
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json)
Hash identifier: CZbNPErMCzVEo+IHqhdvUi1E+CYJo2TNcWwpRPQn0M0=
Subject key identifier: EF:97:8C:2E:BE:EA:97:78:FC:9A:9D:0F:BC:F9:48:D3:EC:92:00:86
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial: 0D3E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
Manifest number: 0D2A
Signing time: Sat 10 Oct 2026 17:26:58 +0000
Manifest this update: Sat 10 Oct 2026 17:26:58 +0000
Manifest next update: Sat 17 Oct 2026 17:26:58 +0000
Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: DeNbUblEKoFRAit1Tgm77L2i4r6JNerLGbvuW4y7ArM=)
2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=)
3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 17:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3390 (0xd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Validity
Not Before: Oct 10 17:26:58 2026 GMT
Not After : Oct 17 17:26:58 2026 GMT
Subject: CN=6aca7562-4e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:5b:79:6e:f9:15:7f:30:85:96:96:2d:de:
84:57:ab:c3:e4:48:fc:65:35:c1:19:1e:ad:b8:70:
fd:8c:41:55:0f:31:75:a7:84:5b:04:e1:56:0e:67:
90:9b:1b:ba:1e:fc:f1:04:7b:48:90:7e:62:4f:30:
b9:6d:61:c4:c3:db:13:88:4d:79:3f:d2:6a:23:e9:
c1:94:1f:9a:ce:a5:c9:ae:7f:45:f3:07:90:99:b7:
c6:52:84:dc:b2:43:fa:ae:cf:28:7a:fd:30:23:78:
c1:4f:bd:4b:da:5d:0e:b8:9f:01:4b:02:31:51:96:
5e:22:95:0a:87:c6:df:48:2e:a9:4d:6c:dd:f4:68:
0f:d0:08:45:fe:f6:c5:07:d0:59:4b:29:f4:fe:32:
31:0b:6e:eb:a9:2f:ef:85:50:56:5d:62:86:47:07:
2c:56:47:a7:03:3d:2d:78:11:b3:bb:ca:5c:34:28:
79:62:06:19:26:d7:08:70:b8:cc:7e:d5:a1:a4:40:
fb:65:b4:de:bf:51:98:fc:ea:c8:c0:3d:a2:8b:25:
d6:0f:eb:33:34:8d:39:45:b2:8d:c0:99:c1:01:80:
99:00:15:78:c4:73:a3:8c:c4:f7:7d:a7:11:7a:ea:
e6:29:ea:e9:56:8a:d0:cc:40:22:41:5d:0b:8e:2b:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:8C:2E:BE:EA:97:78:FC:9A:9D:0F:BC:F9:48:D3:EC:92:00:86
X509v3 Authority Key Identifier:
keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:f6:5e:c3:f0:02:2b:65:5d:92:9c:b6:b8:5d:6c:82:49:
db:8b:f8:60:88:60:4f:d8:af:9f:ac:ae:93:9c:ea:c4:50:d0:
5c:0b:97:49:b0:c3:36:1a:c5:90:78:64:89:93:be:17:c4:1a:
2a:89:2e:44:dc:ce:4c:f8:9b:5d:f8:ac:51:5e:f5:68:07:96:
35:ee:62:6e:c4:72:8d:f5:72:d7:8d:9b:35:d3:33:5a:69:48:
58:6e:29:27:d2:3a:c8:87:b9:88:08:2d:d1:5e:33:1d:bb:80:
42:48:c8:07:ce:01:cd:96:38:b0:01:a8:a0:29:d8:f7:88:65:
2c:86:fb:b3:a1:11:eb:61:8c:b1:ca:e7:b0:73:9d:2c:9a:f0:
4f:a5:1a:9c:7f:4f:3f:f7:cc:14:05:df:ab:4f:92:c2:15:4f:
8b:cc:a6:42:4f:99:06:a0:7f:88:cf:ed:5a:d3:da:02:cc:d1:
80:6f:4e:b4:7b:c4:a8:31:fd:3b:f9:87:e8:fc:83:4f:c5:aa:
60:97:99:79:8b:b1:d2:2b:bc:11:0c:a8:0e:9c:bd:d5:f6:59:
2f:2c:a8:30:db:32:a4:91:38:ea:1f:e4:e3:1d:4b:4b:e4:7d:
93:14:28:56:bc:1e:58:cb:43:23:e5:6f:eb:21:b0:91:94:34:
16:7f:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:10:51 2026 by rpki-client