
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft
File: fd3mOzFeUumsIXzulOtTqsMd3m8.mft (raw, json)
Hash identifier: EH+lgVg1zAQ4bdjFlKm3SkPLwZFC0+wNeajtTdGgXP0=
Subject key identifier: D4:A2:88:66:1F:22:77:68:D4:BB:83:33:6A:45:3F:38:EC:22:72:1B
Authority key identifier: 7D:DD:E6:3B:31:5E:52:E9:AC:21:7C:EE:94:EB:53:AA:C3:1D:DE:6F
Certificate issuer: /CN=A91C8787/serialNumber=7DDDE63B315E52E9AC217CEE94EB53AAC31DDE6F
Certificate serial: 4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd3mOzFeUumsIXzulOtTqsMd3m8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft
Manifest number: 4C
Signing time: Fri 25 Sep 2026 08:30:04 +0000
Manifest this update: Fri 25 Sep 2026 08:30:03 +0000
Manifest next update: Fri 02 Oct 2026 08:30:03 +0000
Files and hashes: 1: fd3mOzFeUumsIXzulOtTqsMd3m8.crl (hash: yVf1DLSE0wEVbPCdAoPwZ5X2tnohb0RmFt16siRx+nQ=)
2: 5864B13A490C11F1BE52F10198833773.roa (hash: KVVWRwrymxGfC59Z8mZ9WOij5kHRNtQC8+3Ox0JonZ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.crl
rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd3mOzFeUumsIXzulOtTqsMd3m8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8787, serialNumber=7DDDE63B315E52E9AC217CEE94EB53AAC31DDE6F
Validity
Not Before: Sep 25 08:30:03 2026 GMT
Not After : Oct 2 08:30:03 2026 GMT
Subject: CN=6ab6310b-89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:01:a3:d4:e4:e5:b2:7b:3c:5d:54:8f:b8:15:
5b:90:d1:ef:b8:7b:7e:b1:30:8b:5f:62:e2:82:8a:
e8:d4:3f:12:23:b6:a5:d0:ce:ff:c6:6e:a1:7f:8d:
04:50:c7:63:34:ab:fc:30:73:a9:50:ab:6a:4e:af:
97:68:21:7a:b8:81:dc:92:af:a8:ef:ac:d1:05:60:
8b:d8:cf:d7:d3:22:5f:16:4a:38:65:b7:86:b3:03:
1e:26:50:1e:d4:02:4e:5e:d2:1d:d7:02:3c:6c:49:
aa:44:35:aa:b0:63:b6:d9:f4:a0:26:ac:2c:cf:1e:
85:29:61:7a:c1:58:87:e8:7c:ab:df:a4:48:49:62:
8b:08:50:fd:9a:e5:cf:ec:39:27:c4:11:44:36:95:
56:b3:8f:24:5b:1a:82:43:b7:a8:2c:b7:9e:50:9c:
7c:91:93:b2:4f:94:4f:3c:71:14:e9:2d:da:e6:16:
85:b1:70:d8:29:78:ca:a7:94:9c:ac:05:aa:96:46:
59:07:1f:a6:1f:68:31:a7:56:1c:49:93:cf:5b:dd:
a9:14:88:af:5c:a8:64:4e:dd:78:9a:63:a8:fc:a0:
42:aa:0d:51:83:b9:0b:05:ea:80:c8:d1:7b:c9:94:
14:6e:c0:87:db:73:10:b1:59:af:aa:71:ad:2c:cf:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:88:66:1F:22:77:68:D4:BB:83:33:6A:45:3F:38:EC:22:72:1B
X509v3 Authority Key Identifier:
keyid:7D:DD:E6:3B:31:5E:52:E9:AC:21:7C:EE:94:EB:53:AA:C3:1D:DE:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd3mOzFeUumsIXzulOtTqsMd3m8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8787/F03E5714490B11F1BA2E7EF197833773/fd3mOzFeUumsIXzulOtTqsMd3m8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:44:0e:dd:45:07:4d:28:d1:b6:60:6f:1c:0f:51:a3:3f:6a:
fc:82:16:7d:e7:3d:64:a3:06:3f:1d:86:61:16:68:06:28:62:
5f:68:65:0d:b4:7a:f4:0f:90:71:b5:1d:84:48:c3:0f:f2:03:
bf:47:cd:3f:63:f5:31:2f:88:a5:5b:9d:df:be:7b:51:e1:af:
41:9d:3a:d4:9d:03:f5:99:c6:04:3b:75:a8:e6:cd:a3:c3:7a:
c0:4d:e4:de:25:68:b7:d7:fc:68:21:68:e8:e5:26:1b:71:42:
f2:ac:e4:e5:22:22:37:dc:51:9f:41:aa:3c:38:fa:75:5d:4c:
98:70:69:47:ea:88:91:c2:d8:63:b3:fb:4d:6e:ce:09:3a:aa:
e8:b7:80:70:32:45:c0:5c:02:f9:4b:51:0d:b0:ba:8a:60:35:
4c:f7:32:07:c3:5a:fd:b6:8d:2a:c8:02:52:7f:b6:c7:00:71:
32:c0:68:2e:7d:5e:d1:12:29:74:d5:c4:50:3f:54:ae:2c:75:
78:ea:fc:04:36:ea:e9:1e:7d:b1:d9:09:d1:91:94:71:dd:0f:
c6:c3:27:fa:0f:4f:d8:c4:34:7e:98:23:f3:fc:f9:7a:0c:d3:
bb:42:5e:2d:f5:2f:0b:6c:fb:30:37:a3:67:f7:f9:e2:d2:dd:
bd:54:a9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:13:54 2026 by rpki-client