
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
File: FN3HrsvJJccEVg46_IW8PE9PzCg.mft (raw, json)
Hash identifier: mPLoaL49upCvOGoBM8sFA1LZoBspqT8eahnKEQhRrsc=
Subject key identifier: 31:1F:58:7F:62:E6:76:E1:92:E0:12:E9:7F:DC:81:D0:40:99:B9:13
Authority key identifier: 14:DD:C7:AE:CB:C9:25:C7:04:56:0E:3A:FC:85:BC:3C:4F:4F:CC:28
Certificate issuer: /CN=A91E1841/serialNumber=14DDC7AECBC925C704560E3AFC85BC3C4F4FCC28
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FN3HrsvJJccEVg46_IW8PE9PzCg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
Manifest number: 20
Signing time: Mon 27 Jul 2026 11:16:35 +0000
Manifest this update: Mon 27 Jul 2026 11:16:35 +0000
Manifest next update: Mon 03 Aug 2026 11:16:35 +0000
Files and hashes: 1: FN3HrsvJJccEVg46_IW8PE9PzCg.crl (hash: 4F/oUieKUgnmpYB3QECOxetKOUtQsFhKVMsDsHUy6Rc=)
2: 94407440599811F1AD66B561B3833773.roa (hash: 2WudMR/odwQksivlnEVP4Q5mVY5nV7wrY1X/gZ9EiBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.crl
rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FN3HrsvJJccEVg46_IW8PE9PzCg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1841, serialNumber=14DDC7AECBC925C704560E3AFC85BC3C4F4FCC28
Validity
Not Before: Jul 27 11:16:35 2026 GMT
Not After : Aug 3 11:16:35 2026 GMT
Subject: CN=6a673e13-82a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:6e:fe:5f:f2:a1:44:91:b9:bc:a8:d3:b3:
2d:4a:ad:b8:a2:f3:c0:90:c0:5c:bb:29:7c:62:71:
23:c0:6f:51:6f:b5:93:f3:ad:0b:fa:62:03:e3:6a:
33:48:43:78:30:d8:13:6a:20:27:ad:c5:e4:a1:f7:
9d:70:8c:d5:c2:ab:73:91:e3:12:4f:3e:35:25:1d:
cf:d6:5c:4c:83:d9:a3:2b:ff:e1:7b:e8:5c:d3:1b:
b7:19:a5:9d:30:6a:3b:54:75:30:56:e0:7f:89:69:
ad:35:15:cf:4f:96:17:5c:7c:de:45:41:87:5b:70:
95:4b:21:d3:c8:68:45:8d:f3:4a:a3:df:9f:7c:b5:
74:41:92:b4:55:10:b9:a4:59:3e:25:c4:49:ff:46:
83:95:65:a1:ef:67:2c:a0:9c:36:a2:cb:d0:73:53:
27:aa:23:cb:20:3c:ac:c9:80:d5:a5:44:36:8c:c6:
0c:23:a2:23:ba:51:bd:84:27:d1:10:ff:34:7a:5b:
c5:08:85:a6:39:f4:d6:d8:4e:a4:c3:5f:78:42:04:
cc:25:0b:1d:72:64:31:d0:9b:6e:f3:8b:bf:d3:d9:
28:c6:27:58:5f:dc:a3:f2:35:69:c1:cc:9d:8b:2a:
9e:30:73:79:d6:dc:62:82:b7:38:fc:77:40:e7:79:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1F:58:7F:62:E6:76:E1:92:E0:12:E9:7F:DC:81:D0:40:99:B9:13
X509v3 Authority Key Identifier:
keyid:14:DD:C7:AE:CB:C9:25:C7:04:56:0E:3A:FC:85:BC:3C:4F:4F:CC:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FN3HrsvJJccEVg46_IW8PE9PzCg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1841/4D3F4612599711F18B504558B3833773/FN3HrsvJJccEVg46_IW8PE9PzCg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a2:db:1b:24:a1:4d:fe:5f:5b:2a:a1:46:f9:fb:11:8a:ab:
d5:5d:3f:00:b2:55:47:4b:15:5f:b3:fc:6a:0d:f5:48:32:ad:
bf:be:98:c9:0f:e3:62:c7:85:f8:09:26:ce:18:e5:c4:f8:c1:
b9:d3:fd:8f:fc:82:2f:b9:b2:92:57:7a:79:d7:98:c7:64:74:
87:9a:d1:b7:8c:48:10:23:d5:e8:08:be:c0:72:54:27:27:ce:
c3:0c:c5:dc:b7:3b:10:41:8f:86:9b:a6:55:7e:25:b0:60:a6:
17:5c:17:30:3d:78:06:26:78:cc:ba:7a:9a:1b:0c:68:2f:0d:
c2:44:0c:a4:ad:02:d7:27:08:1c:39:4a:de:18:02:f9:7a:8e:
cd:8a:cf:d7:5e:71:d2:4b:87:34:87:5b:9b:d5:ec:e7:5b:71:
4d:ad:86:5b:b2:e9:60:d3:2a:3a:f3:0a:5b:c8:70:68:8b:2b:
0d:30:36:33:a3:10:f7:b5:2e:ea:31:af:e8:7f:4e:ef:a5:87:
eb:0c:c6:48:61:ce:f1:70:00:b0:0e:22:d7:b7:02:9e:07:f3:
cc:e6:25:15:b3:df:44:f6:32:c9:5f:5e:8e:ae:48:a4:86:48:
f1:5a:bd:a1:c8:d0:cb:1c:e9:1f:da:8f:5f:79:fe:0c:8c:35:
c9:4d:67:a5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MTg0MTExMC8GA1UEBRMoMTREREM3QUVDQkM5MjVDNzA0NTYwRTNBRkM4NUJDM0M0
RjRGQ0MyODAeFw0yNjA3MjcxMTE2MzVaFw0yNjA4MDMxMTE2MzVaMBgxFjAUBgNV
BAMTDTZhNjczZTEzLTgyYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDRH27+X/KhRJG5vKjTsy1Krbii88CQwFy7KXxicSPAb1FvtZPzrQv6YgPjajNI
Q3gw2BNqICetxeSh951wjNXCq3OR4xJPPjUlHc/WXEyD2aMr/+F76FzTG7cZpZ0w
ajtUdTBW4H+Jaa01Fc9PlhdcfN5FQYdbcJVLIdPIaEWN80qj3598tXRBkrRVELmk
WT4lxEn/RoOVZaHvZyygnDaiy9BzUyeqI8sgPKzJgNWlRDaMxgwjoiO6Ub2EJ9EQ
/zR6W8UIhaY59NbYTqTDX3hCBMwlCx1yZDHQm27zi7/T2SjGJ1hf3KPyNWnBzJ2L
Kp4wc3nW3GKCtzj8d0Dnefs3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMR9Yf2Lm
duGS4BLpf9yB0ECZuRMwHwYDVR0jBBgwFoAUFN3HrsvJJccEVg46/IW8PE9PzCgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxODQxLzREM0Y0NjEyNTk5
NzExRjE4QjUwNDU1OEIzODMzNzczL0ZOM0hyc3ZKSmNjRVZnNDZfSVc4UEU5UHpD
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRk4zSHJzdkpKY2NFVmc0Nl9JVzhQRTlQekNnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
ODQxLzREM0Y0NjEyNTk5NzExRjE4QjUwNDU1OEIzODMzNzczL0ZOM0hyc3ZKSmNj
RVZnNDZfSVc4UEU5UHpDZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCmotsbJKFN/l9bKqFG+fsRiqvVXT8AslVHSxVfs/xqDfVIMq2/vpjJD+Nix4X4
CSbOGOXE+MG50/2P/IIvubKSV3p515jHZHSHmtG3jEgQI9XoCL7AclQnJ87DDMXc
tzsQQY+Gm6ZVfiWwYKYXXBcwPXgGJnjMunqaGwxoLw3CRAykrQLXJwgcOUreGAL5
eo7Nis/XXnHSS4c0h1ub1eznW3FNrYZbsulg0yo68wpbyHBoiysNMDYzoxD3tS7q
Ma/of07vpYfrDMZIYc7xcACwDiLXtwKeB/PM5iUVs99E9jLJX16OrkikhkjxWr2h
yNDLHOkf2o9fef4MjDXJTWel
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:07:02 2026 by rpki-client