
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier: KhcLJL2b15VPX+AMRPrwGwY66FLH4PE3te9p1R7jlZI=
Subject key identifier: 36:B6:AD:DB:58:0C:39:48:8F:F5:D5:56:A9:10:FE:D0:2B:5B:AA:C4
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial: 3561
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number: 3A74
Signing time: Tue 28 Jul 2026 14:37:47 +0000
Manifest this update: Tue 28 Jul 2026 14:37:46 +0000
Manifest next update: Tue 04 Aug 2026 14:37:46 +0000
Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: gJlqiQ2PwQ0llg7WotnTEpoY0kU0VTJlrqAYEPmsqJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13665 (0x3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Validity
Not Before: Jul 28 14:37:46 2026 GMT
Not After : Aug 4 14:37:46 2026 GMT
Subject: CN=6a68bebb-8464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:b1:76:f3:e1:b0:c8:85:4e:76:09:db:c5:
64:02:d6:98:b9:68:64:1d:2e:03:ee:fb:31:76:cc:
74:17:46:89:10:57:95:09:5f:a8:6e:c4:dc:b1:ec:
11:9f:2e:12:99:3d:3a:0f:df:8d:d8:29:9b:af:5a:
20:bf:a7:d0:4b:32:f9:82:5e:c3:f8:a2:8b:80:02:
95:71:44:f2:c6:69:fc:91:34:82:35:4e:34:c3:e8:
aa:6d:d9:f6:99:12:6e:a8:5b:55:23:b2:3b:6c:96:
3d:36:df:2b:6f:cd:ce:9a:ca:36:a2:14:e6:1b:6c:
25:34:e3:da:e3:a1:f2:30:0c:43:f7:25:fb:09:39:
a4:ce:bb:75:b0:6d:5a:16:4b:e2:a4:2d:7d:36:08:
a6:a4:7e:f2:54:8b:03:4c:ce:4b:b3:60:da:3a:60:
91:26:6f:0e:ad:2a:92:5b:aa:31:61:0f:82:d2:d9:
4b:2a:11:0e:a6:7b:ce:e4:15:de:6c:ff:73:91:39:
ae:e8:6f:43:07:03:e8:ef:d9:53:d6:60:c3:02:69:
6d:be:7e:3f:b2:83:c3:06:0e:88:a3:6b:af:32:03:
a3:54:85:58:66:af:a4:4a:ec:39:03:f2:fe:4a:5e:
f8:ce:3d:de:67:97:8f:f6:e9:c9:cf:27:d4:f7:fd:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:AD:DB:58:0C:39:48:8F:F5:D5:56:A9:10:FE:D0:2B:5B:AA:C4
X509v3 Authority Key Identifier:
keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:b0:1c:21:5e:78:de:84:7a:1c:13:15:df:77:04:b7:03:59:
0e:db:19:01:a5:d7:75:ae:ab:72:e9:55:21:66:29:66:ed:a2:
f3:db:a0:b9:fa:57:25:34:62:a3:e9:71:ae:a0:f2:64:90:f3:
56:95:10:9d:05:7e:35:af:2c:ba:ef:4e:fb:12:e8:7e:fc:b3:
fd:02:4f:d0:a2:fe:72:ac:c9:04:ea:df:15:2b:ae:91:db:8d:
49:a6:e9:9a:01:d3:10:89:75:38:1a:bb:08:34:27:82:f0:97:
60:f1:1e:d9:af:da:35:0f:92:93:33:af:90:a9:ca:89:9a:53:
f8:b3:7f:87:1d:01:9a:7d:c2:38:a4:f3:35:08:c9:ee:5d:7b:
a2:08:57:1e:71:0e:35:da:bb:2f:e0:9d:62:ee:9d:ca:24:ac:
bb:30:eb:7d:02:11:6e:9b:21:05:80:d9:33:d9:bf:e8:0c:38:
e6:6e:7e:bc:0c:33:c4:05:a2:75:42:26:61:8d:4b:68:52:ba:
f7:25:1c:3a:10:a5:7e:98:62:af:ee:b8:23:bf:34:94:e0:63:
b9:f7:63:f4:31:0b:63:4a:5f:21:60:36:f8:4b:53:7d:29:e7:
fc:03:88:8e:14:f4:e9:9c:a7:1e:6c:43:c4:00:35:7b:33:ed:
a1:a3:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:20 2026 by rpki-client