
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier: USSVFN/dhUL3t3fLC9vEsj8+RFHLUGicitN3myA4ZOE=
Subject key identifier: 35:F5:FB:CC:D0:8F:27:D2:2F:89:F5:D0:95:52:62:0E:18:AF:3F:8A
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial: 1141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number: 112F
Signing time: Sun 20 Sep 2026 17:14:23 +0000
Manifest this update: Sun 20 Sep 2026 17:14:23 +0000
Manifest next update: Sun 27 Sep 2026 17:14:23 +0000
Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: K4MSQJO/0V4LoSmnmFY1keDWof+MTJ/cbnWdWPMbVXw=)
2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: fd0G1Zn2iUvsWfsjyzVAL9KEbxpQOhqZpnlGAiKgfII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4417 (0x1141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Validity
Not Before: Sep 20 17:14:23 2026 GMT
Not After : Sep 27 17:14:23 2026 GMT
Subject: CN=6ab0146f-a804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:3c:d1:a4:87:ce:1d:52:c1:a0:11:93:a9:
e1:80:e9:11:e4:1e:dc:21:d6:93:17:1d:9d:41:22:
5a:98:ef:ce:cb:44:9a:cf:2a:3d:cc:c4:0f:69:10:
bc:e8:ac:3f:82:23:cb:8d:e1:1b:a6:11:51:8c:10:
29:6f:da:f6:b6:7e:75:67:16:c6:b7:68:25:74:8b:
1d:4a:f1:21:5c:70:13:71:3f:bc:6b:3b:90:08:61:
66:97:9f:f9:84:59:ec:81:ee:0f:ba:42:6f:61:11:
ef:84:2f:09:ae:88:1a:7b:67:06:36:c9:f5:f6:02:
fa:9f:7c:8b:62:18:0b:30:83:72:ca:ae:90:20:6c:
ec:e1:d3:3f:b3:e9:a7:49:fa:2b:ce:04:fc:f9:59:
18:96:8b:26:e4:c6:84:8a:9b:4f:68:c2:77:fe:af:
b1:f0:b7:3d:dc:63:39:10:f6:38:d5:3f:90:aa:fe:
98:9f:6e:da:46:3a:0b:3e:ee:c5:e5:00:50:8f:db:
0d:6f:dc:f6:4c:b8:d1:8c:67:ff:75:7e:93:c1:c5:
9d:7d:69:54:6e:c1:00:2c:e2:ce:db:24:8e:2e:04:
7b:ec:ca:ed:1a:a0:21:da:75:d4:c6:b9:5e:3a:9b:
8d:3e:9d:66:a9:12:3e:4f:93:28:66:67:31:97:bc:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:FB:CC:D0:8F:27:D2:2F:89:F5:D0:95:52:62:0E:18:AF:3F:8A
X509v3 Authority Key Identifier:
keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:62:14:fd:96:b7:b4:70:a9:a9:90:42:67:b0:b2:b5:5a:e2:
32:fa:97:f3:a5:e1:e5:6d:b4:89:51:c2:13:0b:5b:10:6f:cb:
c8:64:e5:25:72:7c:50:06:07:2b:a8:66:e0:1f:04:3a:8e:6e:
65:93:c6:39:6a:22:68:23:ae:fd:9a:d7:f0:10:16:18:b0:88:
2c:98:79:83:93:1f:31:24:ae:d9:07:2d:2c:dc:9c:bd:0d:24:
34:0e:b3:66:cb:d4:f2:b7:b4:5d:02:91:cb:ff:bb:3f:2f:15:
0e:84:3f:eb:67:a4:19:e8:ad:fe:c8:59:ad:98:0d:28:a3:84:
e6:cc:bf:b7:ed:0b:bd:1d:b7:24:b9:22:fb:b8:12:92:7b:d3:
fc:85:a6:f5:17:85:85:60:57:24:e6:df:87:19:28:8e:3e:a5:
b8:d2:78:79:14:48:0b:10:d6:55:6c:d3:43:65:cb:5b:3d:78:
a8:6f:5f:cb:d4:30:87:80:b1:f9:b7:7b:cc:47:1e:a9:d1:e9:
4b:e9:20:12:a0:de:cc:3c:46:15:1e:84:6b:05:d9:c0:88:fa:
80:57:70:71:cd:b9:79:a0:6a:c7:2e:08:f7:08:d2:4e:a9:60:
30:d3:be:7a:19:99:34:fe:fe:6b:35:b4:5b:f3:ee:4b:f5:ef:
e4:df:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:40:29 2026 by rpki-client