
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier: Pu6EiM6aTqoOPkgrDUTs2ivxUEM+iNwHd2CY7BZ5ts0=
Subject key identifier: 65:DC:13:15:9B:D7:44:19:39:1F:35:7C:50:32:98:74:47:53:FB:59
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial: 1241
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number: 1237
Signing time: Tue 28 Jul 2026 17:13:09 +0000
Manifest this update: Tue 28 Jul 2026 17:13:09 +0000
Manifest next update: Tue 04 Aug 2026 17:13:09 +0000
Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: Wm4E04HIxNOTr2N9hgg/ES1F0QUlr4QieBJ2rcW0c3w=)
2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4673 (0x1241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Validity
Not Before: Jul 28 17:13:09 2026 GMT
Not After : Aug 4 17:13:09 2026 GMT
Subject: CN=6a68e325-dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:68:35:80:b5:4a:38:0f:48:25:a5:1a:96:
cf:53:70:f9:7f:af:9a:63:e3:8a:22:ea:0f:fc:cd:
98:9f:ea:ea:81:60:09:c8:a6:93:b9:5a:a7:83:02:
bb:64:2f:d7:c4:88:74:af:6d:96:51:7a:8e:3e:3f:
32:73:5e:17:3b:c1:67:db:bb:07:cd:3b:ef:2f:dd:
51:7d:1d:a1:9c:aa:4c:98:aa:69:6c:91:51:39:c1:
a8:1a:a1:d2:02:b2:cd:b3:d9:39:32:9a:d5:76:8e:
77:4b:c0:d5:36:fb:35:3c:68:cd:45:e5:ef:69:2b:
86:3e:96:df:b3:96:c7:40:56:5d:5e:e4:4b:2f:d5:
b1:6d:cb:85:fd:39:a7:45:11:25:40:fe:86:a3:d6:
66:80:79:96:53:63:b6:b8:5e:d2:83:c2:8e:89:18:
1f:bc:73:e4:de:b3:bf:7c:ef:e7:64:80:e6:2e:40:
97:47:cc:e6:d6:d0:2d:2f:79:96:17:6f:c1:ac:ab:
d2:e9:94:0d:5d:3c:1d:87:0a:8e:6c:1f:e4:21:c4:
60:7e:53:5f:cf:fe:3b:09:51:27:3b:ca:be:58:fd:
59:4d:b5:77:a4:43:4b:63:05:ff:b9:8a:17:9a:ad:
46:37:31:76:b1:ae:df:3a:63:2b:9e:8d:78:76:5e:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:13:15:9B:D7:44:19:39:1F:35:7C:50:32:98:74:47:53:FB:59
X509v3 Authority Key Identifier:
keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:df:5b:bb:af:4d:48:8f:2a:f7:8c:a7:a5:e0:eb:7e:24:
5b:6a:6f:32:be:59:1a:01:c9:dd:c9:b2:67:aa:64:39:75:6f:
de:db:1f:00:8d:22:e3:3a:85:d3:eb:d0:40:74:d1:7e:38:4c:
d8:bc:0c:ef:42:64:3e:a6:e3:45:47:99:28:30:27:5d:83:db:
be:f8:8f:26:ef:b7:28:15:02:84:33:3e:fd:1e:ca:07:3e:97:
d1:c4:a5:de:51:92:c8:07:8f:d4:2f:f3:df:87:03:74:b7:71:
02:c6:df:43:90:5a:15:b0:a5:92:a5:d0:dd:e5:46:8c:3a:6e:
dd:e0:0a:e7:91:89:75:f4:e4:15:4c:da:e6:a5:e7:84:56:94:
6a:07:95:84:bd:76:0e:0c:29:3b:cf:76:3f:22:67:bb:91:9c:
2a:ad:a7:f2:b2:27:d1:74:27:85:12:a1:61:88:c1:4d:54:cc:
6e:14:e3:45:77:62:55:07:73:98:73:a4:93:74:e9:41:3e:02:
58:f7:06:8e:e4:a8:bd:f7:f8:18:b9:46:01:34:80:82:ee:b2:
97:e9:4d:4d:b4:14:41:84:98:ef:ef:b2:1e:6a:6b:b3:87:af:
de:48:e8:b3:ce:dc:47:88:96:12:8f:e3:40:9e:ef:5e:7a:eb:
5c:e7:0b:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD
RDBENTk4MUEwHhcNMjYwNzI4MTcxMzA5WhcNMjYwODA0MTcxMzA5WjAYMRYwFAYD
VQQDEw02YTY4ZTMyNS1kY2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvGpoNYC1SjgPSCWlGpbPU3D5f6+aY+OKIuoP/M2Yn+rqgWAJyKaTuVqngwK7
ZC/XxIh0r22WUXqOPj8yc14XO8Fn27sHzTvvL91RfR2hnKpMmKppbJFROcGoGqHS
ArLNs9k5MprVdo53S8DVNvs1PGjNReXvaSuGPpbfs5bHQFZdXuRLL9WxbcuF/Tmn
RRElQP6Go9ZmgHmWU2O2uF7Sg8KOiRgfvHPk3rO/fO/nZIDmLkCXR8zm1tAtL3mW
F2/BrKvS6ZQNXTwdhwqObB/kIcRgflNfz/47CVEnO8q+WP1ZTbV3pENLYwX/uYoX
mq1GNzF2sa7fOmMrno14dl6FDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXcExWb
10QZOR81fFAymHRHU/tZMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0
RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk
eTNkSlBnZDVyYVRORFZtQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfibfW7uvTUiPKveMp6Xg634kW2pvMr5ZGgHJ3cmyZ6pkOXVv3tsfAI0i4zqF
0+vQQHTRfjhM2LwM70JkPqbjRUeZKDAnXYPbvviPJu+3KBUChDM+/R7KBz6X0cSl
3lGSyAeP1C/z34cDdLdxAsbfQ5BaFbClkqXQ3eVGjDpu3eAK55GJdfTkFUza5qXn
hFaUageVhL12DgwpO892PyJnu5GcKq2n8rIn0XQnhRKhYYjBTVTMbhTjRXdiVQdz
mHOkk3TpQT4CWPcGjuSovff4GLlGATSAgu6yl+lNTbQUQYSY7++yHmprs4ev3kjo
s87cR4iWEo/jQJ7vXnrrXOcLXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:11 2026 by rpki-client