
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: Te1m5k+QYqPdXhqYkkdYVLlHM5szofsIxLROyPsJppY=
Subject key identifier: AA:1C:BC:B4:74:2B:4E:C0:5C:38:06:9E:6A:CD:48:38:D7:1C:AA:14
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 094B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 08E6
Signing time: Sat 28 Feb 2026 20:55:34 +0000
Manifest this update: Sat 28 Feb 2026 20:55:33 +0000
Manifest next update: Sat 07 Mar 2026 20:55:33 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: 9Ly6KjSsLhxLgPHpzdscT3qf2A9Dzlh+xklmIfrYupA=)
2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=)
3: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=)
4: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=)
5: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=)
6: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=)
7: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: ygq1dkv+uF4QDS+bggz98LoWciehSBzYRj/fw8Od03I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379 (0x94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Feb 28 20:55:33 2026 GMT
Not After : Mar 7 20:55:33 2026 GMT
Subject: CN=69a35646-6123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:8d:cf:46:9f:f6:71:9f:cb:67:cf:61:30:
38:8a:cb:19:a6:0f:85:93:29:12:5a:b1:ad:e0:a7:
f4:df:ab:ba:f6:0c:2c:b5:a4:6d:cc:97:bc:89:eb:
02:6a:79:51:86:2f:72:9d:68:77:a0:c3:c1:72:77:
78:b2:61:c7:55:b1:2b:eb:d2:26:78:f2:f8:bd:ae:
6d:52:cb:4e:8f:b0:31:1c:a5:3d:ce:a5:ab:a6:7a:
52:6b:87:15:61:e0:81:fc:e7:58:79:a0:04:fd:51:
53:1f:52:2a:25:75:06:ef:a2:85:be:e4:b8:b4:0d:
b6:17:22:be:51:e8:e8:13:c1:60:34:50:72:20:4f:
e6:f8:09:06:a4:72:e0:9b:72:bf:02:dc:e9:56:36:
2b:82:c3:38:e0:50:4c:58:d2:bb:2c:ab:00:7d:93:
10:68:ec:11:f7:4a:90:58:63:ec:28:80:cf:f4:f5:
a2:b1:ee:31:b8:5a:4c:20:c7:46:71:42:77:33:42:
24:4c:04:71:17:6e:19:0e:c8:d9:f9:72:85:34:c1:
14:b7:47:83:c7:f4:ad:16:f1:54:99:a7:b2:6a:6b:
cc:56:88:47:b6:1a:60:99:fd:01:09:b5:b7:6f:b2:
41:78:70:eb:50:89:9f:e0:78:50:04:50:22:91:c7:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:BC:B4:74:2B:4E:C0:5C:38:06:9E:6A:CD:48:38:D7:1C:AA:14
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2d:3c:dc:73:42:26:94:d3:e4:cf:75:3e:43:1e:81:b5:c9:
98:3b:ba:5e:0f:08:3b:f7:6d:4b:4d:78:b1:01:89:a1:30:58:
e7:e0:4b:4e:9a:24:1c:a4:c8:a3:cb:55:bb:d7:cc:a4:9d:b0:
05:ad:c9:29:a5:90:b2:ff:df:6f:9a:b1:de:3c:4e:ac:45:73:
11:f1:18:41:b7:42:1f:7b:46:3d:a3:9a:e8:11:44:1a:12:53:
73:4b:25:73:08:30:2d:86:a8:b0:38:47:83:65:96:4d:cd:fb:
30:c4:13:81:41:f3:cb:13:c7:9b:66:82:e4:0c:c8:b3:a7:97:
ef:e8:83:4f:2f:7a:3f:dd:d3:ab:fd:3a:a3:e1:fe:67:62:28:
cf:79:80:6e:a1:1f:f7:a8:3f:8a:31:4c:a4:b1:49:64:9a:a0:
ff:60:4c:dd:e6:c9:38:12:ab:d9:17:b0:38:26:52:cd:b9:e2:
8d:27:f2:b4:7b:0b:25:67:64:c7:1c:04:61:ea:34:fc:d1:da:
8a:fd:61:ae:1c:7b:1f:22:00:cf:70:13:df:b5:a5:88:c8:d3:
57:6c:2d:69:4d:04:3b:23:fd:93:a6:44:61:d3:73:a4:a2:5c:
13:f9:fb:34:6b:b5:a6:44:4a:a0:c3:76:21:f5:ca:1c:f0:6d:
6d:18:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:27 2026 by rpki-client