
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
File: fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft (raw, json)
Hash identifier: s4skEyYaD6c+jrza4jShXUdMcscSZUhwpUq7REiZbiw=
Subject key identifier: EF:66:8B:B8:C0:84:2E:3E:B5:2A:7C:6A:A2:A2:95:73:8F:43:F9:1A
Authority key identifier: 7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19
Certificate issuer: /CN=A91D09BC/serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
Manifest number: 01B8
Signing time: Fri 25 Sep 2026 05:09:50 +0000
Manifest this update: Fri 25 Sep 2026 05:09:49 +0000
Manifest next update: Fri 02 Oct 2026 05:09:49 +0000
Files and hashes: 1: fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl (hash: 6T/rCiATE/YYmWMLWjw0zZXCqAUeELIKYzz0/ZtRM2c=)
2: 53019A023C7B11F1B0CB2EC97EEE528E.roa (hash: M3iMcgHJGqo7ewXbliP4Rc0morYWpPz1VYKQET0JHNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl
rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 05:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D09BC, serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
Validity
Not Before: Sep 25 05:09:49 2026 GMT
Not After : Oct 2 05:09:49 2026 GMT
Subject: CN=6ab6021e-8fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:ae:2c:b5:73:0d:13:3a:e3:79:d1:d7:51:
c9:3f:5c:cd:e1:a9:0f:3f:b5:e6:b1:fb:74:bb:f0:
a6:e2:e6:46:c8:9a:d9:c8:26:7d:c2:39:fa:fa:01:
dc:e7:b7:0f:16:a0:d1:05:c1:31:12:3f:71:94:71:
9e:8d:f5:2b:b6:76:94:b2:2e:51:81:a3:f1:98:fd:
6c:47:c2:86:b8:6e:44:50:c9:00:10:d5:c7:1e:06:
2e:4c:6d:40:f3:9b:7a:5d:83:e3:59:78:6c:85:d1:
01:66:f0:3b:2f:00:f7:2d:ee:52:e0:be:83:db:87:
b2:7a:52:60:dc:b3:4a:57:e2:55:96:ea:cd:dc:ec:
22:9b:2d:63:fa:94:fa:77:3b:3d:d3:a7:9d:27:16:
21:9e:36:ba:51:7b:d8:9a:04:51:a7:3f:0b:0f:26:
c7:04:9a:19:24:44:57:c5:f9:07:22:2b:26:f9:52:
c0:b2:73:50:eb:86:66:d6:a1:8f:30:ac:54:ef:71:
a7:a1:9c:8e:e8:7b:cd:d7:d8:9b:8e:5f:12:3c:1e:
5f:79:f5:f7:fb:1b:9c:8f:c6:90:e9:dd:90:5e:7c:
df:39:be:b2:ec:49:35:75:54:b2:67:3f:3e:4d:79:
40:08:3a:e9:6e:75:16:1a:c6:c1:62:ef:17:6e:d0:
39:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:66:8B:B8:C0:84:2E:3E:B5:2A:7C:6A:A2:A2:95:73:8F:43:F9:1A
X509v3 Authority Key Identifier:
keyid:7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:02:71:90:af:e9:1c:e3:f1:4e:76:20:a0:12:5c:bb:cf:4b:
d4:30:1e:37:fb:3b:8f:af:e5:90:c5:c5:6b:5f:2b:57:c3:27:
9e:17:a7:4a:7a:8c:9d:60:a0:0d:71:b7:2c:d1:73:cd:bf:68:
9e:3c:f4:e6:e0:f2:11:ef:0c:18:3d:d9:f3:e6:35:85:d0:32:
10:57:9c:72:96:15:e1:c3:38:90:e5:38:6f:b4:6a:4a:af:20:
e0:b9:cc:a0:1f:ea:5d:62:e6:1d:d7:d7:38:5e:fb:93:61:91:
70:bb:de:02:2f:aa:11:e1:3b:c6:de:f5:5c:9e:99:fd:3b:50:
34:4b:56:b3:a0:c5:6d:b0:9d:75:a1:c6:1c:19:47:24:66:4b:
f7:6e:0c:0f:5c:1b:a6:30:0e:73:4d:02:a9:2b:e0:05:25:65:
3e:45:f5:ae:a2:25:ca:3d:4c:a2:49:98:cb:b2:33:74:ec:98:
06:58:ff:28:08:2a:8e:e0:af:fe:97:75:c5:de:fd:98:c9:11:
39:d0:f7:0a:27:28:e1:c6:65:75:f9:b2:09:ef:d8:28:bf:aa:
07:1f:dc:e3:88:cc:f0:71:30:ad:33:04:98:20:b1:39:b6:1e:
57:4c:12:e7:fe:43:83:66:cd:03:7e:d2:49:36:d0:45:d6:28:
c7:1e:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:49 2026 by rpki-client