
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier: j8K3uje0HSOeK2Mftmkiwnp8JsCXtZrZpb90nB0JzH0=
Subject key identifier: 12:E0:90:4C:61:DC:8E:DA:C8:F2:1E:0A:A0:61:F0:D2:85:19:DC:21
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial: 0552
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number: 0548
Signing time: Tue 22 Sep 2026 23:08:48 +0000
Manifest this update: Tue 22 Sep 2026 23:08:48 +0000
Manifest next update: Tue 29 Sep 2026 23:08:48 +0000
Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: oakGgM51Fl5hu/NjX6fgc03/WuXoR+J48ghosSGPmlE=)
2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: 0Yuj8jwsHlCnMcg0SGtiJaONeRl25wMXy9ufRSKcIXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:08:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Validity
Not Before: Sep 22 23:08:48 2026 GMT
Not After : Sep 29 23:08:48 2026 GMT
Subject: CN=6ab30a80-1594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:24:2f:b4:98:b5:4b:2e:92:4b:4c:33:c2:
c1:02:2f:0c:ab:f9:df:06:9b:2a:13:78:c5:c0:ab:
ea:c3:39:a1:2f:3e:cd:34:12:18:a3:2f:74:53:40:
40:57:44:b3:cf:b6:30:5f:b6:08:ce:d1:f9:84:95:
e9:a1:4d:a6:2f:25:11:86:e2:53:2c:e7:8d:3c:14:
fb:28:91:7e:62:b9:a8:b1:6a:d1:9b:d2:6f:5e:5a:
36:f3:0c:80:dd:b6:36:7b:e6:4c:08:08:20:20:3e:
fe:e3:ef:7c:c0:17:15:9c:d7:f4:c4:04:46:da:21:
55:94:95:9d:98:a9:6c:7c:3b:21:dd:d3:0a:1b:3f:
3a:c3:06:de:df:5d:44:c2:60:ba:7e:26:c8:de:ae:
eb:84:19:85:4e:3c:89:fb:fb:dc:de:f0:82:62:28:
41:bc:68:ac:2b:90:31:84:21:d5:dc:f4:1b:53:54:
7e:78:98:57:86:3a:f0:c7:84:52:e4:55:0a:32:c1:
e9:ee:5a:81:d3:25:50:b6:8d:c1:08:04:88:e6:96:
f4:21:10:b3:c5:fa:4e:6c:08:1e:04:4c:8c:0e:1d:
5c:17:0d:e9:96:58:82:3c:bb:3b:69:3b:aa:c1:af:
92:e7:98:c1:aa:0d:5c:e1:ab:3a:f3:c8:07:a4:bb:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:90:4C:61:DC:8E:DA:C8:F2:1E:0A:A0:61:F0:D2:85:19:DC:21
X509v3 Authority Key Identifier:
keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d1:3b:78:1c:fa:a8:84:d4:2a:5f:69:0f:89:3e:18:32:15:
51:50:dd:75:c6:cd:1e:f2:72:5c:98:53:ee:35:69:b4:70:cc:
2e:a2:04:2a:28:e0:a0:83:06:61:6b:e7:dc:b5:4e:c4:b0:7b:
07:d1:83:6d:2e:48:c9:88:fe:c5:fe:7c:11:81:17:ec:7a:45:
bd:c9:c7:89:25:90:4e:d4:b9:02:b2:85:c3:f8:51:27:c9:a9:
2f:a2:45:68:66:c3:2a:06:1a:bd:d4:79:0b:f0:50:8f:53:38:
d0:f6:d7:32:36:b2:ab:b1:37:95:a9:fa:68:bf:df:f4:b6:55:
14:d7:51:a0:63:1a:15:13:0e:a6:98:8c:92:b7:fd:fa:f8:49:
15:fc:fb:77:ee:ac:2a:e7:73:bd:98:52:8b:5b:b6:0c:c9:b1:
41:2d:1a:23:d0:9d:05:ed:e5:88:43:18:97:78:32:87:ea:90:
d8:47:08:be:b8:0b:a7:2a:9c:ac:72:b3:f5:28:e4:df:62:f4:
b6:7a:aa:b9:07:99:3f:c9:8c:ee:b9:5a:ec:38:7a:55:7f:55:
bc:c7:b7:de:ec:67:41:af:db:18:27:cb:51:d6:3f:f8:c4:0a:
e2:27:f0:db:6b:f9:83:2c:96:4e:4e:67:e0:62:1e:17:26:92:
1d:1d:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:59:23 2026 by rpki-client