
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier: CubWbUtvtYFrN0CGMN+EhRnhq4XdIhP3FzVZwZN7PyU=
Subject key identifier: 17:E4:02:E6:2B:04:A9:06:61:E5:36:7C:E3:51:70:08:57:91:5C:B2
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial: 1125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number: 1113
Signing time: Tue 28 Jul 2026 17:22:58 +0000
Manifest this update: Tue 28 Jul 2026 17:22:58 +0000
Manifest next update: Tue 04 Aug 2026 17:22:58 +0000
Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: nLkPzIKYFp4PMB1TWBF9C/qirIIBXIH2wqsuU9e6+7I=)
2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: fd0G1Zn2iUvsWfsjyzVAL9KEbxpQOhqZpnlGAiKgfII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4389 (0x1125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Validity
Not Before: Jul 28 17:22:58 2026 GMT
Not After : Aug 4 17:22:58 2026 GMT
Subject: CN=6a68e572-d315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:90:96:db:6d:f1:6a:23:ba:cd:da:03:c8:96:
a2:7c:ba:51:b2:cc:10:3a:19:55:e5:ed:88:53:2b:
f4:28:33:58:9c:c6:a3:17:30:41:26:32:27:b7:5b:
29:7f:70:c9:bc:c2:20:21:00:80:c7:80:8b:f2:19:
b0:72:99:d7:74:ab:a7:40:de:cd:eb:d7:e9:78:9f:
bb:08:ee:ab:7c:3e:31:c1:55:40:88:ab:84:99:04:
e0:1c:93:48:36:01:f4:bf:bc:21:fb:de:fd:26:ca:
3d:6b:04:74:37:63:53:75:59:ba:9b:41:a8:0a:73:
56:c0:87:2c:08:6c:88:8e:54:ca:62:50:43:7d:f2:
41:f0:43:0a:7b:8f:68:b5:c7:f5:bd:52:e0:69:45:
08:b1:ef:fc:de:54:d5:07:56:7e:34:f0:35:78:56:
8e:a7:af:f7:34:4a:cd:5c:21:cb:63:f8:be:2e:43:
96:b5:29:83:85:c5:a5:61:24:6b:5d:df:ec:9e:b7:
80:a8:14:c4:0d:3a:47:7c:40:2a:c0:0c:c3:8f:28:
54:92:85:47:6b:7f:44:ea:e3:ac:4b:81:d2:5a:b7:
0e:a5:2b:d0:21:d4:2e:7d:c3:74:80:bd:d3:8a:6b:
9c:8a:52:54:82:20:33:80:9f:12:6c:48:7c:47:5d:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:02:E6:2B:04:A9:06:61:E5:36:7C:E3:51:70:08:57:91:5C:B2
X509v3 Authority Key Identifier:
keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:48:15:47:2f:5f:06:01:f4:dd:3f:ce:cd:74:d8:06:6e:a2:
84:72:98:62:7e:62:ee:9c:30:65:ab:fd:9f:e4:d4:8d:05:c1:
52:94:10:57:35:28:a7:a9:b4:c2:00:a6:bd:83:87:9e:71:36:
2d:00:e4:47:f2:d2:dd:81:ea:f0:95:7c:7a:b5:fb:49:d9:ed:
65:e1:58:27:46:e4:fc:4b:f7:20:fa:87:7c:b7:d8:bf:f9:e9:
03:e3:67:c8:67:25:65:74:db:5f:ba:06:08:44:35:32:8b:51:
ff:ab:b8:24:fb:62:ba:82:bc:cf:62:ca:20:dc:8c:6a:9d:c0:
f8:73:d0:97:32:c6:3a:cf:8c:34:ce:cb:45:d5:f5:eb:19:93:
f7:db:e1:9e:2a:0c:58:a0:03:75:31:e6:59:81:54:f7:26:c7:
b5:0a:c6:21:10:eb:20:77:24:aa:96:26:87:13:2d:9a:ca:b1:
2f:ce:10:0a:7e:6d:67:23:91:06:59:2b:35:2e:c4:9f:62:e7:
79:67:6c:b0:77:a4:4a:aa:7c:ae:54:24:10:b5:8b:f5:37:b2:
e7:90:e1:bf:53:71:f2:97:6d:36:7a:89:39:c3:38:5c:ea:cd:
7e:65:fb:08:dd:8a:cc:0e:08:0d:18:81:75:c5:07:40:c9:d5:
d2:59:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:18 2026 by rpki-client