
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier: RtNThpFskq08KMkBpWEdBXq+RQSsrz4VIh0vDEV8kEE=
Subject key identifier: 98:CA:09:71:3B:7C:DD:31:CA:BD:B5:E8:D5:55:9E:CF:26:61:DE:FE
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial: 0D7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number: 0D60
Signing time: Sun 20 Sep 2026 18:03:35 +0000
Manifest this update: Sun 20 Sep 2026 18:03:35 +0000
Manifest next update: Sun 27 Sep 2026 18:03:35 +0000
Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: 0z6s7FTh97IWCxi2ox0A084qpVrClbafPwKa8HkOFHs=)
2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: t2CWkBXQYpfXnKjT2eidVo6yQZfsGFOZhOTBTaGrl0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Validity
Not Before: Sep 20 18:03:35 2026 GMT
Not After : Sep 27 18:03:35 2026 GMT
Subject: CN=6ab01ff7-8d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:be:b0:cd:52:b6:3e:4e:29:d0:de:52:37:
98:7a:05:e4:05:3f:1b:78:98:2c:1b:c7:f7:12:4f:
84:b7:3b:90:27:f1:91:5a:65:12:cb:be:9e:13:0f:
5f:5b:8d:8d:f1:07:42:7a:bd:01:3a:19:cb:96:9e:
1c:e6:ba:1d:19:76:82:7b:9e:f0:c4:d1:8f:fe:fe:
07:27:92:fb:eb:9c:b7:73:b4:b6:2f:72:4a:04:af:
53:14:61:62:51:5a:91:f7:f7:7c:90:4c:2b:95:d7:
8e:68:79:ff:c7:d0:a4:84:27:f3:13:29:11:89:a9:
f2:34:5e:4a:69:69:58:6f:1d:6f:37:d2:f9:21:ed:
b7:37:12:36:99:3d:72:93:50:d3:f1:e0:c9:09:a3:
24:35:07:51:07:07:3d:ba:12:8d:4a:25:67:e1:3e:
fc:3e:e0:d2:53:a2:30:45:ac:e0:ed:79:31:ce:86:
f5:70:30:47:bc:64:ca:49:25:ad:57:57:a4:60:81:
78:39:38:10:f5:bb:ca:e8:8b:4b:ab:29:d7:65:5e:
de:45:ea:b0:02:a3:d9:ef:79:61:8e:b9:7e:e9:48:
61:85:b1:99:ae:a5:e2:e8:62:23:91:12:b4:8b:b9:
3c:2b:85:45:97:4e:09:69:e1:a9:f9:81:39:f2:96:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:09:71:3B:7C:DD:31:CA:BD:B5:E8:D5:55:9E:CF:26:61:DE:FE
X509v3 Authority Key Identifier:
keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:96:93:29:b4:14:3f:e8:55:c6:d7:ce:1b:c7:6a:a0:cd:f4:
6f:e4:88:73:18:20:9d:f9:c7:6b:9a:7a:a6:4c:29:10:d3:37:
37:47:d9:40:b3:fa:e9:8b:2c:15:8e:d2:de:f1:41:31:17:35:
fa:4c:fe:37:9d:a3:03:ab:ce:d6:ad:d9:c6:e5:77:45:45:07:
f7:84:5e:ff:04:76:6e:22:46:58:c2:99:ed:03:eb:af:5d:1a:
6c:2e:31:36:2f:6c:74:42:0b:f0:f9:79:61:92:c3:79:af:5e:
53:ef:69:f4:48:d8:80:18:23:ec:30:86:8b:c0:b8:bf:0f:cc:
85:b8:e6:be:7d:40:90:d7:af:e8:19:65:c0:c0:39:b9:39:a5:
9d:2b:db:12:ba:a0:fc:ad:77:1a:a8:fd:4d:5f:f3:d5:2c:33:
51:36:4d:b1:d0:79:8b:c6:c1:8c:8f:b9:6a:74:f6:01:52:ad:
df:a8:5f:b5:33:e3:e0:fb:a8:5b:90:8f:f7:61:ce:70:16:ab:
0b:1f:07:63:c2:6f:6b:74:a5:5b:96:cd:c5:67:c8:92:db:ee:
43:37:bb:e9:e2:78:c9:f6:a1:9b:da:8e:5a:11:b3:3e:87:0c:
d4:b8:84:eb:fe:5e:fc:9d:6a:4c:cb:19:75:2c:d9:ab:f6:68:
19:71:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:49:43 2026 by rpki-client