
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier: sB1kpmlY9Wz5CwFRUM5H7NYqnelTaye1G6TcJcm33HY=
Subject key identifier: F3:D5:DB:B6:BF:7A:3F:B4:EF:06:83:95:55:F8:60:2B:37:9C:E2:2B
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial: 122A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number: 1220
Signing time: Fri 12 Jun 2026 17:06:01 +0000
Manifest this update: Fri 12 Jun 2026 17:06:00 +0000
Manifest next update: Fri 19 Jun 2026 17:06:00 +0000
Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: FvxOmQ39TMtxJmyiSITqJph+UTMN2JJSlenIfLIdx6s=)
2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4650 (0x122a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Validity
Not Before: Jun 12 17:06:00 2026 GMT
Not After : Jun 19 17:06:00 2026 GMT
Subject: CN=6a2c3c79-7d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:43:2d:96:3b:f9:a5:23:da:8f:6e:8c:cc:
e8:aa:84:f9:c9:95:78:ff:36:a6:7e:9e:9b:78:d5:
9b:88:65:29:a4:d8:c7:32:3f:10:f4:15:47:23:2e:
4c:04:4a:00:4e:ab:fc:49:4c:80:33:8b:c8:aa:8c:
ed:d8:3d:5a:6c:6e:57:16:76:5e:e5:8a:72:56:84:
77:db:a8:da:0d:97:06:57:6f:a3:b8:f4:e9:31:ac:
fb:31:6c:0b:e5:75:bb:96:6a:8e:2e:15:1e:c2:b8:
24:f3:ab:b9:3a:9b:e3:02:b0:dd:35:06:f4:83:66:
34:21:52:27:4a:b6:da:d8:24:0f:11:81:b0:94:72:
c1:83:8c:0b:2a:26:5f:be:e7:de:8a:41:2c:76:e0:
1a:d1:29:ce:56:73:0f:d8:1b:58:d5:c4:05:8e:fd:
c8:c2:2a:97:9b:46:a0:f6:46:8b:ff:54:fd:a8:30:
0e:d8:95:a7:d7:64:26:f3:35:99:ee:b7:e9:af:0e:
cb:4a:cf:69:c4:40:ba:b8:54:e6:d7:0a:f7:5f:f4:
0f:dc:8a:8c:6c:95:47:64:a5:38:3b:0e:21:1a:67:
3d:4e:c0:1a:f7:7c:14:1d:24:db:30:29:fb:9e:66:
3f:cd:01:ea:3b:a4:29:fe:f3:0d:07:5a:2f:6d:8c:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D5:DB:B6:BF:7A:3F:B4:EF:06:83:95:55:F8:60:2B:37:9C:E2:2B
X509v3 Authority Key Identifier:
keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:89:b6:cd:14:f6:79:20:22:0e:1e:e5:f0:2a:08:fc:8f:77:
d5:5f:9e:99:f2:af:22:f5:18:76:5f:a6:b1:4e:ee:8b:2e:50:
ab:e2:5a:70:94:e8:3d:7e:9f:f7:27:23:6e:76:3e:c9:a8:af:
f9:4d:3b:f6:b3:a8:84:5a:ff:f2:e9:56:aa:35:9d:46:c5:70:
82:e3:72:2a:24:09:e7:81:27:69:0d:db:8f:42:89:07:19:69:
c3:26:e9:da:33:c1:86:1f:7e:bc:dd:1b:21:ee:20:df:f3:5f:
ea:16:da:14:79:88:e5:29:a4:b4:5e:fd:34:20:65:f2:53:fd:
1b:46:bf:3d:a6:8f:74:20:88:fb:8e:a6:b9:de:49:91:a6:3f:
f1:52:86:bf:37:ff:4d:40:63:c4:cd:f6:1f:d7:8a:c1:ce:25:
2f:2e:fb:94:39:e6:b0:99:e4:46:b8:3d:ca:63:9d:b6:b0:79:
35:c7:4c:19:a2:0a:9b:42:ba:f5:86:cb:5c:c0:86:cc:79:44:
4c:29:08:a7:02:34:24:4e:ce:e1:84:56:c2:da:9e:94:47:33:
2d:19:7a:85:a0:75:21:ce:df:9b:ad:f5:98:d1:83:01:bc:92:
f2:82:20:a0:af:89:b4:a3:85:29:b4:41:2b:22:51:84:93:29:
2e:69:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:46:33 2026 by rpki-client