
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier: CAjjcZzo7w8Q588WfGD8h664+WPWnVjxPc7WGHELr+8=
Subject key identifier: 3C:7A:56:A0:AF:C7:BA:C6:F5:49:67:FF:34:D8:44:A7:3C:61:B4:4A
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial: 0D74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number: 0D35
Signing time: Tue 28 Jul 2026 18:33:05 +0000
Manifest this update: Tue 28 Jul 2026 18:33:05 +0000
Manifest next update: Tue 04 Aug 2026 18:33:05 +0000
Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: J43nXrHO/nSL+LCufCbQoV+ml9VKDITdcgliYS3xv34=)
2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: STPsoHykGH883jZd7PHWkCRzW28Vwl2tuDcKNWuClEM=)
3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: GxHO9vhkZZ6yMHc2121mln0db/uLLdFiDdhvsMD2Mh4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3444 (0xd74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Validity
Not Before: Jul 28 18:33:05 2026 GMT
Not After : Aug 4 18:33:05 2026 GMT
Subject: CN=6a68f5e1-bfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:43:92:35:58:fd:c5:23:30:82:46:50:29:
42:29:f5:e0:17:42:fa:17:97:3f:fb:7d:98:e5:b5:
56:17:93:12:3d:b7:84:3a:87:b1:22:62:20:c3:58:
77:1d:2a:cb:c2:0b:14:13:b8:18:f7:f8:fa:de:50:
99:45:dc:72:e2:ba:a8:d5:0a:e3:af:ff:5e:75:0a:
ac:72:ad:eb:85:bf:3a:79:96:d7:d5:8b:88:e4:b3:
66:87:f0:f9:aa:6b:15:d0:fb:c5:7a:c0:f4:44:cc:
e6:ea:47:fb:2f:21:23:7e:9c:4d:bb:86:16:6d:8b:
ae:f3:32:78:ac:29:4a:98:98:4f:73:63:3e:49:12:
9e:fe:0d:26:d1:a6:cb:49:bd:c7:3e:de:c7:a8:b2:
c7:8b:ad:94:8f:67:d7:c5:ef:6e:cf:c4:c5:54:fd:
86:da:a6:84:08:75:44:9c:a2:1f:c3:52:36:c2:96:
cd:d8:d1:3b:ba:2c:ec:8d:f2:21:55:b7:99:ae:73:
da:65:04:ba:31:51:4f:bc:2c:71:57:1f:6b:c3:42:
2c:50:a3:6e:d0:4f:26:8b:42:54:74:26:e8:e8:64:
0e:4f:9c:cf:dc:91:cf:e2:ff:73:26:5c:05:d5:ce:
2c:56:2f:e7:85:59:74:5e:db:0e:fd:a6:37:3a:3f:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:56:A0:AF:C7:BA:C6:F5:49:67:FF:34:D8:44:A7:3C:61:B4:4A
X509v3 Authority Key Identifier:
keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:b3:7a:b1:c7:32:d2:4c:be:58:26:65:b2:72:c1:f3:53:17:
8c:90:c8:dc:b5:91:fa:f4:35:62:9c:36:17:42:f9:d8:4c:c3:
55:ec:1e:02:88:ce:28:a4:0e:ed:15:42:9e:66:c6:45:9d:8f:
f6:59:b6:7e:70:79:2c:9b:23:d3:a9:67:5d:3f:c8:b1:2c:b5:
fc:c2:93:5a:82:f8:69:32:c1:a1:54:38:10:7c:fe:50:a4:9d:
8f:9d:3f:1f:fb:80:a9:51:37:48:b9:55:24:03:1b:51:0d:77:
ab:11:ec:29:cd:e1:88:3d:e2:f1:dc:ae:b4:6d:69:45:e9:0a:
5e:92:18:c8:12:97:81:aa:05:73:6c:c0:5f:fa:97:27:2c:6d:
ec:1c:61:81:68:3f:f4:b3:e5:95:82:3c:00:10:35:c4:24:da:
c7:68:3a:01:8a:cb:f7:d9:19:13:00:9d:9c:32:5a:ee:13:c8:
38:08:93:ce:8c:0c:03:50:93:f3:23:49:4a:cf:ff:69:99:e3:
21:e9:04:7c:de:b1:ac:4e:dd:9c:43:ef:ec:09:f9:9e:a2:42:
f6:15:0f:b0:be:0d:8b:18:30:d4:c4:35:31:50:55:14:f7:df:
69:e4:5a:dd:34:e8:a4:5a:cf:f3:6f:63:f6:06:b0:c1:5b:ae:
5d:be:6e:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkzRUUxMTAvBgNVBAUTKEZDNTZFN0UwNzZGN0ZEMEE4NEJFQ0M5QzNFMjI5MTQy
QTA5MDFGRUMwHhcNMjYwNzI4MTgzMzA1WhcNMjYwODA0MTgzMzA1WjAYMRYwFAYD
VQQDEw02YTY4ZjVlMS1iZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5sxDkjVY/cUjMIJGUClCKfXgF0L6F5c/+32Y5bVWF5MSPbeEOoexImIgw1h3
HSrLwgsUE7gY9/j63lCZRdxy4rqo1Qrjr/9edQqscq3rhb86eZbX1YuI5LNmh/D5
qmsV0PvFesD0RMzm6kf7LyEjfpxNu4YWbYuu8zJ4rClKmJhPc2M+SRKe/g0m0abL
Sb3HPt7HqLLHi62Uj2fXxe9uz8TFVP2G2qaECHVEnKIfw1I2wpbN2NE7uizsjfIh
VbeZrnPaZQS6MVFPvCxxVx9rw0IsUKNu0E8mi0JUdCbo6GQOT5zP3JHP4v9zJlwF
1c4sVi/nhVl0XtsO/aY3Oj9O4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDx6VqCv
x7rG9Uln/zTYRKc8YbRKMB8GA1UdIwQYMBaAFPxW5+B29/0KhL7MnD4ikUKgkB/s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTNFRS82ODU4RjY4ODBF
MDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19RcUV2c3ljUGlLUlFxQ1FI
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19GYm40SGIzX1FxRXZzeWNQaUtSUXFDUUgtdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTNFRS82ODU4RjY4ODBFMDIxMUVBQTlCMURCNjVDNEY5QUUwMi9fRmJuNEhiM19R
cUV2c3ljUGlLUlFxQ1FILXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg7N6sccy0ky+WCZlsnLB81MXjJDI3LWR+vQ1Ypw2F0L52EzDVeweAojOKKQO
7RVCnmbGRZ2P9lm2fnB5LJsj06lnXT/IsSy1/MKTWoL4aTLBoVQ4EHz+UKSdj50/
H/uAqVE3SLlVJAMbUQ13qxHsKc3hiD3i8dyutG1pRekKXpIYyBKXgaoFc2zAX/qX
Jyxt7BxhgWg/9LPllYI8ABA1xCTax2g6AYrL99kZEwCdnDJa7hPIOAiTzowMA1CT
8yNJSs//aZnjIekEfN6xrE7dnEPv7An5nqJC9hUPsL4Nixgw1MQ1MVBVFPffaeRa
3TTopFrP829j9gawwVuuXb5u+A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 18:14:06 2026 by rpki-client