
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier: brPZ7bySMZjKlOxPquzS2Gg4e8ZfHWAtWYYvxv8Fe8w=
Subject key identifier: 28:33:A1:64:95:AE:1D:51:6E:7A:DF:A3:6C:9E:D9:B4:4A:5E:90:BA
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial: 049E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number: 048C
Signing time: Sun 20 Sep 2026 23:50:25 +0000
Manifest this update: Sun 20 Sep 2026 23:50:24 +0000
Manifest next update: Sun 27 Sep 2026 23:50:24 +0000
Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: 3Y8E9DEjmtKnExo3MEgesQuqVCOKkALK/N2II42Mtjo=)
2: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=)
3: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Validity
Not Before: Sep 20 23:50:24 2026 GMT
Not After : Sep 27 23:50:24 2026 GMT
Subject: CN=6ab07140-ba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:5f:9f:54:9e:e5:7d:f3:f1:90:7c:0c:0e:
04:ec:d1:bb:f7:af:8c:6f:a9:55:0b:f3:ac:e4:a1:
c5:78:54:a9:bd:88:0e:30:5a:6e:1f:4b:c5:4f:49:
ce:ad:10:0f:da:b8:b0:10:01:d8:a4:4a:3a:b2:24:
a9:1d:ca:8f:fc:cc:35:fb:f6:37:4a:29:58:e8:86:
79:10:cc:9b:48:2b:2e:68:15:09:46:fa:94:0b:08:
5f:db:9d:59:01:9c:d1:c5:f0:56:4e:8e:ca:98:a2:
a4:51:19:6e:01:69:9e:e2:aa:ef:18:fc:be:56:ad:
44:8f:c8:84:ed:4e:a6:3d:7c:72:3f:62:3c:31:1a:
86:3d:3c:ea:6b:51:40:f8:9e:fc:91:29:30:4b:1d:
b2:a1:52:e2:42:3f:31:89:34:43:2a:29:6c:cb:b6:
e6:1f:c7:9b:0d:71:3c:aa:36:2d:de:2a:d3:88:57:
37:15:2c:27:ce:57:af:b2:df:e8:d5:9e:fd:0a:6c:
d7:08:bb:ee:a6:3f:85:2e:c9:5d:c7:61:49:47:5f:
39:89:c0:87:a9:98:20:13:59:08:bb:87:38:d9:b5:
60:c1:f1:01:70:d8:e7:26:be:a2:0f:dc:33:43:5b:
4c:8d:96:d0:1d:c3:5d:04:f3:d0:57:dc:d2:07:b1:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:33:A1:64:95:AE:1D:51:6E:7A:DF:A3:6C:9E:D9:B4:4A:5E:90:BA
X509v3 Authority Key Identifier:
keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:8b:da:78:62:46:79:89:5d:39:90:8b:ad:cb:a5:c7:03:
60:94:2e:33:d4:24:da:15:47:1e:3c:fa:10:d7:4f:9d:87:4d:
77:cb:51:7f:53:e7:6a:4c:60:a5:f9:ba:d3:b7:57:9a:81:58:
b2:99:62:fe:4b:8d:26:02:d8:27:87:f7:91:7b:65:29:6c:8c:
d7:17:a7:23:65:18:a6:9f:05:87:73:15:88:ad:d8:0a:be:b6:
22:20:48:9e:11:ff:f4:42:d4:71:10:c9:00:7d:2a:17:1f:44:
e9:4c:b6:19:eb:23:0a:08:37:c5:60:15:15:e2:b7:51:d5:74:
83:16:2c:4f:da:7b:42:2f:67:07:9b:84:d1:0f:6e:b1:bd:4a:
5f:0e:b9:f1:4c:86:80:23:28:3f:8c:fd:8e:69:d3:ff:c5:cb:
9b:b3:05:f2:1c:6e:36:f3:17:04:cf:01:58:b4:2a:96:7d:82:
c0:4d:a2:eb:e2:88:4a:34:32:cb:fd:23:59:ee:08:67:9b:5a:
af:97:25:42:34:d9:40:9b:52:df:0d:24:3d:75:e7:5c:3b:3a:
37:85:85:e4:02:56:8d:80:89:52:85:06:81:c9:e7:9d:c5:9b:
bd:ef:c5:c2:1c:03:b0:1b:ad:a9:a1:b7:ca:b5:2a:87:65:38:
1f:2e:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:21:29 2026 by rpki-client