
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json)
Hash identifier: A4uLfiYJddnnHv6ikfhy5jUcruSyN65pJOwAhmWc8Co=
Subject key identifier: 32:48:50:76:0F:0D:B8:62:90:A4:EB:DA:BF:5E:04:06:AE:14:6F:F4
Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Certificate serial: 0894
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
Manifest number: 088A
Signing time: Sun 20 Sep 2026 20:38:53 +0000
Manifest this update: Sun 20 Sep 2026 20:38:52 +0000
Manifest next update: Sun 27 Sep 2026 20:38:52 +0000
Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: F+i51DZh6GgZPGIOLSaSAHCOWlNwdiRt184Ls5WXHD0=)
2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: BTpU8dpGatUZOvwd6SbXwfQ3oVErt9SER4OTcVG1hdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Validity
Not Before: Sep 20 20:38:52 2026 GMT
Not After : Sep 27 20:38:52 2026 GMT
Subject: CN=6ab0445d-0a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:99:e6:f1:75:55:eb:52:8c:09:d6:a0:0e:
4c:9f:49:86:82:08:37:9c:a8:47:b0:d3:a8:c5:ac:
19:57:cc:8a:df:43:08:3c:41:37:c1:e8:99:95:92:
a5:1b:71:1a:ec:79:a9:e4:39:47:f6:96:26:55:ff:
d8:e8:8a:92:82:bf:3f:ae:74:6e:90:28:d9:57:9c:
a0:b1:0c:f4:11:ea:aa:3f:05:05:e6:78:7c:7a:8c:
7d:d8:ab:5e:0a:14:6f:bc:10:b5:90:a0:c8:bf:f7:
c2:25:6c:a3:04:a0:dc:2c:64:fd:06:b2:e0:cf:84:
e5:9e:01:6b:05:ef:23:99:8b:de:42:95:70:40:bf:
c8:44:61:75:d4:71:f1:0c:87:91:48:89:43:4f:d7:
59:20:4a:c8:84:a2:c3:85:52:c0:6f:c4:77:07:c5:
89:22:f1:3f:34:0e:e7:11:83:8e:ec:05:ca:60:1e:
68:ff:f9:89:e1:22:0e:08:c2:33:63:3a:f5:88:0f:
4d:a2:46:90:33:6c:ce:ec:2f:d8:fc:44:ef:2a:4d:
ad:e5:07:11:f4:6b:37:71:5b:9d:07:7e:7a:3c:0c:
d9:0d:46:21:83:9f:24:a2:ac:2a:ac:78:82:df:87:
41:2f:c8:8d:8f:c5:b1:34:a3:bb:ff:87:4e:42:ef:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:48:50:76:0F:0D:B8:62:90:A4:EB:DA:BF:5E:04:06:AE:14:6F:F4
X509v3 Authority Key Identifier:
keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:17:66:5e:ec:ac:1b:92:26:dd:80:cf:21:a6:c8:c3:52:4d:
58:61:ff:7c:9e:bc:45:4b:9b:6c:26:06:3b:91:df:5f:5b:51:
5d:2a:e8:18:7a:68:8b:ca:fd:e7:ff:0c:5f:25:41:15:f3:c5:
bb:dd:98:6c:7e:f0:d0:2f:6e:63:da:aa:f0:3e:d8:ab:40:49:
e3:7b:f1:3f:00:f4:e0:94:ce:12:b6:94:6f:74:69:97:d3:c8:
b5:f8:a4:6b:ef:6d:ef:01:0b:d6:f2:33:d6:99:27:6f:3c:df:
d4:dc:06:6c:44:ff:fc:d2:c1:37:20:b9:3d:83:0d:49:c8:90:
80:c4:19:33:69:7a:44:67:d2:d9:ec:b3:2b:83:6c:00:42:d5:
fd:0a:0c:56:37:32:87:b8:7d:67:cc:87:4a:3d:db:d2:14:e6:
2d:82:cb:d6:ff:8f:bc:ef:3b:a8:02:d6:48:b0:8d:bc:60:c7:
8c:21:ca:ce:37:d9:af:d1:0f:a5:0b:e6:b8:b9:0f:ae:3d:b3:
dd:6f:41:06:8b:d1:bb:6d:6f:ae:8c:cb:40:01:1d:a7:a0:8c:
6b:f6:cd:8f:c7:64:2c:38:d4:42:33:d4:dc:7c:f0:4e:41:2e:
73:cb:d8:47:37:be:0b:16:09:60:ba:e6:7b:1e:e7:09:e7:f5:
16:ed:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:22:18 2026 by rpki-client