
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier: pXjtq2gnhX/DEB20vJ+fjJ9L1XdspuvmDswYClQOJoQ=
Subject key identifier: F8:04:EB:60:CB:7F:B4:38:23:60:DC:DA:3B:D9:5C:9A:81:99:06:BA
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number: 0AB1
Signing time: Sun 20 Sep 2026 21:04:35 +0000
Manifest this update: Sun 20 Sep 2026 21:04:34 +0000
Manifest next update: Sun 27 Sep 2026 21:04:34 +0000
Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: nraKvdvf32EVI3b7nh24JFk9Ctgfau7RaocsZElB/uM=)
2: D4E747A681F411F195188DD178A30FBC.roa (hash: 6dv4eQ+/pdigXhYVekYEJh3imGafMJAgl8pggYEI6s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Validity
Not Before: Sep 20 21:04:34 2026 GMT
Not After : Sep 27 21:04:34 2026 GMT
Subject: CN=6ab04a63-237d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:76:13:2d:3e:5c:04:62:06:8a:93:c8:6d:
10:d9:84:22:fe:24:b4:6e:17:60:9e:6e:56:02:44:
75:bd:58:9c:07:f5:67:bd:eb:08:0e:3d:92:fa:f1:
26:b4:c2:68:65:90:41:d4:10:9c:cb:be:59:11:04:
0a:8c:c3:b6:62:1b:34:46:f6:ba:9b:16:3c:91:5b:
62:fc:cc:ff:4f:f2:f6:20:29:1e:20:88:be:60:23:
3f:2a:bc:15:28:72:7f:b8:2e:d2:67:cf:03:19:ff:
0c:52:4e:13:f1:31:1f:a5:c4:c8:fe:ee:68:85:8f:
2a:95:c2:da:6f:52:28:ab:63:28:90:b2:b4:b0:33:
f0:56:64:c2:4c:13:b3:2f:2e:b7:c3:83:ab:e8:ae:
5e:cb:d7:c9:31:24:37:6d:cb:73:81:89:44:a7:42:
f3:48:f5:29:e9:94:dd:c2:1c:f3:7b:dd:35:6e:eb:
f1:9b:f9:97:ab:ba:9f:16:78:7a:33:4c:18:58:f1:
a7:b2:ff:ea:3c:c4:3f:1d:be:a3:5e:1e:b6:4e:0d:
d6:bc:7d:d6:63:e6:5d:4c:2c:ea:9a:25:77:48:b5:
3a:2d:1f:34:a9:f6:51:8c:77:08:d0:58:46:20:16:
56:63:a4:09:75:19:29:dc:78:2c:ca:00:ec:0c:22:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:04:EB:60:CB:7F:B4:38:23:60:DC:DA:3B:D9:5C:9A:81:99:06:BA
X509v3 Authority Key Identifier:
keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9d:59:04:81:75:c0:9e:e2:59:04:ce:05:93:db:35:f5:49:
5f:68:fb:ae:d8:6c:86:df:bf:d8:b7:9c:56:15:e4:10:5b:e3:
ca:b6:94:54:92:e2:d0:49:99:08:5d:79:32:6f:a7:ee:d1:d3:
e2:6f:80:1c:05:99:a0:f6:51:a0:64:dc:ae:ec:38:c1:60:c0:
99:1f:4f:64:02:4f:bb:c8:74:1e:37:ac:df:2f:8b:66:d3:0f:
6d:b2:61:20:eb:18:5f:ca:a4:53:8e:51:26:72:d7:c2:ee:ae:
1c:c3:b2:01:9a:e0:5f:51:1c:fb:0a:f6:11:f4:ed:55:27:77:
6b:95:56:aa:9c:be:35:5d:66:27:51:20:a5:f7:7b:13:1d:ab:
61:42:ac:dc:16:bf:26:1c:f9:b7:f3:56:4e:7e:c6:3d:c1:7e:
da:85:9b:d6:3a:c8:f0:62:09:7f:07:45:6f:87:d1:e5:f9:7a:
7c:de:8f:95:37:73:ee:40:7f:a1:24:13:04:44:7e:57:59:34:
89:26:90:f3:8c:51:83:0e:56:49:a3:6f:08:45:14:59:c4:56:
a2:15:5a:df:e1:05:c0:71:31:7a:62:c4:66:97:25:42:33:46:
8a:0d:43:43:ce:65:64:56:e0:a0:27:41:e1:3e:1d:67:b7:73:
dd:bf:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:26:47 2026 by rpki-client