
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier: Cx321gbHOxccBdcBBJ1gmGuOfMTyT0YCiba+eopO6TY=
Subject key identifier: EB:59:E3:74:18:29:AF:37:A3:C2:2A:9E:A9:BD:12:0D:BC:7B:AA:90
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number: 0129
Signing time: Mon 21 Sep 2026 05:45:53 +0000
Manifest this update: Mon 21 Sep 2026 05:45:52 +0000
Manifest next update: Mon 28 Sep 2026 05:45:52 +0000
Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: 25gcLHfL40Bvu/S1483RYRrWTV9ZYI+Faow5dx8CtRI=)
2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: u+iVKkkYCJUO0WXOE68Cpj6tOjtVLvy0gYGY2wApXr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Validity
Not Before: Sep 21 05:45:52 2026 GMT
Not After : Sep 28 05:45:52 2026 GMT
Subject: CN=6ab0c491-0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:27:ad:24:c9:ac:fa:55:45:66:fe:6a:d4:
d1:af:a0:61:0f:8c:45:61:c9:70:6d:e4:41:db:f3:
24:c9:b2:41:82:e2:fa:36:17:e2:a9:db:d4:f1:00:
bc:22:02:06:81:55:56:c7:7b:ff:74:e5:51:ee:bc:
54:85:e0:91:6c:94:07:c0:2b:dc:5f:61:2c:1e:ac:
e1:ff:5f:6e:70:f4:dc:48:51:ea:85:3b:ba:b3:7b:
4d:af:2d:7f:d3:4f:53:c7:3d:8d:0b:a7:bb:f2:99:
f2:92:e7:f9:09:a8:1e:a4:7f:bb:d2:87:75:ea:9e:
8e:17:ae:42:e7:19:0c:c6:fe:98:e7:13:38:dc:29:
6b:07:42:06:49:1a:71:21:15:19:d3:bb:9a:f9:71:
cb:c6:1d:d6:eb:fa:84:91:11:0f:2c:0c:1d:f2:68:
49:5b:c6:e9:27:92:c1:68:3c:3f:4f:60:2b:5c:50:
34:8f:0c:52:9c:1f:6d:e0:22:d7:b4:e3:00:0d:71:
da:4c:a3:1f:ac:46:7d:9b:73:82:5e:52:00:96:89:
c7:05:42:6e:1d:2f:c6:53:50:bc:ab:36:f2:4f:5f:
4d:fc:c5:68:35:d1:d2:cc:c9:bf:af:39:aa:14:83:
d2:42:5a:e3:f5:ad:5a:c1:d9:de:ee:50:89:c7:eb:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:59:E3:74:18:29:AF:37:A3:C2:2A:9E:A9:BD:12:0D:BC:7B:AA:90
X509v3 Authority Key Identifier:
keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:7b:0c:a1:b8:dc:ba:6c:40:e5:80:eb:03:1e:8e:5b:d1:b4:
70:10:7a:5d:ef:87:ac:ad:66:68:cb:b4:04:27:da:2b:30:bf:
5c:f0:5c:e8:d4:3d:19:b4:d3:49:1d:53:c8:e5:7f:3d:90:7d:
bb:a9:d4:75:f5:13:18:16:0d:8a:77:e5:ef:fc:73:40:6d:13:
d3:0d:24:1a:46:a4:61:51:5e:cb:79:fe:e3:1f:36:cc:15:45:
46:fc:23:e8:a0:8d:6a:9f:42:ea:98:65:99:f1:ac:bc:a6:38:
a8:b3:b3:a1:0a:1c:27:60:09:c8:8e:fd:f8:5b:a7:39:6d:fd:
79:08:f6:12:83:7c:20:a8:be:8e:e4:2c:ff:7b:8d:8e:b9:3a:
d4:0f:76:d1:50:22:1e:c3:12:c2:d4:b8:21:30:62:16:29:8d:
1d:f4:d9:d7:cd:b5:d0:52:7d:e9:b7:82:fc:94:2f:82:3d:bd:
e2:eb:d2:ab:86:ab:5c:49:b3:87:00:c0:0c:42:fc:aa:3e:33:
de:0e:0a:c2:fb:d5:0f:3a:b3:a2:11:f7:ed:05:a5:0f:9e:50:
47:78:a2:45:a2:7a:18:93:9d:f0:d3:42:a0:57:f2:99:39:d6:
cc:09:26:d3:5e:15:c7:83:87:54:7f:5b:56:7b:df:62:cb:f8:
4d:18:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:53:44 2026 by rpki-client