
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier: 63uhEG0D9T46zSKq1wiMpZDInqwSYjkw1egqxiHq29s=
Subject key identifier: FA:C7:04:12:C9:92:90:A3:30:D1:8D:79:0B:C8:73:92:80:FF:7D:F7
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial: 1268
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number: 125E
Signing time: Mon 12 Oct 2026 17:10:24 +0000
Manifest this update: Mon 12 Oct 2026 17:10:24 +0000
Manifest next update: Mon 19 Oct 2026 17:10:24 +0000
Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: 4WkFGizq+GNl7a+mG9H0Cad6al+s1+q3GamJyhVvqb8=)
2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 17:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4712 (0x1268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Validity
Not Before: Oct 12 17:10:24 2026 GMT
Not After : Oct 19 17:10:24 2026 GMT
Subject: CN=6acd1480-1325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:b1:61:b8:9f:d2:e6:b1:77:1e:ed:1a:bc:
c6:a5:0a:0d:34:72:88:d3:da:12:81:cb:84:19:56:
9c:25:b0:38:95:ba:ff:a0:d2:30:35:c1:4d:5f:61:
f7:b0:9b:80:68:c1:3c:ed:2d:b0:e9:22:fc:9a:e5:
ff:ea:85:7b:6a:f5:45:23:d3:54:6d:cb:c9:1e:e8:
70:80:4a:82:6a:0f:23:59:96:e4:8b:bf:ba:6c:bc:
c5:68:2e:7d:72:55:0e:84:3a:f6:15:20:5b:a7:f7:
eb:0a:4f:ee:1a:e4:ba:22:c1:f0:03:4f:07:98:51:
13:ea:ab:c6:2e:c1:0e:56:85:fd:29:35:43:14:2c:
26:41:50:7a:30:eb:c8:88:09:35:a6:26:62:84:9c:
94:55:30:e1:6e:af:b2:8a:46:94:53:8c:50:13:a3:
45:4f:35:c9:7f:d4:a8:0c:3e:70:6b:b4:2e:07:d8:
80:8a:a2:a0:c4:e3:be:1d:73:4f:a9:13:13:e6:ef:
f7:3a:3d:4e:d1:d1:49:4b:15:9b:36:51:3e:83:8d:
ee:54:9d:88:50:98:53:55:f0:f3:dc:60:48:e6:eb:
ba:5f:66:be:33:8f:ba:7e:76:c3:9c:7c:32:9c:45:
30:e4:fc:29:c5:1e:72:e7:e2:d0:b1:f7:08:6d:21:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C7:04:12:C9:92:90:A3:30:D1:8D:79:0B:C8:73:92:80:FF:7D:F7
X509v3 Authority Key Identifier:
keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:3a:54:4b:0c:cd:f0:c7:2c:5e:b2:79:d5:fb:8e:29:43:55:
25:2b:af:e1:7f:d6:3c:3f:4b:73:24:73:be:69:a1:27:50:6f:
ea:13:f0:2d:b3:77:61:38:4e:2c:06:36:9c:e5:f7:83:f5:9b:
58:f1:11:41:28:a8:dd:f2:e4:db:53:09:c1:ee:81:55:18:12:
d2:31:d0:7f:7f:64:7d:4c:51:3b:4d:50:9b:35:b1:6a:a3:cc:
05:ed:28:67:04:47:01:84:56:26:e2:20:a7:fc:e9:84:08:0b:
8d:3a:fe:76:98:d4:9b:20:7c:f1:71:73:88:4c:46:80:eb:d3:
10:be:f7:45:14:a3:15:9f:d8:1f:be:c3:e3:68:1a:b3:1c:51:
a0:4b:42:67:a6:74:2d:ba:69:68:e5:3e:e4:79:6b:37:07:f2:
09:20:de:8d:a2:f6:f5:3f:f1:29:e1:f7:39:a3:bb:c1:3b:30:
c7:67:ac:43:ba:da:9f:b0:19:17:7c:64:8c:1f:19:a6:5a:da:
70:59:42:5c:bb:48:85:82:c9:ca:48:4c:29:fa:8d:01:f3:33:
cb:a5:cb:48:2c:39:8b:a3:80:40:4e:04:f6:28:77:a0:cc:6e:
70:7d:6b:76:93:97:5e:32:ca:4b:b4:4c:8a:87:6f:a1:75:69:
1d:fa:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:19:33 2026 by rpki-client