
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json)
Hash identifier: fCSt3ytTGthKoSMpKCLs/szYNyvm3jNtg7OuH6MILew=
Subject key identifier: 3E:B6:25:B4:7B:D1:DA:31:F0:D3:58:38:3F:C4:8B:49:0C:01:86:58
Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Certificate serial: 0DD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
Manifest number: 0DC9
Signing time: Fri 04 Sep 2026 17:50:24 +0000
Manifest this update: Fri 04 Sep 2026 17:50:23 +0000
Manifest next update: Fri 11 Sep 2026 17:50:23 +0000
Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: X2tCQ4BdXH0vx9gfMPFbTQ0jzyZN0gzY3USc56eUJ+g=)
2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3541 (0xdd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610
Validity
Not Before: Sep 4 17:50:23 2026 GMT
Not After : Sep 11 17:50:23 2026 GMT
Subject: CN=6a9b04df-89d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:37:aa:35:92:97:cf:55:bf:b5:30:5d:cf:
9e:db:f4:59:e4:85:5b:ea:0e:df:e7:61:01:63:9b:
5b:e9:6e:4f:76:0a:16:03:ae:0e:0f:6e:ea:3a:53:
0f:c3:07:ff:b7:3f:bd:ae:95:cf:67:02:9f:7d:1b:
7e:61:95:b3:7a:a4:ed:8b:07:5f:a2:03:52:48:1a:
ab:7a:dd:c1:df:15:02:34:e2:be:d5:e5:b2:d5:23:
00:ec:86:77:c0:3a:74:ab:df:6e:47:4e:e6:dc:64:
22:e2:36:f6:cf:4b:20:eb:ff:5a:49:58:2b:d7:06:
01:67:6a:67:30:98:82:91:a9:8f:c8:32:0c:53:aa:
8d:1c:20:56:c6:b4:2a:d4:6d:be:3d:1e:c6:d5:64:
57:cb:dd:0a:1f:ff:07:0e:b4:9c:d8:ce:d5:2a:c8:
e8:81:3c:b1:55:3e:13:c6:1d:2d:41:3e:2a:d8:68:
29:fd:3a:83:57:16:43:ad:31:4d:ff:60:f7:19:33:
41:88:04:aa:a6:65:af:81:b9:ae:e8:3a:9d:4d:a0:
e2:77:5e:c6:09:57:a7:31:d0:e9:2f:74:ff:74:ff:
af:3a:16:3e:c4:84:84:6b:99:72:41:60:14:19:2f:
6e:d6:42:88:32:2a:4d:6b:c0:56:6e:ce:9f:1e:f8:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:25:B4:7B:D1:DA:31:F0:D3:58:38:3F:C4:8B:49:0C:01:86:58
X509v3 Authority Key Identifier:
keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:48:0d:52:b9:ac:c8:b6:32:83:98:7e:d0:92:27:66:a0:4b:
f6:d2:50:35:06:d8:ed:20:1b:6b:e6:1d:b6:15:c0:4b:54:cd:
f6:ac:af:12:98:b6:6d:b6:9d:56:f3:d2:d1:cd:ce:c1:9c:8d:
56:03:83:b4:07:f7:07:61:13:14:30:2a:fc:0d:97:ec:70:78:
48:44:52:70:51:cd:71:71:51:91:a0:a9:d6:c8:2b:f7:a5:3c:
44:ef:35:18:4b:33:6a:fc:5f:7f:7b:43:f9:96:13:98:81:e8:
c3:fa:a8:e9:a0:aa:d5:41:25:79:4c:52:b9:7b:b8:fb:b7:ff:
ba:52:63:f7:2b:f7:8c:bf:62:c6:25:53:8c:f1:3b:3b:19:36:
64:a7:30:aa:86:ab:92:a9:cb:ca:3c:52:b4:7a:b5:4f:6c:59:
38:cb:30:7b:91:e5:4a:0a:b3:9c:b3:15:8f:f2:36:c3:d2:08:
83:37:da:0a:5c:45:fe:c2:98:c2:be:4a:a6:98:b1:fd:f8:67:
1e:a7:b7:13:99:2b:8a:ec:b7:59:c1:ce:f2:86:fa:77:4d:06:
f2:02:20:98:fb:88:05:72:ef:09:c1:a3:eb:13:c1:56:a0:ee:
8f:34:51:90:32:5e:89:a7:f6:8b:49:aa:fe:aa:2c:a8:c3:71:
4b:43:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:47:46 2026 by rpki-client