
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: X36eIN2zz4HIjXJYUOeqJQjKtB7cL+HQbEZL+ch7x00=
Subject key identifier: CA:3D:53:09:21:F9:2D:18:AA:00:20:C3:1E:DF:BE:1A:C0:32:7E:93
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 09B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 093C
Signing time: Tue 28 Jul 2026 20:48:20 +0000
Manifest this update: Tue 28 Jul 2026 20:48:19 +0000
Manifest next update: Tue 04 Aug 2026 20:48:19 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: ttVLOQUkKDsWEyoqKhr/hnqxwSHzsmOt/ZO/4voQ7Mw=)
2: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: hipmINl5QhmUdtwVQhhZDP0tnwpiCxBXThMjdcaX9Jc=)
3: 78D63F3A49E611F1A18E902DB5833773.roa (hash: 6yed7TU5WsVwocy0PyrBQTwQ0MhVSm9L6l06FSV8VNI=)
4: 6500BEB849E611F18B665F22B5833773.roa (hash: oRJVDNNEq9yJM3kRWRLDOu8PzfoDFGvUq7nhvQCa5c4=)
5: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: 448SaP62zIEeDoT+BKnPnMZxQLrDOlT4PwJtIrUEjGQ=)
6: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: VEN7PHjgXJ17sdBlfk+R1gfjCu4511OjPAUhn66pLqw=)
7: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: pb+67QUwu5Hw/Dgr2vwKugBBsOlkl0MS1lsM8PjI48o=)
8: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: AzbPG4+Ay9Py93BezJDBHyNMd2NxBXLctC8P1DC+Z84=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jul 28 20:48:19 2026 GMT
Not After : Aug 4 20:48:19 2026 GMT
Subject: CN=6a691593-5c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:eb:d1:f1:12:7a:03:d6:20:2e:62:7f:13:
a9:c2:c6:49:fe:b0:8b:d6:18:8f:d4:68:4c:12:8b:
e0:c2:33:0e:e4:78:4e:96:8f:bd:71:b3:88:57:0a:
01:e1:2b:72:08:2f:7e:f7:83:c5:06:f3:95:b0:79:
e2:b9:11:fb:e7:9c:4d:d4:f6:c5:7d:7c:f8:58:94:
f6:a4:30:71:a5:c2:da:bd:bb:be:b2:b2:dc:b3:c0:
41:7c:7a:54:2a:51:2b:e4:a4:31:b7:77:95:6a:b9:
22:2a:b8:65:80:84:55:39:a1:94:1b:21:d6:31:6c:
0c:e2:07:d2:17:77:03:1d:bc:98:1d:26:a3:a6:cf:
af:99:61:d0:1f:e7:0d:f0:ae:a2:ba:2b:5f:d7:15:
d3:d4:15:4c:e6:b9:7d:73:b2:e4:84:d2:1e:83:88:
f6:9d:26:1a:bc:11:fb:62:2b:98:c5:63:e1:1f:0a:
41:28:a1:78:46:96:08:ce:07:e9:72:a8:3e:a9:ff:
e4:e0:e4:78:8c:76:21:17:03:1f:fb:a4:5e:7c:7b:
07:03:35:9a:40:87:fd:34:ef:97:e3:c9:7b:03:4d:
f1:52:1e:10:dd:f1:ce:e3:e9:da:7d:08:1f:67:9f:
32:d2:b4:e8:9c:92:c0:e6:1b:80:94:f0:1a:a1:cb:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3D:53:09:21:F9:2D:18:AA:00:20:C3:1E:DF:BE:1A:C0:32:7E:93
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:f7:04:c5:3a:b4:c0:e4:a1:6f:ea:f4:78:26:db:44:98:
fe:2a:1a:16:fe:30:f6:c5:5a:56:08:d4:7c:4a:1a:af:64:bb:
d2:0c:7c:cd:e9:d8:46:f7:73:c9:17:d5:9f:48:42:79:88:bc:
49:f4:c3:7c:01:d2:56:9c:9b:b2:c5:07:9b:f3:f6:84:fc:1f:
1a:ae:43:59:41:ab:00:f1:9c:fb:f3:ae:4d:3e:ad:93:4b:08:
96:ff:51:d0:6b:6a:bd:86:d1:52:ae:08:04:0e:de:6b:c1:ef:
48:7b:d9:b6:14:0c:16:f5:32:f7:60:99:d1:72:6d:83:23:c5:
70:d6:74:32:70:20:89:40:e5:e1:30:71:4f:a2:31:8b:3d:9f:
d4:6d:ba:30:99:d1:22:4c:03:ba:4a:5c:ca:0f:24:fa:dc:f9:
6b:e7:ad:b0:02:95:73:86:f0:69:f7:61:c4:96:05:b1:fd:83:
ff:1c:3a:d4:fc:eb:f5:4a:ac:1e:14:20:34:a4:9d:12:ba:1f:
45:a3:87:98:53:d0:51:8e:71:7c:37:77:77:25:24:aa:8d:fb:
98:18:78:92:a9:75:7c:a3:18:d1:41:7a:34:51:6e:11:0f:97:
2a:d6:07:62:15:f3:0e:92:be:43:10:a0:9e:be:9a:da:ab:06:
cb:82:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:44 2026 by rpki-client