
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
File: FKbKvDAuwePc503pi_VYoEK-rFY.mft (raw, json)
Hash identifier: DTH95NxdMi+aKIWUMoXzWZOtC/eYFzHguNN+3Dr9k0Q=
Subject key identifier: 34:DB:38:ED:0F:8F:23:EE:4C:F1:6F:F5:1A:CE:23:37:02:C8:B6:0B
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 094E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
Manifest number: 1647
Signing time: Tue 18 Aug 2026 18:31:56 +0000
Manifest this update: Tue 18 Aug 2026 18:31:55 +0000
Manifest next update: Tue 25 Aug 2026 18:31:55 +0000
Files and hashes: 1: FKbKvDAuwePc503pi_VYoEK-rFY.crl (hash: xtnjbJqn5q+1M2Hn3E5wlMWnsoR/2Ew0CgdX2L5hjXA=)
2: DB78B2684BCD11EE8F976B7EC4F9AE02.roa (hash: 59G5/JH3Jy7HOVQ7Fwa2htossMKLT5qvwu9fkF+mzSU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2382 (0x94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC, serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Validity
Not Before: Aug 18 18:31:55 2026 GMT
Not After : Aug 25 18:31:55 2026 GMT
Subject: CN=6a84a51b-3168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:d3:b1:45:41:16:de:e9:03:ca:55:4b:0d:
16:21:fe:1c:60:04:08:38:4b:4f:b5:56:5f:28:90:
a2:43:d1:5d:59:be:20:31:f4:ee:89:56:f4:4e:ba:
f8:6e:60:8c:9d:2e:a0:13:30:f0:8b:b4:f4:50:34:
8b:2b:0c:ab:50:2f:26:74:fc:5b:27:b7:06:d5:cd:
e0:1a:3f:bb:17:6c:72:2c:96:b1:8a:4e:43:e4:f7:
ca:4c:a1:47:90:d0:0b:cf:e5:b7:08:6d:5c:ad:05:
2d:89:ea:50:82:4c:2c:5c:11:c0:5a:19:6d:db:c1:
86:0a:7d:1c:21:f6:41:89:0e:e3:56:12:77:df:4d:
f1:ff:27:90:7a:5e:7c:0b:d0:f5:55:8f:02:58:de:
5a:97:17:16:8a:c1:37:9f:b4:8b:33:22:2e:54:81:
15:b3:c5:01:df:2a:0e:a5:20:e4:e1:af:f1:d4:cc:
40:a6:d8:74:35:08:7e:e3:2e:a0:21:e2:34:ca:20:
e3:6c:ef:d0:34:cd:7e:80:86:4b:5d:86:72:51:c8:
fd:20:50:71:c8:3b:3d:78:e0:b9:1b:56:84:23:87:
c9:30:8f:d7:ad:2b:4b:62:b1:14:65:9d:2b:e6:e8:
78:9a:5a:66:08:49:d2:fc:d7:21:5c:e1:93:5e:ac:
50:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:38:ED:0F:8F:23:EE:4C:F1:6F:F5:1A:CE:23:37:02:C8:B6:0B
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:70:50:26:01:c2:82:8b:78:71:b9:13:16:43:28:ed:82:ec:
b1:f9:e9:85:38:55:ea:d6:d7:68:42:89:65:d0:1b:3c:29:62:
e3:3c:ea:0b:c0:60:32:e9:33:ef:8d:e2:8a:30:fc:9c:da:00:
1b:1e:98:1c:a9:84:b4:86:c5:2a:16:4e:85:90:28:b7:0d:64:
98:23:80:48:d4:e6:4d:44:b8:3d:f4:2f:76:ff:70:ab:28:f8:
db:b4:e4:bb:45:61:ae:41:33:53:8f:e7:bf:0d:ba:80:97:42:
02:41:27:85:98:c9:8c:0b:05:6d:38:d8:10:5c:93:f5:92:6c:
9e:39:04:f8:2c:17:cf:4c:ec:81:92:f9:17:ce:f3:63:cf:d2:
92:5c:55:74:e5:5b:18:2f:f7:d3:2d:1f:f2:29:0a:f6:ca:89:
7a:06:13:a9:e7:89:d6:e0:ff:ef:8a:59:51:57:91:38:d2:97:
ef:e5:58:6e:87:c4:7c:aa:d7:db:0d:db:f0:0d:00:08:b8:e8:
0b:72:5b:0c:0a:ee:cc:54:bb:b2:17:b1:f7:8a:5e:d5:94:45:
11:e4:c8:5f:f8:f4:38:50:8b:3c:c3:9c:37:db:7d:c5:e5:f7:
65:b5:71:06:16:31:f2:33:6f:5a:27:14:16:74:ab:b8:b1:bb:
24:78:9a:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA5REMxMTAvBgNVBAUTKDE0QTZDQUJDMzAyRUMxRTNEQ0U3NERFOThCRjU1OEEw
NDJCRUFDNTYwHhcNMjYwODE4MTgzMTU1WhcNMjYwODI1MTgzMTU1WjAYMRYwFAYD
VQQDEw02YTg0YTUxYi0zMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqyHTsUVBFt7pA8pVSw0WIf4cYAQIOEtPtVZfKJCiQ9FdWb4gMfTuiVb0Trr4
bmCMnS6gEzDwi7T0UDSLKwyrUC8mdPxbJ7cG1c3gGj+7F2xyLJaxik5D5PfKTKFH
kNALz+W3CG1crQUtiepQgkwsXBHAWhlt28GGCn0cIfZBiQ7jVhJ3303x/yeQel58
C9D1VY8CWN5alxcWisE3n7SLMyIuVIEVs8UB3yoOpSDk4a/x1MxApth0NQh+4y6g
IeI0yiDjbO/QNM1+gIZLXYZyUcj9IFBxyDs9eOC5G1aEI4fJMI/XrStLYrEUZZ0r
5uh4mlpmCEnS/NchXOGTXqxQqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTbOO0P
jyPuTPFv9RrOIzcCyLYLMB8GA1UdIwQYMBaAFBSmyrwwLsHj3OdN6Yv1WKBCvqxW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5
MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdlUGM1MDNwaV9WWW9FSy1y
RlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZLYkt2REF1d2VQYzUwM3BpX1ZZb0VLLXJGWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi9GS2JLdkRBdXdl
UGM1MDNwaV9WWW9FSy1yRlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb3BQJgHCgot4cbkTFkMo7YLssfnphThV6tbXaEKJZdAbPCli4zzqC8BgMukz
743iijD8nNoAGx6YHKmEtIbFKhZOhZAotw1kmCOASNTmTUS4PfQvdv9wqyj427Tk
u0VhrkEzU4/nvw26gJdCAkEnhZjJjAsFbTjYEFyT9ZJsnjkE+CwXz0zsgZL5F87z
Y8/SklxVdOVbGC/30y0f8ikK9sqJegYTqeeJ1uD/74pZUVeRONKX7+VYbofEfKrX
2w3b8A0ACLjoC3JbDAruzFS7shex94pe1ZRFEeTIX/j0OFCLPMOcN9t9xeX3ZbVx
BhYx8jNvWicUFnSruLG7JHiaFw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:42 2026 by rpki-client