
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier: yqQu8UHIqIgNDgpDiFzYeS4VlnKu89/bFLBAA0N8snA=
Subject key identifier: 3E:ED:A4:2A:A8:99:15:89:EA:86:9F:B0:D7:3D:E5:C5:F1:B5:B3:C0
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial: 0BDE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number: 0C84
Signing time: Sun 20 Sep 2026 18:58:24 +0000
Manifest this update: Sun 20 Sep 2026 18:58:24 +0000
Manifest next update: Sun 27 Sep 2026 18:58:24 +0000
Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: KBGwLFnhgjOlA9ZopvMHdiggLEfn1tiAM26Imlb+Wd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Validity
Not Before: Sep 20 18:58:24 2026 GMT
Not After : Sep 27 18:58:24 2026 GMT
Subject: CN=6ab02cd0-c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:22:c4:75:3b:98:8a:24:ed:bb:44:60:16:
74:de:c6:f6:f7:98:e3:8e:60:7f:4d:ca:ba:c6:4d:
e3:7f:55:ba:b0:cf:56:68:e7:b5:11:8f:a8:27:ca:
ff:9b:15:c9:97:b6:0d:e4:1f:e9:2a:53:dd:c7:a2:
3f:3d:8f:8d:08:76:e3:3d:ba:8f:d5:87:2b:c8:fe:
02:ae:ad:99:77:4e:42:ce:93:6c:27:13:3c:ef:87:
0f:78:77:16:b2:07:d6:e1:87:f5:6d:f6:75:82:a0:
34:ef:36:16:e2:c6:f7:81:d1:9f:ed:e8:a5:a7:d1:
93:04:6a:8f:17:5b:43:2b:c0:07:8c:5c:cd:59:a2:
fb:f1:69:ad:38:e1:25:74:5b:76:9a:db:8d:f5:8d:
c4:f7:6a:88:37:e0:53:dc:92:e8:26:b0:23:d6:79:
28:a8:b2:1f:0a:59:8c:d1:72:c3:df:b6:bd:14:e2:
62:4a:e7:a3:9c:d3:31:13:bc:bd:40:55:75:29:55:
25:34:71:05:4e:82:7e:45:09:5e:bc:12:cd:c4:da:
f0:ea:05:15:fe:e0:32:ec:f5:47:e0:e6:28:ee:7b:
5e:78:8b:9a:e4:da:3b:af:af:6c:01:c0:71:5f:9a:
ac:a4:01:c2:3e:67:86:39:a6:fa:e5:be:38:9b:40:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:ED:A4:2A:A8:99:15:89:EA:86:9F:B0:D7:3D:E5:C5:F1:B5:B3:C0
X509v3 Authority Key Identifier:
keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:98:97:37:53:5a:ba:21:4a:e7:ef:3d:09:c5:66:77:e7:
7a:e6:cd:06:21:4e:d9:85:db:ce:93:bc:2e:cc:b7:64:48:5e:
b1:85:50:05:3b:c4:af:e7:c5:32:e1:74:8a:d8:5e:24:7d:a4:
91:c5:1c:81:69:bb:10:e8:15:fc:23:97:9c:4c:4e:54:1b:7a:
48:e8:d5:7f:a9:75:4d:23:9c:f8:9d:d4:94:ff:71:09:d7:98:
48:ae:84:76:ce:b7:db:d4:e9:e9:8e:26:a6:55:6b:1d:af:b9:
19:2d:b8:b5:7d:2a:bd:fd:92:89:98:ac:39:f6:2a:4c:7d:40:
3b:d2:14:b7:12:1e:f1:38:62:42:55:67:3b:cb:1f:fd:33:5b:
94:1e:35:83:8a:3e:75:1b:5e:71:17:9a:dc:e5:6b:55:cb:d2:
bc:5b:48:85:a8:ee:a1:16:d7:1c:bf:a9:c9:d2:e9:75:79:b9:
a9:87:41:28:39:36:75:25:ce:57:3c:5a:93:2c:a0:84:24:df:
21:27:57:a5:8e:ba:e6:f8:e8:cc:f6:df:49:ab:a9:e8:0b:e1:
f6:dc:b5:5b:3c:22:39:5d:58:d4:1c:7b:79:c7:60:4c:37:68:
af:00:8e:95:b8:cd:18:5a:06:b2:9c:ff:6d:7f:bb:50:2c:4b:
54:31:be:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:03:50 2026 by rpki-client