
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
File: FzfOVvQLH76F5uXrA0_WsqFkb8w.mft (raw, json)
Hash identifier: ioaL1FfTM5kltWhngHV2jAgcnnE2nQFKLHXF5+EjSRk=
Subject key identifier: 7E:00:DD:3C:B2:E1:12:38:EC:73:ED:45:9B:9F:BD:52:78:C8:71:86
Authority key identifier: 17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC
Certificate issuer: /CN=A91443EA/serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
Manifest number: 1D
Signing time: Sat 03 Oct 2026 09:41:19 +0000
Manifest this update: Sat 03 Oct 2026 09:41:19 +0000
Manifest next update: Sat 10 Oct 2026 09:41:19 +0000
Files and hashes: 1: FzfOVvQLH76F5uXrA0_WsqFkb8w.crl (hash: i4q1kcZSp2BBC8ipxEiX42ZpqxGTa3z15Z4jL4wsMkY=)
2: 41339BFA973D11F184508C1C3711F970.roa (hash: ErCTpmbM2VNJ1hvCRE7AmqqAa2l2NDuA3762i8vtV40=)
3: 72T5zLUyeM7VLgn276kJdhh3FIs.asa (hash: o/a6Ef5+Irp8WGLBEhxdmtOBpYmNP2JzAw60ujiyavU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl
rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 09:41:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443EA, serialNumber=1737CE56F40B1FBE85E6E5EB034FD6B2A1646FCC
Validity
Not Before: Oct 3 09:41:19 2026 GMT
Not After : Oct 10 09:41:19 2026 GMT
Subject: CN=6ac0cdbf-d9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:0d:cb:12:41:7f:89:0c:48:2e:8b:c8:4d:
49:c2:b6:7f:87:84:ac:96:90:0b:01:bb:50:71:d4:
32:76:b6:60:d8:f0:2f:af:49:f2:8d:12:7e:53:1b:
03:03:8e:82:1a:0c:a1:a3:81:dc:66:b7:9f:5f:18:
2a:dc:b5:ed:fc:dd:2f:e7:09:e7:91:4f:28:aa:a4:
1f:49:6e:79:0a:cf:48:3e:58:dc:56:f1:2c:bd:8a:
1c:a1:02:5b:f6:00:c0:e0:84:4f:c7:34:53:f8:4e:
5b:5a:08:2b:e8:f3:7b:36:79:e4:31:7b:d8:0d:27:
6d:43:f0:62:97:f7:7c:85:64:31:d0:d0:f3:f4:0d:
64:1c:b2:af:c1:bf:c2:4e:f9:95:7e:1a:84:66:db:
91:20:9b:a9:bb:36:bf:cf:3f:88:91:20:87:8a:1e:
be:52:56:87:dc:c1:a2:7d:0a:50:67:98:60:2a:d7:
85:76:c7:a3:6b:f7:40:f7:4c:6d:47:0b:b3:33:2b:
2a:6d:5b:73:56:10:d5:72:43:e6:76:db:ad:65:6a:
b4:9c:e5:4c:8f:06:d0:fd:4c:26:88:26:dd:c0:fa:
8a:a8:f7:2b:49:10:88:9a:ca:fc:fd:4f:8f:7b:0a:
f3:62:83:69:b9:1d:0e:78:31:89:63:b5:aa:9b:02:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:DD:3C:B2:E1:12:38:EC:73:ED:45:9B:9F:BD:52:78:C8:71:86
X509v3 Authority Key Identifier:
keyid:17:37:CE:56:F4:0B:1F:BE:85:E6:E5:EB:03:4F:D6:B2:A1:64:6F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzfOVvQLH76F5uXrA0_WsqFkb8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443EA/C55C1B7E973C11F1B9A51BDA3611F970/FzfOVvQLH76F5uXrA0_WsqFkb8w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1d:38:85:50:a8:fd:82:b6:b6:10:5a:6f:4d:97:f2:44:82:
18:f6:f6:91:80:4e:d7:bf:91:26:a7:7e:d1:a2:d4:32:99:57:
e0:f1:95:a5:70:4b:f4:4a:60:54:1b:3f:91:e1:38:9f:5d:cf:
41:bf:09:bc:cb:11:27:51:cc:7d:e2:25:23:3b:56:c4:c3:79:
d4:c9:59:b8:9c:66:26:d9:f6:08:7e:45:30:63:1a:59:29:87:
c3:a3:e8:24:df:ca:0a:6f:b3:6c:0a:73:87:ae:0b:c5:44:a4:
94:4b:f6:d5:4e:b4:47:86:b8:4b:c8:62:48:b5:38:42:78:cd:
c3:7d:57:83:64:e5:7c:ed:0d:3c:82:5b:96:86:7e:5a:19:bc:
4c:8a:63:7d:f5:da:9b:36:85:05:ca:d9:87:e5:28:18:56:89:
ff:2a:8a:84:20:df:13:59:cd:32:95:58:b8:e3:ae:18:56:ef:
83:86:11:0a:50:5a:ff:7a:6b:ff:57:ff:34:c6:d6:a8:8d:c4:
c1:60:39:0b:04:97:cc:70:aa:ef:d7:a8:c8:80:71:4e:93:af:
22:c6:c9:c0:e6:14:d2:84:1f:09:b3:c6:8b:f7:2d:a3:54:6a:
40:36:23:16:8c:86:2d:e4:5a:2f:7c:ca:d0:bd:ba:14:67:a5:
98:d4:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:23 2026 by rpki-client