
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier: DIbraEvn9fPCPGkPAiyrD44oYAWxKFa5wZigjYXd3xM=
Subject key identifier: 4D:39:04:85:7E:8D:51:A5:B5:9B:E8:3E:CE:45:82:9D:2E:5C:AD:70
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number: 01C2
Signing time: Wed 29 Jul 2026 05:02:01 +0000
Manifest this update: Wed 29 Jul 2026 05:02:01 +0000
Manifest next update: Wed 05 Aug 2026 05:02:01 +0000
Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: k4g4DlAcewj17p4dg4OLyc4OVaueMNz3OL/BlvOM6RY=)
2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: O7Lj4yPFpwZm2VwkuRfj2gTrVG1pPTs7zZ1NbT7XSSw=)
3: Z4aH_tdZ0tOLwEu69Vy4G69gf-4.asa (hash: Aislko8MBzysrn48sutN/9wnmjDSj9ZREo4lAeWYs0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 05:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Validity
Not Before: Jul 29 05:02:01 2026 GMT
Not After : Aug 5 05:02:01 2026 GMT
Subject: CN=6a698949-81a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:7a:83:68:fa:01:a8:38:b8:8d:f1:de:dc:
f5:00:62:e6:90:a2:a6:9c:9b:82:ae:93:4f:56:05:
b0:f9:81:2b:19:c4:14:e2:49:de:c1:52:4e:cf:13:
a5:17:b7:f3:ed:90:53:fe:f6:61:d6:43:04:9a:b1:
24:2d:b0:e6:dc:cc:11:8b:f5:f3:21:f8:e1:3f:7c:
ba:4f:eb:a7:8d:cd:5d:dc:fb:eb:ab:9b:36:5d:f3:
99:e6:f4:3f:8a:55:02:e5:cf:ba:32:29:f5:0d:e2:
d4:4a:02:01:32:b7:3a:1f:aa:c7:fd:a0:71:d5:d9:
b6:dc:d1:1a:6f:6c:e4:15:2d:f7:5a:f4:b4:c2:96:
d7:fa:d3:ae:9b:0d:2c:ae:24:f4:47:9f:53:20:65:
56:4d:d6:72:2e:2e:f9:e4:ba:94:ba:9e:57:6a:85:
9e:cf:55:38:67:c8:f1:e7:3c:cc:ad:ce:2a:e8:46:
74:ae:b0:20:8b:c3:d5:71:11:94:bd:29:35:f1:be:
8c:2b:36:f1:db:71:80:c4:ce:47:51:f5:97:05:cc:
59:ce:63:e9:51:35:7f:ce:cb:e5:97:b9:b1:3a:63:
f3:db:e6:a3:fe:e9:22:d5:b2:c6:d7:d5:ac:68:d2:
6a:1e:fa:c5:ef:a8:ef:00:4e:33:7f:ca:61:df:8f:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:39:04:85:7E:8D:51:A5:B5:9B:E8:3E:CE:45:82:9D:2E:5C:AD:70
X509v3 Authority Key Identifier:
keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:61:6b:69:32:e2:31:aa:8e:55:d8:b5:f9:e1:8f:3b:c9:f8:
4a:35:dc:35:ad:7d:dd:48:39:43:a7:1c:ab:74:c5:3d:21:ce:
89:86:0a:8b:01:be:79:43:34:f0:6d:71:e0:b2:f1:e6:af:ed:
ac:2c:bb:23:b2:a3:92:aa:bb:ce:04:07:59:cc:ec:e9:4e:ed:
7f:0b:87:51:52:a7:46:d3:67:4d:28:88:a4:c7:86:75:4c:8a:
d1:1d:15:1c:68:4e:70:47:da:48:09:43:f8:30:ff:16:a6:8b:
38:a1:bb:3b:ff:14:ba:43:fd:4f:4c:94:54:4c:75:d4:17:78:
ac:4e:12:50:b2:54:3d:97:59:96:18:38:25:fc:c5:09:42:3a:
6a:57:84:68:8a:48:dc:ac:a6:72:3b:0d:a7:e8:28:69:a0:fb:
52:f5:e1:91:4b:a8:4f:6c:6b:35:c3:a9:9e:68:99:f6:0c:6b:
e0:3f:98:99:6e:86:af:e8:b5:80:98:e7:02:c6:6d:e3:18:a7:
bb:50:12:96:05:d6:f7:9c:2d:59:78:74:09:0d:fa:56:21:58:
5b:eb:15:f7:10:b8:cd:c8:47:dc:3a:b6:4d:85:ed:54:81:f1:
69:e1:26:36:3a:d6:e4:68:b4:97:ec:9b:83:25:f3:9d:19:a5:
4d:ff:05:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:50:57 2026 by rpki-client