
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
File: FMMrInaBES_Vu7WzaYO1aHEWc8A.mft (raw, json)
Hash identifier: D/EDDvDPFm0IsSEsF2MZsWgRoQ0+jSEVdySRi5KjttA=
Subject key identifier: 7E:1A:AC:9B:6E:C3:2C:C1:98:2C:A4:B3:AD:25:5A:B6:91:EB:2E:02
Authority key identifier: 14:C3:2B:22:76:81:11:2F:D5:BB:B5:B3:69:83:B5:68:71:16:73:C0
Certificate issuer: /CN=A911EED9/serialNumber=14C32B227681112FD5BBB5B36983B568711673C0
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMMrInaBES_Vu7WzaYO1aHEWc8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
Manifest number: 4A
Signing time: Mon 21 Sep 2026 08:20:31 +0000
Manifest this update: Mon 21 Sep 2026 08:20:30 +0000
Manifest next update: Mon 28 Sep 2026 08:20:30 +0000
Files and hashes: 1: FMMrInaBES_Vu7WzaYO1aHEWc8A.crl (hash: 0CUl0i4lGgWNY+ZfRx7cJEUOTduxLC+WlDE3goANs8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.crl
rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMMrInaBES_Vu7WzaYO1aHEWc8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 08:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=14C32B227681112FD5BBB5B36983B568711673C0
Validity
Not Before: Sep 21 08:20:30 2026 GMT
Not After : Sep 28 08:20:30 2026 GMT
Subject: CN=6ab0e8ce-717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:83:41:ff:5f:b8:7e:76:be:ff:78:35:32:
3d:4d:76:b9:cc:bf:9c:9b:32:ee:4f:ad:a2:db:64:
d3:e8:36:2c:1d:3d:e0:db:14:d9:e9:46:5b:dd:da:
04:18:f4:3f:56:d3:e3:2d:ba:97:c4:b1:9c:c1:05:
32:14:ca:a2:07:6f:85:80:83:64:23:0a:cd:fe:90:
0a:ab:e6:7a:a3:72:90:ad:5e:b0:97:f8:1d:55:20:
24:9e:70:b1:4a:0c:78:3c:04:bd:90:fc:8d:93:e8:
71:b8:5e:ac:88:03:90:33:55:f9:0a:3e:d3:9b:ba:
18:98:d0:00:76:fb:00:da:ea:86:3c:a1:49:69:66:
16:6e:88:ee:99:6b:8a:cc:e2:8b:14:ce:29:f2:08:
7e:2c:09:e4:84:7f:0b:84:34:9e:64:fe:1a:e3:5a:
60:94:e2:dc:cb:90:c2:ac:65:bf:94:09:cd:94:e0:
62:d0:c0:af:48:e7:5b:6d:39:b5:bf:cb:8b:2d:54:
59:df:4d:ed:7d:ff:c5:74:85:e4:d5:51:1a:65:ee:
e9:ac:4f:8e:6d:35:1d:4e:e7:b1:84:1e:83:79:24:
a4:8c:27:3b:3a:2a:c1:01:63:31:36:6b:17:07:84:
b2:63:e8:1c:f3:9c:b7:58:ff:88:31:37:14:f3:27:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:AC:9B:6E:C3:2C:C1:98:2C:A4:B3:AD:25:5A:B6:91:EB:2E:02
X509v3 Authority Key Identifier:
keyid:14:C3:2B:22:76:81:11:2F:D5:BB:B5:B3:69:83:B5:68:71:16:73:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMMrInaBES_Vu7WzaYO1aHEWc8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/2EE37E3C43A711F1A59112E093833773/FMMrInaBES_Vu7WzaYO1aHEWc8A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:2e:d8:87:4b:3a:5a:39:eb:6a:23:44:5f:00:dd:37:5c:3d:
fd:58:ca:9b:7f:2c:83:f0:c9:ab:05:aa:d7:59:3a:a9:2e:8a:
4d:b0:d2:a5:8f:7f:3a:91:3a:71:3a:1f:e0:86:ce:71:9d:af:
78:5f:ea:57:e9:f6:49:ea:4f:39:1e:ca:48:98:07:2f:3e:a1:
0a:9d:43:dd:8a:f1:18:f3:05:dc:b6:b5:2f:92:cc:75:22:46:
78:9b:37:15:4e:d3:c6:94:cb:91:9c:c4:0d:a8:c2:6b:75:de:
a9:05:25:a9:4a:ff:03:7b:4e:ea:22:94:f2:3c:a6:a9:90:f0:
d0:81:f3:bd:e4:ea:79:dd:0e:46:f1:6f:aa:d3:ee:f4:d2:77:
4b:e3:87:26:ac:00:47:b4:94:59:7d:47:9e:f7:60:98:8c:64:
9b:ed:33:48:57:a7:97:93:bb:94:fe:67:b7:90:64:9a:e0:34:
f0:c4:1a:df:f4:cc:91:80:7f:f1:6b:b8:33:31:57:3b:73:fc:
b3:50:c8:b7:25:42:3f:95:09:3a:1c:cf:ea:ab:13:ca:4d:7f:
32:ed:c9:c0:dc:05:e3:35:15:6e:9f:74:a4:91:79:c9:51:fe:
b5:a4:c2:9b:0b:8d:f2:de:46:dd:84:3f:69:49:c7:15:13:07:
35:6c:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:57 2026 by rpki-client