
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: yV5EWituOKyJRvThccasyc5R542VVDfcYKzdDKm2JzA=
Subject key identifier: 81:AD:08:E7:5C:56:E1:9F:19:F2:AF:F5:3D:3E:E6:9E:05:0A:E6:46
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 04BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 04A9
Signing time: Sun 20 Sep 2026 23:46:01 +0000
Manifest this update: Sun 20 Sep 2026 23:46:01 +0000
Manifest next update: Sun 27 Sep 2026 23:46:01 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: r3MbPJtn9Q0nfmru5KHIdAwMdODdQlS8bX8bXAezPEY=)
2: 8C55E7B4917011F180226FDB3111F970.roa (hash: r2QDsjyZZFMUXUm8urd66tssntM1fY3EKVaH9uYAtzs=)
3: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
5: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
6: 32F4B5BA3F0411F1BF0D1E0CC9833773.roa (hash: 7D5axyTJpCXlvT4hwQ1+3Thr7ZRX7mL6gQ5Gjrbulvc=)
7: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
8: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Sep 20 23:46:01 2026 GMT
Not After : Sep 27 23:46:01 2026 GMT
Subject: CN=6ab07039-29f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:a8:84:f1:90:83:fb:96:c2:58:5a:89:d3:
6f:c6:3b:c5:16:0c:a6:d9:03:89:67:9d:bf:31:ba:
c8:3d:b5:64:fd:60:77:b8:92:30:ef:1b:78:51:70:
98:c4:56:33:68:83:d3:96:a5:99:8b:8e:98:f5:a7:
1f:bd:9e:63:20:9d:04:36:47:cc:7a:87:7a:b9:bb:
5c:dd:b5:bb:24:a9:fa:96:6c:e5:9a:da:ef:b0:5a:
5b:bf:c7:47:e0:cb:7d:05:5d:34:d8:75:ce:fc:a7:
95:21:22:da:74:4c:03:4a:a1:b6:db:08:21:22:c9:
c7:30:be:98:d3:c6:2a:99:06:d9:69:ab:29:81:7e:
ef:c6:eb:b2:1a:e2:b5:b4:45:7a:94:53:b1:e3:2a:
c2:fa:79:36:f0:3b:c9:ee:2b:ab:f2:c0:75:a8:05:
7b:ef:29:ab:74:9d:8c:c1:4c:b3:6c:e2:78:e2:f4:
87:c4:0e:fb:08:15:9b:61:6c:5a:04:39:ea:82:9b:
db:c3:35:70:0c:84:af:e1:dc:f8:18:af:a9:c5:39:
7f:57:c4:7f:e4:69:d5:b9:48:bb:fd:a5:7b:a8:c2:
17:5d:eb:fc:8b:93:d7:c0:f0:90:44:e7:91:98:62:
05:eb:2a:ca:69:57:05:44:d8:39:23:a0:ae:cb:ec:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AD:08:E7:5C:56:E1:9F:19:F2:AF:F5:3D:3E:E6:9E:05:0A:E6:46
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d9:88:3b:14:4b:3e:d0:ce:83:07:96:e7:06:26:36:b7:74:
f8:14:f4:bc:9c:d6:3b:00:df:b9:fc:4f:05:4f:bf:2e:d8:91:
02:75:45:28:3b:38:79:7e:9d:92:5d:fb:76:87:6e:fa:9a:04:
20:39:b7:2f:03:d4:30:af:5b:bb:a8:07:55:d5:b5:8a:0c:96:
b0:e7:81:88:f6:80:db:6a:b8:88:b2:ad:94:95:0b:aa:8e:50:
46:ac:8d:bf:d3:49:d9:8a:c7:55:64:75:cb:ce:09:e8:7c:df:
7d:5a:82:0f:c7:f1:a2:54:3d:d6:b7:aa:30:9d:fa:93:db:26:
fe:57:d9:cd:09:d6:1d:38:8d:b1:b1:01:f5:7a:93:cd:2e:55:
6b:e5:e2:03:34:f3:a6:ac:55:3a:2c:1e:6b:13:db:a7:4c:69:
6f:7a:8b:84:84:63:ee:76:e1:90:ab:54:6d:2b:c3:b0:56:cc:
f9:5e:f0:58:8e:fb:c9:1e:d1:b9:23:19:92:40:ca:af:01:bb:
16:4c:da:28:b8:47:e9:06:e7:c8:f1:a8:ee:27:ae:09:33:68:
4c:63:bc:c7:e0:91:ce:49:42:6c:57:c8:ef:30:50:08:87:7c:
da:34:15:16:35:c0:20:b8:2d:67:0b:66:9a:59:44:c4:a7:a8:
ba:58:00:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:52 2026 by rpki-client