
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json)
Hash identifier: tYCnZpckuJIvnk7C4oy8qCsAp0h1Xs4QOHQhETmoIlo=
Subject key identifier: C8:DF:DF:F9:38:5E:86:49:94:33:3C:89:C8:1B:A4:59:36:3F:59:B4
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 0920
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
Manifest number: 15EB
Signing time: Wed 20 May 2026 18:21:09 +0000
Manifest this update: Wed 20 May 2026 18:21:09 +0000
Manifest next update: Wed 27 May 2026 18:21:09 +0000
Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: 3LK0DfdOxVBfE9tatOC0jEwd3FyQW0z56YXiga0UB7U=)
2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: 59G5/JH3Jy7HOVQ7Fwa2htossMKLT5qvwu9fkF+mzSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: May 20 18:21:09 2026 GMT
Not After : May 27 18:21:09 2026 GMT
Subject: CN=6a0dfb95-3956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:a3:ac:47:8b:dd:91:79:56:8a:cc:2a:75:
70:ce:dc:14:db:e0:2e:0b:e2:7b:0a:21:59:f0:2e:
23:26:b4:c6:96:ad:16:93:5c:67:18:13:41:6d:56:
b0:81:b7:01:1f:59:07:71:1a:6e:ea:0f:e3:eb:84:
05:22:6e:0a:88:0e:e2:30:85:92:20:6c:6d:5a:ff:
33:8c:bd:6d:a9:a9:bb:6c:5f:ed:a3:37:1f:15:a1:
c9:63:e2:f0:1d:e2:bf:44:40:05:e8:b4:c3:c0:bb:
10:2a:e0:6b:8b:2e:e3:7a:2d:af:24:dd:e1:13:98:
f1:b9:f4:cc:b8:b0:67:01:07:1b:5f:a9:15:2c:79:
af:f6:09:ae:c1:7a:e8:13:40:43:03:c9:aa:60:a7:
03:8a:cd:22:65:b5:51:f1:f5:54:e0:2a:59:be:92:
c7:4a:b9:3c:82:8a:70:52:9b:93:29:d2:4b:f8:3b:
0c:67:99:79:dd:a7:46:9a:95:4b:82:9c:fd:c5:39:
32:18:b7:92:e7:6d:5a:8b:7b:5b:e9:af:21:c4:f2:
df:fa:be:e6:12:38:70:12:d0:92:87:12:ea:b6:7b:
4b:88:96:f5:20:05:44:bc:32:91:f6:b8:11:86:a7:
86:59:45:35:ad:de:71:4f:25:59:4b:6f:dc:2f:fa:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DF:DF:F9:38:5E:86:49:94:33:3C:89:C8:1B:A4:59:36:3F:59:B4
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:93:7d:c8:c8:4e:e1:b0:21:12:e6:c1:f9:42:17:68:72:a7:
63:d2:3b:c2:c7:14:4f:58:d0:4c:cf:a9:31:c1:84:bb:70:35:
bc:49:92:49:d4:c3:ae:1f:a9:0a:66:b3:96:a3:9b:41:2a:b2:
a1:57:b1:9e:23:d6:19:e6:9f:b4:8e:e1:21:dc:54:ba:5b:ac:
d3:1e:fe:2d:2d:ce:d7:9a:05:46:92:0e:cf:cf:54:37:e3:a5:
c6:e4:7b:b7:6b:76:e0:bc:e0:ef:99:55:a4:cf:62:ae:d7:11:
63:12:7c:34:d3:91:17:1b:1c:e2:92:ae:73:e1:f5:39:d7:b8:
ad:03:b9:d3:65:0e:a3:d2:f6:66:d5:4a:27:47:00:66:73:d0:
ba:f0:b1:06:86:a5:ae:fc:0c:75:fc:39:3a:13:3d:10:78:7e:
df:b0:74:47:36:7e:1b:c6:11:76:64:62:5e:fe:b7:da:0a:2e:
d4:a8:3d:04:53:bc:50:28:4b:cc:e1:fa:e9:63:ae:b5:6d:65:
09:2d:2f:60:84:3e:c1:fd:49:21:74:ee:bc:29:53:b5:52:ed:
6d:79:91:11:ba:74:7d:bd:72:c1:03:4c:76:b6:f7:a8:30:7e:
66:7d:dd:3b:52:be:06:89:c3:1f:90:35:b3:be:0c:78:10:db:
4c:89:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:56 2026 by rpki-client