
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json)
Hash identifier: gffs2W7XJncUuhhGY9OQfwAmAggHYk1b1xBtoBHdUM8=
Subject key identifier: 07:D8:8F:DD:12:43:EA:DC:3C:53:23:26:8F:41:BD:7D:EB:35:65:3A
Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Certificate serial: 35D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
Manifest number: 499A
Signing time: Sun 20 Sep 2026 14:20:44 +0000
Manifest this update: Sun 20 Sep 2026 14:20:43 +0000
Manifest next update: Sun 27 Sep 2026 14:20:43 +0000
Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: /s3hr5ERLG/fqp0vt64nkpPh3CYVZ/8CAQ/qO1GK9ck=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:20:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13781 (0x35d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09
Validity
Not Before: Sep 20 14:20:43 2026 GMT
Not After : Sep 27 14:20:43 2026 GMT
Subject: CN=6aafebbc-876b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:0f:91:2f:b9:3a:d0:e0:53:2f:b3:3f:6c:
ab:20:78:93:43:11:13:3a:6c:ae:a9:af:b0:07:37:
5a:a2:11:42:b1:ec:01:15:c1:d1:32:34:09:4f:8d:
53:a7:71:23:63:1c:de:a4:94:04:bd:52:05:48:03:
b3:01:c8:41:a1:96:2c:1c:c2:93:c9:29:5b:23:00:
92:31:c5:1f:23:02:e1:ea:f5:f4:3a:70:00:30:0b:
f7:de:9c:a6:a9:58:b7:d0:58:17:02:40:ef:00:04:
34:59:cf:99:54:ea:0d:03:b9:61:4b:fd:5d:a2:c8:
6d:68:5a:00:cf:f4:21:05:e1:12:53:21:62:78:b3:
e2:54:64:1c:ee:6b:33:ce:8c:2c:fc:f8:61:a8:e4:
32:ef:d5:22:57:de:89:27:e8:be:d4:38:9f:54:35:
f9:16:37:62:84:a9:a0:98:d4:2a:19:22:fa:93:f8:
5f:80:8b:01:aa:3d:e5:a4:49:e1:23:ec:fb:a9:4b:
26:32:ab:e1:86:9d:4c:59:85:ff:5f:7b:b1:1c:a3:
a9:e5:40:27:65:a4:a7:98:39:d7:a0:7b:d3:d4:6f:
9c:8f:ec:71:16:69:20:b1:77:97:4c:af:62:c5:c8:
27:36:3f:21:be:b4:f1:e8:96:03:e8:01:98:7a:ab:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D8:8F:DD:12:43:EA:DC:3C:53:23:26:8F:41:BD:7D:EB:35:65:3A
X509v3 Authority Key Identifier:
keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:71:f0:a0:6e:93:c8:7e:2c:76:fd:88:8c:29:47:e2:04:
d4:2c:63:10:ca:f6:e6:5d:40:8c:31:69:e4:bd:50:a1:7f:e6:
a5:a2:8a:8c:db:c1:ad:42:8c:b2:24:32:e5:a8:7d:7a:f0:be:
88:86:3d:9d:ff:5c:05:18:34:8c:47:a0:6d:53:d1:e0:5d:b9:
25:bc:45:73:1e:1b:50:b1:23:62:a2:cc:32:be:39:8b:4a:d8:
4f:76:d8:7b:f7:92:db:cf:4e:3a:52:45:d0:cb:0d:2e:c0:a8:
ca:d5:8b:d7:b7:b3:ff:f4:d9:e0:aa:61:b7:5c:2f:c0:04:8e:
bd:fa:74:f6:24:4c:20:a9:31:49:b3:c1:45:ff:64:af:e9:41:
84:4e:4c:22:a1:ee:78:5f:ac:e4:b0:52:d4:4c:d5:4a:72:e5:
71:84:7b:23:61:66:1a:2c:24:1b:f6:50:ef:9a:33:6c:77:e3:
da:af:1c:3b:8e:d3:e5:90:ce:94:db:ac:58:0d:be:8d:fe:a2:
47:be:c2:b9:f1:14:d5:de:45:78:c8:17:de:e5:89:ff:5a:1b:
8d:da:57:a7:4b:28:ee:57:39:de:8d:13:92:96:e0:87:b0:f8:
c5:47:b9:13:c2:1d:34:d0:02:7c:84:13:f7:e9:b6:7b:c6:6c:
57:24:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:17:36 2026 by rpki-client