
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier: vThBwvbwkQHy08La7Kk5fc9mXgK8dUpjUo0n1LOkJ+s=
Subject key identifier: EA:1C:07:F8:0C:6F:E0:23:E0:31:4C:12:8F:4E:BF:93:A4:54:A6:E8
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial: 0BAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number: 0C1B
Signing time: Fri 12 Jun 2026 19:08:06 +0000
Manifest this update: Fri 12 Jun 2026 19:08:05 +0000
Manifest next update: Fri 19 Jun 2026 19:08:05 +0000
Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: 8J2k9wGyOt99GMsDdKt0Fq07UkhtkOa1twVpZ/VQlgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 19:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Validity
Not Before: Jun 12 19:08:05 2026 GMT
Not After : Jun 19 19:08:05 2026 GMT
Subject: CN=6a2c5915-034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:13:45:c2:1b:6e:5f:1a:21:75:61:4f:02:
85:8a:77:dd:69:ac:fa:49:5f:e1:1d:c2:d0:af:aa:
f1:a0:74:e8:66:26:98:d9:32:78:42:ab:93:05:aa:
ed:5c:94:a7:d5:ed:be:c6:ba:ef:c2:89:c8:91:1f:
ab:66:a4:14:38:18:0d:16:44:86:99:94:27:a3:fd:
63:5a:f2:23:98:39:a2:10:ad:5a:b2:51:5d:1b:a4:
18:53:4d:32:7c:c5:4b:f1:f1:2e:83:c0:50:55:77:
be:c3:8c:bb:c5:d7:78:75:08:36:e4:c0:cd:e2:bb:
3e:1a:ab:93:55:00:f0:70:05:d5:7e:39:48:00:52:
45:24:ae:9c:6e:9c:3b:bb:f3:29:04:ce:ba:68:50:
8a:bf:41:25:f7:7a:1a:9b:25:17:8f:e6:7b:ab:3e:
4a:06:61:ba:c7:ec:0c:ca:7a:0e:c0:fa:c7:86:bb:
c3:8a:72:73:07:0e:4f:e3:1d:f4:ec:db:64:0e:d3:
d1:ff:19:f3:c6:6d:90:d9:20:3e:03:9a:57:62:33:
8b:a8:5e:29:ae:8c:a4:30:fe:a4:30:d0:cb:28:75:
4b:ee:13:23:19:42:15:06:3c:44:d4:f0:57:50:3d:
11:c9:ad:95:0f:b2:c5:4b:31:10:45:56:21:2a:0d:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1C:07:F8:0C:6F:E0:23:E0:31:4C:12:8F:4E:BF:93:A4:54:A6:E8
X509v3 Authority Key Identifier:
keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7f:41:12:ad:bf:81:3d:02:38:9d:de:d1:11:27:7d:c7:56:
2c:68:7f:b5:ce:aa:7c:5c:c8:46:f5:83:4e:6b:1c:dc:15:68:
73:22:7d:c7:cc:9d:53:01:b9:6a:d9:a4:61:1d:c5:3f:ce:e6:
a0:19:e8:bc:9d:1a:92:fa:cf:aa:67:5e:f3:df:b6:d9:0f:81:
5b:96:86:5d:5d:c7:15:53:e0:97:ca:60:95:dc:e1:12:32:38:
b9:1b:48:0a:95:aa:b8:c1:81:a1:55:d3:e8:8c:e6:47:f8:1e:
56:41:45:34:c2:ae:ca:01:34:20:db:9f:7c:f5:1b:c4:a0:8f:
dd:80:97:ce:5e:7f:5b:1d:05:78:71:5b:49:37:35:ea:fc:c7:
b4:2c:18:2c:52:7b:fb:e1:71:52:ca:98:c0:47:cf:d3:62:92:
e3:86:cf:dd:c9:60:05:56:56:92:f5:72:06:47:31:6b:b1:14:
6a:50:2e:34:b3:d2:d6:d2:a1:f1:6c:3e:5e:43:e1:83:92:ce:
39:cf:1a:59:d9:9a:56:03:e9:ed:e1:17:9f:41:14:13:61:e8:
8e:8f:29:19:c1:16:f4:68:20:0c:45:9a:2a:e2:fb:8c:bd:84:
8a:80:f7:69:14:fd:c3:3c:67:02:c8:f5:96:87:0d:45:ae:94:
8e:19:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:41:56 2026 by rpki-client