
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier: hMCMkJ83gyUJX59Pwuqvhe8p8FJjYLtspxckmitAsZI=
Subject key identifier: FC:69:52:FA:72:86:79:10:53:4E:3F:8B:96:EA:6C:DB:DC:EB:3B:77
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial: 0DEE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number: 0DE1
Signing time: Sun 18 Oct 2026 17:57:00 +0000
Manifest this update: Sun 18 Oct 2026 17:57:00 +0000
Manifest next update: Sun 25 Oct 2026 17:57:00 +0000
Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: D8UCUy5h8vPrSWJa15Z0W0Ol7kM9ggjEqrWRQseTrwc=)
2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: hr+BwUVMGjaR63JX30qV8dhB24Yz2YmxfxAIkQhUhZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 17:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3566 (0xdee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Validity
Not Before: Oct 18 17:57:00 2026 GMT
Not After : Oct 25 17:57:00 2026 GMT
Subject: CN=6ad5086c-dd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e7:7a:c8:60:a8:4c:3c:0a:d0:01:c7:58:d7:
1c:ed:7b:af:b2:6e:28:f9:f6:00:d0:16:05:a9:b6:
a0:21:b9:d9:4f:d9:6b:3d:9e:38:ee:41:61:11:3c:
6d:e5:b1:91:0d:5d:18:a0:14:80:c5:60:4a:d3:4e:
5c:51:1f:f1:9c:1d:7a:06:0f:7d:08:a8:6a:f2:33:
86:c5:20:71:48:80:9e:e1:4d:74:bc:78:5c:11:47:
54:6d:5c:30:70:d7:f5:7b:c8:be:91:38:41:32:50:
b1:87:9b:01:1e:e5:be:fb:4e:21:a1:eb:b5:64:98:
08:fb:e7:72:53:97:83:18:e0:2b:4a:8a:92:3a:f6:
ee:32:4d:57:9e:06:1b:c7:26:51:79:76:6a:6b:f3:
e9:0d:3f:cd:c0:04:52:80:3f:6b:d6:79:da:1d:6a:
03:e8:e3:82:a9:fe:67:32:ca:b8:a8:4a:9a:ee:1f:
61:f1:ba:d3:a1:76:c3:50:57:65:a1:45:09:ee:84:
de:cb:b5:b0:9f:80:43:de:e5:6e:1c:1e:5e:01:14:
10:38:1e:3f:f7:49:18:57:2c:95:37:bf:f9:07:6c:
31:e8:0d:57:a4:75:be:cb:7c:be:b5:0d:a0:eb:aa:
ba:2e:49:81:01:6f:e0:43:4f:04:e4:e6:b8:35:2f:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:52:FA:72:86:79:10:53:4E:3F:8B:96:EA:6C:DB:DC:EB:3B:77
X509v3 Authority Key Identifier:
keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e1:73:b0:1c:ec:5f:eb:01:19:ab:0f:76:35:cd:03:85:98:
72:e4:c5:24:8e:be:0a:ab:73:78:5c:c6:21:14:6a:be:2e:8d:
28:80:49:18:7f:3e:fe:77:9a:d6:dc:bb:7d:00:5e:44:20:eb:
ca:1f:a9:fc:2d:02:38:8b:c9:11:26:5b:65:fe:34:63:c7:49:
77:ee:f5:37:29:41:6c:c3:9f:1a:0b:e8:62:52:b2:27:66:40:
f1:e5:8e:9a:82:ef:81:89:ff:41:8b:58:ab:17:cd:37:ac:e5:
af:4f:c0:22:77:7f:34:5c:af:0e:7d:2f:4e:78:96:7c:71:ca:
52:65:19:b9:c0:cd:bf:5c:1c:79:0f:6f:f6:fa:67:69:0b:50:
5f:89:10:15:d0:a5:08:07:fa:68:87:a5:c0:b6:a0:45:ba:48:
5a:78:1c:16:b2:1f:28:4f:bd:7d:62:07:05:41:e3:54:b1:0c:
8f:25:97:c5:f0:3a:f3:ad:f8:99:15:06:21:55:f9:b7:35:99:
e3:53:37:5d:dc:bf:02:3a:5a:7a:f0:66:61:40:b7:97:df:64:
93:e0:1f:15:e5:76:f8:9a:4e:0a:70:ba:04:dc:17:f5:e4:0a:
2e:2e:41:eb:b7:3f:3c:50:e9:02:1c:94:26:aa:b1:b7:fa:fe:
e5:62:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:46:07 2026 by rpki-client