
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier: SYEbry+AoystdH6TGU7v9KiMBO0xl/LHdTCrnGZoIq8=
Subject key identifier: 19:C0:79:EE:7E:CD:67:C1:5C:68:F3:7F:3F:38:37:74:DE:C1:F7:5D
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial: 046B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number: 0459
Signing time: Sat 13 Jun 2026 00:14:33 +0000
Manifest this update: Sat 13 Jun 2026 00:14:32 +0000
Manifest next update: Sat 20 Jun 2026 00:14:32 +0000
Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: jkw5NQ1DAXW/Oc7n7RkANqvxiqiaJ0k7ToHLdM/Soj0=)
2: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0=)
3: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Validity
Not Before: Jun 13 00:14:32 2026 GMT
Not After : Jun 20 00:14:32 2026 GMT
Subject: CN=6a2ca0e9-7184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:07:8c:66:3d:2a:18:16:94:93:15:ab:11:d7:
31:78:c4:fd:88:62:8e:61:76:da:0a:df:83:19:17:
f0:60:48:6f:42:2d:ef:71:4e:1a:ac:d0:48:2a:64:
bc:f1:87:50:b2:60:f6:6e:32:cc:cb:2a:8d:ed:ed:
d7:5c:04:13:d5:f7:a5:bd:ff:72:82:f4:8f:42:ac:
73:96:c7:bc:de:a7:e7:be:f9:f8:d6:7a:e7:5e:5b:
6c:78:91:f0:19:ff:27:99:29:67:13:11:7c:e5:f8:
0b:6c:01:88:3b:c8:db:3f:94:3b:0f:a8:80:af:b3:
22:49:5c:33:d8:06:58:a4:09:e2:54:5a:11:dc:b3:
2e:f4:e8:ed:35:00:ab:f7:8a:3f:16:fa:01:ec:27:
dc:08:bf:de:69:79:75:c9:a5:30:98:50:66:39:47:
8b:18:43:e2:d0:1c:75:b8:ae:a3:0c:75:83:83:a0:
ce:a3:f4:e5:89:2e:17:3a:e4:86:76:99:4a:5f:f0:
ee:b0:09:35:de:36:32:e0:c8:c2:ab:84:22:5f:e4:
9e:cb:c4:94:5d:9c:67:db:64:fc:cd:f6:e2:24:2e:
93:39:0b:39:5d:d8:45:5e:77:72:b3:e2:61:ae:7f:
a2:1a:b6:80:40:7f:ab:a1:44:c2:c0:f4:50:9f:eb:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:79:EE:7E:CD:67:C1:5C:68:F3:7F:3F:38:37:74:DE:C1:F7:5D
X509v3 Authority Key Identifier:
keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:e9:34:38:b2:a1:07:0a:31:fd:38:67:10:d0:33:df:c8:
83:f5:ba:9a:72:92:3b:02:54:0a:ae:89:b0:2a:05:14:9e:2e:
15:a2:b1:5a:09:6f:7d:96:cf:c3:cf:91:49:77:8a:48:2c:d4:
fa:4a:ee:ef:9c:dc:8b:38:07:63:f6:48:ac:fd:a1:36:11:bb:
ff:7c:f5:19:ed:e1:19:dc:ae:2e:1c:bf:34:cd:3f:04:0c:67:
65:89:ea:f3:8d:e5:e6:16:75:fb:e5:27:72:5a:53:b0:8a:a8:
58:ad:74:67:3c:0f:e6:8f:de:e4:1c:e4:9e:96:32:f8:1e:42:
41:b1:ee:2f:23:8f:b7:e8:79:67:b1:87:60:3b:c5:ab:9e:fa:
a4:b3:6e:58:0a:ea:d6:62:68:66:94:d4:2c:14:0d:d4:ee:88:
36:d0:eb:7a:40:0f:6b:3d:18:07:b5:4d:01:70:a8:24:49:65:
d2:99:84:9a:bc:8f:71:15:9f:72:8a:6c:dd:a0:71:5b:59:e4:
bf:8d:47:d8:2d:86:41:e8:72:7f:ed:6d:ac:48:75:64:69:83:
bb:cc:d0:73:4d:bb:c9:f1:d8:83:c7:c8:5e:d9:ea:ae:d2:38:
e6:d7:e2:5f:f6:43:95:0b:c7:66:8b:4b:47:2c:58:d5:28:e8:
4f:30:ce:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:45 2026 by rpki-client