
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json)
Hash identifier: L0K1YfH8Cm6roRoNdwQPRrIhF090SQ9MnNMDPfHhCUc=
Subject key identifier: 51:DC:8A:68:17:4B:AC:EA:B6:6E:57:C9:A7:7A:53:1A:85:32:59:89
Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Certificate serial: 054D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
Manifest number: 053E
Signing time: Tue 22 Sep 2026 23:12:38 +0000
Manifest this update: Tue 22 Sep 2026 23:12:37 +0000
Manifest next update: Tue 29 Sep 2026 23:12:37 +0000
Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: 3qh2nYTe+kXMjQeVYLZSRsekhhEom/yKXFhIO8lMoeY=)
2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: HsF8gy96J2wsoICfYmcwznwixkV1OQ/RoRjC/SmAq8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357 (0x54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Validity
Not Before: Sep 22 23:12:37 2026 GMT
Not After : Sep 29 23:12:37 2026 GMT
Subject: CN=6ab30b66-4955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:3c:cf:48:64:ac:64:d9:f5:58:74:3d:4e:
30:18:4e:ae:81:cb:07:d9:65:3f:1e:ce:4f:ab:37:
e4:ff:79:ab:2d:3d:1e:32:22:25:f5:a4:c8:4b:26:
ad:3f:29:83:d3:ce:48:c1:65:70:62:6d:b7:fc:35:
55:50:fb:ce:98:30:48:18:60:30:35:76:17:82:f9:
4a:2a:d0:01:02:7c:b3:1b:22:ca:dc:ee:2e:c8:1b:
6e:2c:c5:fa:bf:0a:1f:d7:34:69:6e:25:9c:a0:92:
09:2e:24:ad:a6:f4:72:0c:5e:24:9f:9a:95:d7:f3:
84:7f:d6:c0:88:bb:fb:3c:ee:4b:87:2f:6e:34:8d:
11:c5:0f:53:be:f8:e0:50:34:b2:83:5c:2e:c4:39:
ab:b5:f9:34:34:f9:65:75:22:18:82:11:55:cb:1e:
31:cf:1d:9f:09:37:7c:ff:4b:84:39:a3:a4:e7:b7:
61:8b:c7:74:4e:1a:3d:57:49:51:2e:ed:f7:24:56:
de:c5:e0:7d:93:99:7d:0f:9b:1f:dc:e3:70:11:13:
8b:f3:47:8c:e0:61:7c:da:a3:2b:f5:b8:6e:9d:1d:
0c:c1:ea:85:b5:23:2b:92:bd:0c:38:30:93:d1:6e:
c9:47:a4:30:6f:f4:99:7d:fd:61:9b:e1:2f:15:64:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:8A:68:17:4B:AC:EA:B6:6E:57:C9:A7:7A:53:1A:85:32:59:89
X509v3 Authority Key Identifier:
keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:c5:5d:b6:5f:c9:24:29:fd:d2:33:40:a8:d4:83:2c:2e:f6:
64:d4:ac:3e:95:a0:6e:d4:54:08:28:3a:6e:1e:39:82:f7:26:
89:ff:b7:1f:f2:c4:a2:42:1e:03:35:58:4b:91:e8:47:2a:03:
14:47:97:ee:a9:4f:7d:47:82:0e:a3:d5:bf:a5:11:42:f0:84:
20:44:70:4d:88:ab:77:f5:fb:76:94:2c:31:2a:1c:66:02:0f:
5f:72:98:f9:db:da:07:37:59:d8:9c:cb:a1:a1:20:9b:50:1c:
82:fe:45:b5:31:57:9a:16:11:e2:cb:3a:5e:56:3b:82:57:07:
a7:f4:62:44:60:1d:dd:c1:b3:d8:f6:14:92:8d:19:f6:69:e4:
6b:c7:3b:c8:22:34:53:af:5a:ce:08:fa:32:ca:78:33:81:f1:
51:8e:d4:e0:c2:cc:e2:70:ba:9e:32:b7:d5:19:ed:cb:96:9b:
ba:66:2c:a0:e0:d9:39:3c:5c:fc:33:1f:7c:95:1b:a7:21:ce:
c3:df:51:99:41:fe:c2:a4:14:11:2b:ae:24:99:e4:79:96:5e:
1d:5b:9c:46:92:38:30:f3:e6:ed:fb:53:b6:6a:8e:e9:3d:7e:
8f:c1:95:ac:e2:93:57:29:f9:f0:b1:96:ae:03:7e:53:17:ca:
52:59:b9:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM3REQxMTAvBgNVBAUTKDdDMTMxRUUwQTgwQjgzNEQ0OEQxN0Q2OTY1NUE1QkM3
QkU2NjhCNkEwHhcNMjYwOTIyMjMxMjM3WhcNMjYwOTI5MjMxMjM3WjAYMRYwFAYD
VQQDEw02YWIzMGI2Ni00OTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcs8z0hkrGTZ9Vh0PU4wGE6ugcsH2WU/Hs5Pqzfk/3mrLT0eMiIl9aTISyat
PymD085IwWVwYm23/DVVUPvOmDBIGGAwNXYXgvlKKtABAnyzGyLK3O4uyBtuLMX6
vwof1zRpbiWcoJIJLiStpvRyDF4kn5qV1/OEf9bAiLv7PO5Lhy9uNI0RxQ9Tvvjg
UDSyg1wuxDmrtfk0NPlldSIYghFVyx4xzx2fCTd8/0uEOaOk57dhi8d0Tho9V0lR
Lu33JFbexeB9k5l9D5sf3ONwEROL80eM4GF82qMr9bhunR0MweqFtSMrkr0MODCT
0W7JR6Qwb/SZff1hm+EvFWQAlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHcimgX
S6zqtm5Xyad6UxqFMlmJMB8GA1UdIwQYMBaAFHwTHuCoC4NNSNF9aWVaW8e+Zotq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdERC9ERTU5RjYwMjVF
NzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcwMUkwWDFwWlZwYng3NW1p
Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZCTWU0S2dMZzAxSTBYMXBaVnBieDc1bWkyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzdERC9ERTU5RjYwMjVFNzMxMUVDOEJFNENDNEVDNEY5QUUwMi9mQk1lNEtnTGcw
MUkwWDFwWlZwYng3NW1pMm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ8Vdtl/JJCn90jNAqNSDLC72ZNSsPpWgbtRUCCg6bh45gvcmif+3H/LEokIe
AzVYS5HoRyoDFEeX7qlPfUeCDqPVv6URQvCEIERwTYird/X7dpQsMSocZgIPX3KY
+dvaBzdZ2JzLoaEgm1Acgv5FtTFXmhYR4ss6XlY7glcHp/RiRGAd3cGz2PYUko0Z
9mnka8c7yCI0U69azgj6Msp4M4HxUY7U4MLM4nC6njK31Rnty5abumYsoODZOTxc
/DMffJUbpyHOw99RmUH+wqQUESuuJJnkeZZeHVucRpI4MPPm7ftTtmqO6T1+j8GV
rOKTVyn58LGWrgN+UxfKUlm5Jg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:35:37 2026 by rpki-client