
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json)
Hash identifier: JcaJzXqAf+qy1A2KkDIv9WojUvzHsK2nZmMswKa6IIw=
Subject key identifier: B0:9E:DE:40:21:D0:CA:A1:AF:16:B7:02:B6:77:49:D0:07:DE:21:53
Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Certificate serial: 0325
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
Manifest number: 031D
Signing time: Thu 05 Nov 2026 01:22:03 +0000
Manifest this update: Thu 05 Nov 2026 01:22:03 +0000
Manifest next update: Thu 12 Nov 2026 01:22:03 +0000
Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: BeF8ZaVaD3UrENkoMs4XkyJxJ1fUfJq0Ka6mE1IqcLk=)
2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: GWPxIWtX/zwRGLkOWbdqE/upTqp/GZlTgsxR+zXWx1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 01:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Validity
Not Before: Nov 5 01:22:03 2026 GMT
Not After : Nov 12 01:22:03 2026 GMT
Subject: CN=6aebda3b-6835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:ae:2f:00:33:28:9e:0a:69:63:85:d1:ae:
24:98:6e:d8:d9:98:74:f1:ae:87:b7:7f:f2:00:2b:
68:7d:fb:30:97:7d:db:6c:c8:76:5d:64:b1:8c:7e:
0d:1b:d1:86:03:33:92:30:17:10:f0:45:33:cc:c4:
c9:f2:89:e1:ed:8a:13:88:41:b2:48:ff:e4:e7:21:
7f:12:98:26:2e:8b:95:78:67:25:28:25:b0:0c:ff:
3a:17:d0:e1:ef:40:37:eb:fc:f8:f6:97:fe:f4:49:
94:f2:b5:4d:50:d1:78:63:e5:a8:95:67:77:b5:f6:
8f:30:db:23:43:4e:7d:05:a2:cc:d1:3c:61:65:c4:
a7:1d:7c:e7:d0:02:c4:b0:f2:2f:87:77:88:46:c4:
40:96:15:91:f8:79:dd:6c:bf:8a:d0:37:09:93:18:
9b:5a:b9:03:56:49:99:4a:63:5f:3f:bf:57:00:11:
ac:00:c9:81:65:48:88:90:f4:f8:db:91:b3:03:b8:
17:a1:91:65:e8:94:17:43:11:87:65:43:0f:f6:b5:
3f:b1:55:c4:21:7d:30:c7:d9:84:b8:06:a7:57:b2:
cb:35:4d:fc:f1:07:2a:27:8a:f6:a1:12:e2:e9:26:
df:2c:b6:11:8e:76:20:41:b8:1e:f0:26:82:e0:09:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:DE:40:21:D0:CA:A1:AF:16:B7:02:B6:77:49:D0:07:DE:21:53
X509v3 Authority Key Identifier:
keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:c0:82:49:9c:d6:50:b9:10:8c:50:d8:13:fa:d4:f8:79:26:
38:c5:36:16:71:bc:39:a9:c0:a6:fd:8e:a0:ee:a0:6b:5e:f2:
7f:42:f3:22:03:dd:86:48:ee:3d:c9:7e:49:d3:df:9a:fc:1a:
b1:ac:94:37:21:d8:9b:e2:f3:5b:33:ef:68:f1:93:b6:54:cb:
d3:e7:c1:43:b8:ce:f3:16:0c:ee:96:c6:f9:c1:c9:41:aa:91:
3b:22:f1:63:78:77:9f:0b:44:c5:85:67:0a:4a:45:8e:92:f5:
cc:ff:17:db:c7:d9:b6:cd:9b:67:e5:5b:1f:2a:e7:a4:40:46:
7c:2f:9d:c3:38:a8:49:22:7d:2b:ef:52:7f:d0:6a:18:58:17:
35:c5:47:d3:6c:1d:02:73:e4:19:11:16:88:95:e8:0f:da:a8:
5c:17:9e:ec:3b:9e:3b:0a:1b:56:89:02:10:5e:37:5e:68:7a:
7d:22:1a:41:e2:70:f9:39:12:ea:06:f2:4a:5e:8e:f1:00:7f:
82:5d:ac:9d:85:d0:d5:82:c2:e6:df:e5:14:46:3d:20:3d:17:
47:3b:64:5a:06:de:2f:af:34:34:9c:01:c2:c8:46:3d:19:e5:
cf:77:f6:c6:e6:fd:0d:c2:61:91:97:55:c9:9b:b4:8b:1e:66:
98:63:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:58:32 2026 by rpki-client