
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json)
Hash identifier: rKReYKIKL83nU9dJU9Kt7ciR0StZtoZlYsbGK+YXUkQ=
Subject key identifier: 68:EE:91:12:A6:F2:83:CA:97:6F:67:5A:F5:CE:1D:FC:D6:4F:79:A5
Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
Manifest number: A5
Signing time: Mon 21 Sep 2026 07:14:51 +0000
Manifest this update: Mon 21 Sep 2026 07:14:51 +0000
Manifest next update: Mon 28 Sep 2026 07:14:51 +0000
Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: dme2lxyz+j4EpJW4qQ3ppw0yeVOqxAh5vEJ755tPocQ=)
2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Validity
Not Before: Sep 21 07:14:51 2026 GMT
Not After : Sep 28 07:14:51 2026 GMT
Subject: CN=6ab0d96b-2a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:ae:3c:45:39:b9:1a:24:3c:0a:34:53:36:
63:1a:d3:d0:6c:53:39:50:1e:36:05:09:d1:ce:df:
1f:13:d7:48:10:e0:5a:20:e7:44:0d:cd:f2:b7:d4:
f9:1a:b2:df:04:33:d4:a5:25:2a:87:0f:c9:aa:0c:
4c:a7:5e:5f:aa:7c:b1:50:49:23:a4:10:f5:73:e2:
12:91:5e:6a:a1:af:65:2b:b9:b0:61:8c:b5:39:84:
a5:0d:3c:a8:52:e9:7c:7b:f6:8a:14:c1:ce:ed:66:
3a:f0:bd:db:15:f5:f6:c3:38:7b:4a:19:fc:d5:4c:
c2:b4:e6:f2:09:3a:17:65:69:e2:4f:2c:f9:39:e5:
d2:21:c5:38:13:9b:9d:0b:d2:7a:50:6c:d3:74:de:
a2:a1:02:38:bf:4e:84:1a:3e:c5:d5:36:82:90:3e:
91:83:02:43:76:5e:89:d2:58:6e:df:6f:bf:55:f1:
42:16:86:12:37:1e:16:f9:d6:47:b6:c0:a4:b3:03:
e0:63:82:5a:c9:a2:94:96:e0:22:05:35:0b:73:3b:
33:a1:c5:af:d0:db:51:60:aa:ac:1a:40:a4:31:c8:
c7:3c:f9:6e:17:5d:cc:cf:55:f0:47:55:44:4b:eb:
7f:45:47:db:e1:03:9f:c0:8e:6f:ea:0f:fe:f7:20:
94:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:91:12:A6:F2:83:CA:97:6F:67:5A:F5:CE:1D:FC:D6:4F:79:A5
X509v3 Authority Key Identifier:
keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:9e:31:c3:4b:97:ed:f9:43:08:da:70:9a:9b:ab:a5:cd:a6:
19:cb:6f:9f:04:90:c2:35:96:2d:5b:80:51:a0:74:f1:5c:fe:
6a:05:78:80:8d:b2:5d:38:c4:dd:63:19:55:6b:51:a1:dc:c7:
9a:b4:b4:c8:c6:5e:15:5e:8e:f6:29:dd:ad:4e:b8:92:8a:ac:
7b:05:55:c4:16:32:85:c2:12:c6:fd:5a:27:d9:9f:90:45:16:
41:14:1d:71:58:51:15:c5:5c:e3:09:0e:35:33:29:c2:0a:13:
de:81:55:d3:5f:af:58:7d:8f:71:02:1b:c7:3d:aa:f1:a3:ec:
24:a8:81:0d:b1:2b:ab:73:59:73:ae:26:6a:75:f4:b8:59:42:
16:17:1d:d4:e5:98:85:9c:f5:19:03:8e:07:b3:66:59:de:fa:
b8:29:eb:4c:04:25:2e:f0:d4:4d:29:3f:ac:69:b3:4d:5f:4b:
37:13:db:da:34:69:71:6d:e9:aa:bd:5e:9f:19:e2:f3:13:57:
2e:af:1c:a8:87:d7:6f:99:e8:eb:13:a8:29:e0:d1:e2:28:38:
c3:05:82:fd:0d:56:13:ba:87:0a:6b:40:c0:cd:1c:ca:a8:13:
42:33:ae:45:6b:06:00:2f:81:93:bd:e4:9d:c6:28:b0:4f:81:
aa:56:44:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:21:11 2026 by rpki-client