
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json)
Hash identifier: +tRBuUAg9fTQ04tvjwSKIapCKBVokRmSK2mp3qMqhBg=
Subject key identifier: 96:2F:E7:BD:FD:19:C2:62:02:D7:64:F7:3F:C3:F3:FF:53:9F:97:CE
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 0960
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
Manifest number: 166B
Signing time: Tue 22 Sep 2026 18:08:26 +0000
Manifest this update: Tue 22 Sep 2026 18:08:25 +0000
Manifest next update: Tue 29 Sep 2026 18:08:25 +0000
Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: WlGLYS1IJbxxpmn11X067IMPv+wE0VAzazDDaOoqTco=)
2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: 59G5/JH3Jy7HOVQ7Fwa2htossMKLT5qvwu9fkF+mzSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 18:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: Sep 22 18:08:25 2026 GMT
Not After : Sep 29 18:08:25 2026 GMT
Subject: CN=6ab2c41a-6662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:ad:72:8e:c2:ae:40:8b:d8:1a:28:b2:a8:
02:f8:00:78:eb:19:d8:6d:d8:3c:97:33:ad:75:d2:
a9:0f:f7:5b:ea:e5:d9:6f:a0:bf:7c:10:eb:cb:3d:
73:a4:1a:7e:4a:b3:4b:50:82:a3:3c:70:a7:27:87:
af:51:42:66:78:49:30:54:24:ec:c0:ba:42:1b:7e:
ae:f6:f6:19:5d:94:e8:9f:79:03:c1:c1:2c:86:9b:
0d:8e:d8:10:f8:a3:94:bc:b9:8f:fd:f9:4a:ec:fb:
b4:1b:70:2a:d9:39:e3:fb:d2:52:ab:cb:28:43:1f:
a7:31:b0:d4:3c:54:99:e1:4e:40:e7:90:1e:b9:83:
2e:5f:56:20:50:e7:69:15:8f:f5:41:b7:10:31:53:
6e:e9:86:8b:96:61:17:e5:bb:47:98:43:d2:10:b6:
79:68:2b:06:b7:b7:88:bf:7e:c9:58:da:ab:22:3f:
37:0b:87:5e:1b:19:88:ac:c7:4d:40:78:50:2a:86:
ff:6a:91:8f:8d:24:91:da:77:ee:af:d3:f6:98:fa:
cc:cb:6b:a8:61:7c:49:ec:97:9b:bd:27:de:f2:4d:
99:16:93:45:3c:84:11:c2:b9:a8:cd:4e:1e:6b:c7:
df:f3:81:3d:c5:62:5d:8b:e6:c3:d4:a4:b5:9e:14:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:E7:BD:FD:19:C2:62:02:D7:64:F7:3F:C3:F3:FF:53:9F:97:CE
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:7d:3a:0d:b6:28:88:8d:39:01:bb:0f:d4:b4:06:e3:53:5c:
c3:32:7a:be:68:6b:57:36:f0:de:16:77:b9:ed:c7:0f:04:5f:
20:06:0c:43:ce:fe:61:04:2a:88:1d:7b:f3:31:e0:f2:1a:ef:
90:2d:65:0e:56:91:0c:15:aa:38:ca:3a:76:13:d0:67:bb:b1:
4a:de:d5:6f:e8:61:3d:74:23:e7:2f:ce:ca:8f:45:1c:3c:c8:
b0:a1:41:ab:ab:e3:7c:95:ce:74:64:63:cf:4a:ac:50:87:bd:
b1:5e:2c:e0:7e:be:e8:e8:75:44:ef:98:ab:1c:5a:be:00:bd:
be:f1:cf:23:f1:a1:2c:de:91:d4:8e:71:78:8d:ae:6a:b5:52:
9a:72:1f:fd:89:7f:b6:53:14:f7:19:e5:74:90:01:23:71:e0:
b0:0f:fe:7d:a8:93:dd:04:3e:88:d0:1e:b0:a4:14:af:4a:3e:
af:ca:f0:4a:98:2a:cd:51:42:67:64:7f:fe:3d:8a:cc:0b:05:
c8:04:c2:94:ad:21:a7:2d:ae:ba:4d:d0:93:ab:a5:22:36:7c:
fd:cc:54:b9:82:60:f8:e4:a3:c6:05:32:f0:a1:03:9c:8e:84:
e5:00:b9:72:94:03:58:bd:83:4b:88:14:7c:f4:9c:62:91:ca:
79:ef:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:31:22 2026 by rpki-client