
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: jx2LcTq6IrYM4n8Ax3qTR1tMj771IbPvPYolfstYtwA=
Subject key identifier: 61:71:62:52:A8:FB:91:94:A5:BD:EC:68:BC:98:E8:10:2E:91:1E:85
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 04C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 04B3
Signing time: Sat 10 Oct 2026 23:58:48 +0000
Manifest this update: Sat 10 Oct 2026 23:58:48 +0000
Manifest next update: Sat 17 Oct 2026 23:58:48 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 9HuEvmXB99feXTLB/93IdhJH3UUqIeJnQqJu/ja19SQ=)
2: 32F4B5BA3F0411F1BF0D1E0CC9833773.roa (hash: 7D5axyTJpCXlvT4hwQ1+3Thr7ZRX7mL6gQ5Gjrbulvc=)
3: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
4: 8C55E7B4917011F180226FDB3111F970.roa (hash: r2QDsjyZZFMUXUm8urd66tssntM1fY3EKVaH9uYAtzs=)
5: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
6: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
7: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
8: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 23:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Oct 10 23:58:48 2026 GMT
Not After : Oct 17 23:58:48 2026 GMT
Subject: CN=6acad138-518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:af:b2:68:e5:a9:d9:82:21:ec:3d:89:7b:
c0:ae:4d:6d:43:f7:44:7f:15:1c:b3:29:83:68:2b:
5f:a4:50:c2:64:7e:29:f5:84:d6:eb:5d:ca:8b:ff:
70:dd:cf:c9:53:d4:3a:4c:32:ab:a2:43:a2:0c:07:
9d:7e:d2:2e:3f:6a:5f:3a:39:9c:2d:22:20:af:6b:
c7:ec:1b:4c:7a:17:12:75:2f:89:83:12:b6:88:0a:
f1:b5:81:ac:f8:fe:de:fa:4a:fd:11:ec:8a:a2:96:
47:27:d9:1b:a3:62:c1:13:83:62:b2:fe:5c:2b:d0:
dc:33:56:fb:42:09:fa:26:10:8d:4e:cb:a6:98:a4:
f5:3e:1d:c9:3c:73:20:b4:18:4d:47:06:64:98:36:
ec:6c:98:e7:71:ca:ab:67:9a:46:f7:e1:14:3b:df:
f5:f5:82:ea:1f:9d:2a:91:e1:33:7f:83:74:b5:6d:
10:bc:98:6f:f2:af:00:10:4f:eb:1b:7c:ea:37:e9:
4b:dc:36:b6:ac:92:09:d2:ca:1b:c1:c5:67:b3:31:
ef:0b:be:59:b8:6e:e9:f9:71:67:00:be:84:8a:e0:
6b:6e:6e:ee:f8:ed:ea:63:72:4d:e1:8a:68:58:ba:
11:75:3e:e4:e6:c6:94:6d:b3:4e:e0:d2:e5:0c:8d:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:62:52:A8:FB:91:94:A5:BD:EC:68:BC:98:E8:10:2E:91:1E:85
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:3b:91:3d:f2:d7:9d:0d:20:17:de:87:ff:a1:84:04:62:83:
32:62:62:19:e9:66:04:5a:4a:79:b7:76:04:66:46:a9:92:37:
fc:71:f5:1f:9f:d8:5a:df:5d:1a:45:bf:88:a2:03:d4:f5:a1:
b9:13:72:7a:f5:9e:f9:14:73:58:07:8f:8e:be:ac:c6:e0:d8:
91:52:9b:e5:a2:89:ee:04:d5:d9:12:25:61:c7:f0:c1:95:6c:
20:96:87:50:8b:67:69:7d:aa:0d:ea:49:94:37:39:c4:6a:71:
27:ea:9d:e0:de:c5:f3:2f:69:a3:3c:d4:57:67:1c:5e:94:88:
90:a5:5c:1b:9c:d8:e3:90:84:8a:f9:c2:02:5d:ab:c1:b9:db:
65:c9:45:bc:c2:ea:fb:69:ba:9b:57:21:15:c8:2f:c2:ab:ad:
ba:70:33:4d:c3:50:bd:ca:47:a8:7e:01:34:8a:8f:00:48:a7:
e7:e6:aa:63:e0:1a:6a:6c:d0:70:36:ac:62:92:c8:de:a3:5b:
b6:e2:1a:7a:17:db:1f:56:06:48:4d:44:15:92:19:9c:fb:e8:
ea:eb:94:29:cd:4e:27:92:5a:86:66:b9:39:70:db:b4:3c:a8:
b1:81:84:32:18:da:2d:e1:f9:4a:60:a0:37:d1:ce:17:ca:9f:
12:c0:ba:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:14:29 2026 by rpki-client