
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
File: fj-k96AH9C3aD19Wk9dhlM42LKw.mft (raw, json)
Hash identifier: BA80SmOz0NptT97W5PFWEcJ2fZgzk5IVsHk58t2Cesg=
Subject key identifier: CC:5E:3E:73:D5:70:E3:7F:49:3A:27:71:D5:D5:CD:0E:B7:05:E0:AB
Authority key identifier: 7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
Certificate issuer: /CN=A912FAFC/serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
Manifest number: 14
Signing time: Mon 21 Sep 2026 09:02:54 +0000
Manifest this update: Mon 21 Sep 2026 09:02:53 +0000
Manifest next update: Mon 28 Sep 2026 09:02:53 +0000
Files and hashes: 1: fj-k96AH9C3aD19Wk9dhlM42LKw.crl (hash: I13s6o/6ToUeZXUntttmCQP01lZnvkQ8lokn4lSvpVQ=)
2: 893C25069B8511F1B9BDE8E74411F970.roa (hash: T24n8k0C/rq0E15su+/Emj5TIum7A0PIScjUvJ6s2tE=)
3: 0E555FB49B8611F1BB445B204511F970.roa (hash: UQIF9rkndUbPojsEq71UOErz4MjHMjgUck8cfLiZidA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl
rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAFC, serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Validity
Not Before: Sep 21 09:02:53 2026 GMT
Not After : Sep 28 09:02:53 2026 GMT
Subject: CN=6ab0f2be-95a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:b3:87:ce:ca:ff:61:d8:a1:b4:1a:50:13:
0f:5b:0d:57:15:e7:fa:f3:4d:5d:cb:99:a6:32:e2:
cc:8e:b6:0b:d2:5b:23:3a:4f:07:81:e1:6f:60:aa:
e8:78:b7:1c:ba:5b:10:f9:23:0b:f0:3a:08:eb:32:
d6:b7:b7:8f:8c:86:cc:32:17:55:57:19:f0:65:17:
cc:77:0e:eb:bf:a9:d6:08:d9:3f:d7:ff:c4:f0:3c:
dd:dd:96:ce:a2:ba:4c:8a:8b:aa:57:9d:c4:be:4d:
21:04:42:50:85:76:75:4a:af:95:d6:ae:32:b2:00:
ab:bb:59:90:3d:47:85:8b:09:f6:e8:36:28:c9:ce:
96:4d:00:fc:1c:93:ff:32:bf:e1:74:17:19:07:d3:
42:77:50:06:35:fd:aa:d8:db:c7:de:d2:96:41:82:
6b:4c:05:10:16:ed:83:41:18:c1:b9:8f:d5:42:48:
f1:13:0f:9d:1a:ee:1d:c9:74:78:37:41:e2:8a:68:
c9:a3:73:03:1e:50:79:5b:92:95:14:c7:a2:09:4a:
d9:04:d4:bd:59:f7:c0:c5:9b:d3:42:f8:77:84:b1:
a0:fd:54:c0:7f:f1:73:51:7d:78:a2:fc:87:e6:9d:
52:d2:1f:14:18:49:0d:7c:9f:ca:81:fa:94:d3:77:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:3E:73:D5:70:E3:7F:49:3A:27:71:D5:D5:CD:0E:B7:05:E0:AB
X509v3 Authority Key Identifier:
keyid:7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:f8:e0:cc:f6:37:e3:bc:81:0b:85:55:e4:20:1f:8a:dc:
3d:ab:6d:cd:e1:6e:c4:74:18:76:d9:c9:36:53:1b:9a:19:95:
ae:98:32:d8:4e:0c:0c:1e:8f:de:b5:94:60:36:4f:7a:c2:7c:
a2:62:89:5e:1f:ec:62:c0:d3:d0:bb:cc:76:a2:a9:33:a7:b4:
46:7e:8a:a0:00:4f:51:c4:a6:65:eb:54:7d:64:81:a7:fc:d3:
bf:b5:78:7e:6b:b7:ea:f2:de:09:be:a6:13:e7:69:57:1c:ba:
5e:d3:72:6c:45:d5:78:63:73:0d:43:f1:2c:d0:c2:b9:c1:72:
23:37:fe:85:93:64:d5:bd:56:e2:5e:47:9e:6e:af:80:f7:b6:
70:65:38:c1:b8:d6:e3:00:5a:8c:64:68:bd:13:e2:d2:a2:8a:
78:06:70:af:98:10:71:67:e7:76:77:75:dd:3d:4e:55:38:68:
a9:26:69:4f:69:2f:04:24:56:94:78:c5:a0:fa:8b:bc:48:fc:
d5:e0:63:3a:ae:9a:61:82:28:c4:b1:c9:c5:b4:ca:d5:e8:d7:
2e:bc:d6:29:37:03:bc:ee:d6:6d:e8:d7:0d:30:77:f8:e6:e7:
26:06:e6:7c:b0:1f:16:ca:73:32:57:4d:05:bf:24:41:76:f4:
73:41:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:45:13 2026 by rpki-client