Mon 02 Mar 2026 11:37:55 +0000
Manifest next update: Mon 09 Mar 2026 11:37:55 +0000
Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: o2Zn2XBD/vVOAhrItZpi1SDutS+4cUWTTijcchp2K6c=)
2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: P5+kdRcpYE+yFLD64Qimw3RoARkVgaUfcrwZcF1uiC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Validity
Not Before: Mar 2 11:37:55 2026 GMT
Not After : Mar 9 11:37:55 2026 GMT
Subject: CN=69a57694-205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:4c:88:c5:a4:fe:af:bf:25:2b:22:ab:99:
79:8e:b4:0f:ac:1c:b4:31:c5:af:47:49:88:f9:97:
87:5c:75:8e:c1:cf:ce:27:eb:15:54:7d:d5:77:79:
45:8c:ce:a5:ca:19:28:34:0b:af:e4:8a:a9:64:77:
6e:4e:51:5c:89:3b:4c:45:c0:60:ae:ab:65:f1:c6:
37:17:3f:c7:5b:da:70:98:9a:9a:69:d9:c9:9c:92:
b3:08:19:2a:03:ab:b8:95:29:ff:25:96:11:1f:a7:
20:a0:2d:1a:42:a5:f0:94:b4:a2:7d:d6:0d:d8:c9:
b2:60:6a:e0:46:1c:6b:52:31:0b:df:9b:75:a9:de:
0d:77:8d:c7:3b:61:be:be:87:ee:9b:29:7d:8d:bc:
41:95:c7:92:a8:02:c3:e3:e8:d3:a7:fe:0f:30:08:
d7:58:0d:fd:be:37:04:c1:e3:ef:51:cd:70:a9:cb:
67:80:b2:f7:a9:82:10:6a:45:74:cf:0c:f0:db:cf:
62:f0:04:03:63:40:24:88:ba:92:17:8d:6b:7f:cc:
18:f6:8a:ac:c0:55:01:1f:10:e4:99:97:37:af:0f:
53:93:64:bf:e2:f8:fc:c4:4f:fb:c8:46:d9:f4:0e:
33:ab:1a:99:38:80:8a:d1:f4:48:7c:af:4c:7a:de:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:B8:13:7B:BB:3B:A7:39:8F:FB:6A:D0:EF:0F:57:1E:35:95:A3
X509v3 Authority Key Identifier:
keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ab:77:b1:b0:1e:02:8c:dd:4d:16:97:25:f3:5b:dc:a5:0d:
13:87:69:8b:03:db:2a:27:8c:fd:5b:7b:81:f0:af:ef:a5:60:
d3:4a:39:17:3a:3f:8b:0a:fe:56:8f:90:52:42:c7:5e:55:7e:
d8:79:8f:e1:9a:61:bd:fa:21:ce:dd:cb:7b:28:ed:f4:6c:63:
2e:8b:13:a4:a6:c0:75:a5:24:4e:94:d9:5d:3f:20:e3:da:22:
3d:9c:a3:01:1b:76:ef:a1:c4:70:84:cf:0e:8e:dd:65:2b:d4:
02:93:e0:bd:16:25:ce:0d:6e:74:89:7f:d7:0c:67:9b:19:a7:
82:21:6d:2a:ef:76:3e:d1:8a:7a:3c:32:59:76:d5:02:c2:31:
3a:a1:d6:c5:9f:bb:c0:3a:d8:69:b6:ec:45:cf:a9:97:0d:1f:
e7:99:99:39:5d:8e:4a:f5:58:a8:ad:0b:ff:8e:ea:da:f6:f9:
cb:16:8a:83:66:30:09:33:69:ff:b3:89:f5:c5:2a:21:c9:04:
50:de:e2:4d:26:00:fe:31:77:78:03:8a:01:0f:88:cc:39:a3:
e5:3c:4a:28:b5:e8:a1:8c:2b:f7:f0:2f:f9:3d:f3:a3:66:1c:
6d:bf:b6:28:fd:20:4e:1f:69:07:64:ab:d8:ad:62:2a:bc:50:
69:86:d4:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRFRkUxMTAvBgNVBAUTKEE4MjkyRjYyMDRDODIxM0Q3OTFGQTZDQ0FBRjU3ODUx
OTRFRjgxQTAwHhcNMjYwMzAyMTEzNzU1WhcNMjYwMzA5MTEzNzU1WjAYMRYwFAYD
VQQDEw02OWE1NzY5NC0yMDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp4pMiMWk/q+/JSsiq5l5jrQPrBy0McWvR0mI+ZeHXHWOwc/OJ+sVVH3Vd3lF
jM6lyhkoNAuv5IqpZHduTlFciTtMRcBgrqtl8cY3Fz/HW9pwmJqaadnJnJKzCBkq
A6u4lSn/JZYRH6cgoC0aQqXwlLSifdYN2MmyYGrgRhxrUjEL35t1qd4Nd43HO2G+
vofumyl9jbxBlceSqALD4+jTp/4PMAjXWA39vjcEwePvUc1wqctngLL3qYIQakV0
zwzw289i8AQDY0AkiLqSF41rf8wY9oqswFUBHxDkmZc3rw9Tk2S/4vj8xE/7yEbZ
9A4zqxqZOICK0fRIfK9Met4R9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbkuBN7
uzunOY/7atDvD1ceNZWjMB8GA1UdIwQYMBaAFKgpL2IEyCE9eR+mzKr1eFGU74Gg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xMTY0Q0FFMEE1
MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlUMTVINmJNcXZWNFVaVHZn
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REVGRS8xMTY0Q0FFMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9xQ2t2WWdUSUlU
MTVINmJNcXZWNFVaVHZnYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj6t3sbAeAozdTRaXJfNb3KUNE4dpiwPbKieM/Vt7gfCv76Vg00o5Fzo/iwr+
Vo+QUkLHXlV+2HmP4Zphvfohzt3Leyjt9GxjLosTpKbAdaUkTpTZXT8g49oiPZyj
ARt276HEcITPDo7dZSvUApPgvRYlzg1udIl/1wxnmxmngiFtKu92PtGKejwyWXbV
AsIxOqHWxZ+7wDrYabbsRc+plw0f55mZOV2OSvVYqK0L/47q2vb5yxaKg2YwCTNp
/7OJ9cUqIckEUN7iTSYA/jF3eAOKAQ+IzDmj5TxKKLXooYwr9/Av+T3zo2Ycbb+2
KP0gTh9pB2Sr2K1iKrxQaYbUog==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:19 2026 by rpki-client