
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File: FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier: LQbvbrZHUkdRHUnIOR+cULsyRk4oZq42koCGqLUBgXg=
Subject key identifier: 34:09:36:F7:40:73:0B:31:CF:F3:30:93:CE:69:FC:5F:D7:CD:50:5B
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial: 0A03
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number: 09FA
Signing time: Sat 14 Nov 2026 19:42:02 +0000
Manifest this update: Sat 14 Nov 2026 19:42:02 +0000
Manifest next update: Sat 21 Nov 2026 19:42:02 +0000
Files and hashes: 1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: 9cHQbnaGIsDIDIU3G5xpmGFne7wdHfD0lU2N0WrA2+k=)
2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: 3/DJ3hL5G9etvpvOyj7MflbEEZYKEAa9BhYU/ttjjb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 19:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Validity
Not Before: Nov 14 19:42:02 2026 GMT
Not After : Nov 21 19:42:02 2026 GMT
Subject: CN=6af8b98a-557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:79:6a:3d:fb:5a:34:59:ba:f2:cf:59:e6:
b4:25:a6:b9:d1:fa:6c:19:2f:1e:9e:1d:2a:80:6b:
e3:ad:51:e8:ec:92:d8:b1:98:6a:a6:2c:4c:4f:18:
25:9b:68:ba:d1:37:54:bc:f2:41:52:9d:d8:3b:dd:
c2:e3:e9:a2:45:57:de:a4:55:3f:e7:9d:f0:79:23:
6c:09:b5:40:90:71:50:3b:39:7a:8b:a9:cb:ca:0c:
eb:12:39:a5:53:74:e0:f8:4d:7d:0f:5a:e3:ea:18:
73:1d:19:e0:d0:33:8f:a4:24:c9:cf:36:9d:11:46:
d1:20:30:c3:dd:f8:64:64:5e:71:e1:52:b0:6d:34:
04:6d:8f:8c:73:06:3d:5c:3f:33:5c:fe:fb:c5:3d:
da:6a:91:e4:8e:ff:df:22:75:eb:b6:20:44:b9:be:
11:60:fa:99:e4:77:00:2c:33:67:c7:e9:ca:78:1c:
6a:f7:a6:82:c6:f5:67:53:6b:5e:63:05:99:30:8e:
98:40:93:d4:97:df:9a:93:4c:aa:50:01:d8:aa:93:
3f:7c:d2:16:e6:6d:2b:1c:59:bf:33:c1:e8:12:8f:
8b:f6:ea:92:d6:aa:4b:aa:70:53:2a:3f:70:e9:b6:
88:d9:d2:48:1b:6a:df:5e:d3:f6:f7:32:1f:68:f6:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:36:F7:40:73:0B:31:CF:F3:30:93:CE:69:FC:5F:D7:CD:50:5B
X509v3 Authority Key Identifier:
keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:38:41:a3:35:fb:e8:20:5f:ef:02:52:25:01:63:3a:ef:ed:
f5:08:2d:5c:5d:ea:05:be:bb:b6:73:23:14:dd:6e:53:d7:cc:
f8:3a:39:a9:f4:b4:ec:e2:1c:78:cf:5f:0e:0a:d5:a9:31:8f:
ac:53:bb:ec:30:0f:e6:55:b1:3e:44:77:57:ae:9c:d1:c3:00:
4f:4b:41:49:5d:c3:be:32:ac:92:b1:41:48:e6:fd:8e:57:e0:
84:46:98:7c:59:08:b8:0a:d6:72:17:7c:61:04:02:1e:60:1a:
2b:9a:f1:3c:40:46:97:f2:28:07:37:c8:ae:43:5d:6c:17:c5:
a3:dd:70:ca:56:80:2d:a1:f5:8c:e8:b1:d0:d6:ed:56:5b:04:
25:50:39:c3:e4:4b:fa:69:a2:98:cb:f3:f1:0f:1d:6e:22:2f:
cd:c1:f4:b9:31:b9:7c:ac:5f:a1:59:cc:b6:c2:85:5d:ac:f2:
0f:35:8a:2b:25:f1:26:6c:39:59:60:de:75:ef:8d:07:95:79:
8d:f4:e3:5c:dd:a9:ca:c3:2f:e4:f5:f2:24:92:57:5d:e6:55:
a2:3b:b1:94:11:a7:38:0b:30:d3:f7:a7:38:7d:10:3a:ac:1b:
74:7a:34:61:0b:f9:11:f2:8c:69:c7:36:2d:33:21:1b:e6:ef:
59:a2:7e:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY1QkExMTAvBgNVBAUTKDE0MjBGODA3MDlEREQzREZDM0Y1MTE1NjU1MDNDRUY0
NDQ0QkVEQzMwHhcNMjYxMTE0MTk0MjAyWhcNMjYxMTIxMTk0MjAyWjAYMRYwFAYD
VQQDEw02YWY4Yjk4YS01NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0Z5aj37WjRZuvLPWea0Jaa50fpsGS8enh0qgGvjrVHo7JLYsZhqpixMTxgl
m2i60TdUvPJBUp3YO93C4+miRVfepFU/553weSNsCbVAkHFQOzl6i6nLygzrEjml
U3Tg+E19D1rj6hhzHRng0DOPpCTJzzadEUbRIDDD3fhkZF5x4VKwbTQEbY+McwY9
XD8zXP77xT3aapHkjv/fInXrtiBEub4RYPqZ5HcALDNnx+nKeBxq96aCxvVnU2te
YwWZMI6YQJPUl9+ak0yqUAHYqpM/fNIW5m0rHFm/M8HoEo+L9uqS1qpLqnBTKj9w
6baI2dJIG2rfXtP29zIfaPa1gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQJNvdA
cwsxz/Mwk85p/F/XzVBbMB8GA1UdIwQYMBaAFBQg+AcJ3dPfw/URVlUDzvRES+3D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjVCQS8wNDlEQ0QyMkFE
NjExMUVBOEYxQThENjNDNEY5QUUwMi9GQ0Q0QnduZDA5X0Q5UkZXVlFQTzlFUkw3
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0ZDRDRCd25kMDlfRDlSRldWUVBPOUVSTDdjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjVCQS8wNDlEQ0QyMkFENjExMUVBOEYxQThENjNDNEY5QUUwMi9GQ0Q0QnduZDA5
X0Q5UkZXVlFQTzlFUkw3Y00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcDhBozX76CBf7wJSJQFjOu/t9QgtXF3qBb67tnMjFN1uU9fM+Do5qfS07OIc
eM9fDgrVqTGPrFO77DAP5lWxPkR3V66c0cMAT0tBSV3DvjKskrFBSOb9jlfghEaY
fFkIuArWchd8YQQCHmAaK5rxPEBGl/IoBzfIrkNdbBfFo91wylaALaH1jOix0Nbt
VlsEJVA5w+RL+mmimMvz8Q8dbiIvzcH0uTG5fKxfoVnMtsKFXazyDzWKKyXxJmw5
WWDede+NB5V5jfTjXN2pysMv5PXyJJJXXeZVojuxlBGnOAsw0/enOH0QOqwbdHo0
YQv5EfKMacc2LTMhG+bvWaJ+Kw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:17 2026 by rpki-client