
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier: x9I+AjiKH3RAhhonm32YDDSulcev+sgYnVY45j7dvaI=
Subject key identifier: F9:DA:56:27:C5:9F:2F:55:8E:16:C9:FC:0F:82:2A:7C:6F:11:B6:39
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number: 01AA
Signing time: Sat 13 Jun 2026 04:05:52 +0000
Manifest this update: Sat 13 Jun 2026 04:05:52 +0000
Manifest next update: Sat 20 Jun 2026 04:05:52 +0000
Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: Hak0yOYDYlu+XMLbPg+jcXFpzZl6e3plHVfWXnohugw=)
2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: O7Lj4yPFpwZm2VwkuRfj2gTrVG1pPTs7zZ1NbT7XSSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Validity
Not Before: Jun 13 04:05:52 2026 GMT
Not After : Jun 20 04:05:52 2026 GMT
Subject: CN=6a2cd720-9bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:58:38:5c:da:7c:5d:64:49:66:0f:8b:ac:
35:b1:9f:33:ff:78:49:73:15:bd:ce:57:e8:ab:6b:
36:c4:12:40:1a:75:ac:6f:cd:a0:f4:4e:2e:93:59:
45:21:ac:21:a5:5e:38:a9:9c:9e:2b:ad:90:84:b4:
dd:d3:33:1d:f0:09:64:0a:1c:ba:40:e0:8a:a0:a4:
f5:50:68:3f:a4:d6:d2:a0:b5:73:cc:5b:46:fb:25:
2e:65:9e:1d:0b:8b:9d:99:ec:9d:33:f2:84:98:24:
bd:71:a3:e3:19:86:cf:a2:55:b5:d4:bd:4b:70:e3:
e5:6c:29:60:84:82:be:b9:36:4b:d4:49:26:3a:16:
81:69:54:e4:45:3c:ac:08:1c:d0:d3:48:ea:2f:15:
ee:ad:17:0f:ff:a6:23:bb:8e:ff:4b:42:9b:04:be:
3f:b7:1a:64:87:92:b4:6e:56:4d:a9:87:1d:45:65:
dd:20:bf:96:99:f4:be:39:5e:99:ed:32:c6:30:17:
0c:76:ac:ae:a3:26:76:aa:3b:bb:e0:e9:d9:20:4d:
ea:b1:76:d3:c4:57:39:a4:1b:6b:fd:90:fa:1f:88:
27:27:09:5d:2f:ef:44:46:d1:e1:0a:1b:5b:b9:25:
a7:bd:e5:24:85:19:71:3b:9b:c1:d7:9e:dc:44:a0:
9f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:56:27:C5:9F:2F:55:8E:16:C9:FC:0F:82:2A:7C:6F:11:B6:39
X509v3 Authority Key Identifier:
keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:af:61:2a:b3:09:1b:d3:0d:d5:25:44:90:6e:51:a8:e9:fb:
cc:3b:85:2c:63:83:97:3c:73:69:c1:08:2a:73:84:13:34:d8:
39:44:5b:ed:f7:79:f2:a3:a6:b7:41:3c:8d:c1:0d:38:50:38:
e6:1b:64:b1:07:63:ab:1e:74:10:f3:3b:92:bf:27:e8:57:c7:
31:a0:34:9a:c9:c8:53:b5:c0:95:5d:7b:02:b9:3d:18:d2:f6:
ef:b0:db:0c:2e:48:27:43:3b:55:a7:ad:cd:1a:8a:78:c7:5e:
d0:34:9a:43:03:65:ba:05:af:03:d2:68:59:5b:1a:b9:1e:22:
7b:e7:65:b2:19:ab:3f:48:30:14:12:a4:fe:db:40:3e:40:7b:
e8:b4:81:a2:22:d4:9c:b4:d4:b7:ef:bf:e7:7c:73:d9:8f:12:
00:ed:61:3c:4f:ab:d1:60:6a:a2:e8:de:7e:9f:cc:74:a2:bc:
d2:58:dd:b5:c6:d6:cf:47:1f:e2:3b:2f:25:59:72:33:dd:e3:
51:ca:44:80:58:fa:91:50:55:de:45:b3:ff:7a:d6:6a:3b:59:
68:06:53:d6:34:2d:de:d9:6b:12:99:07:50:b2:da:89:d7:17:
03:62:db:f2:4b:dc:25:80:d3:49:ef:14:cc:e6:f1:26:f0:f9:
10:21:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:11 2026 by rpki-client