
$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier: NEg3TcNuIcpjHHLTur7+7dRNo+knfBIxIMez0QLrdys=
Subject key identifier: 9A:34:F3:05:7D:37:90:05:52:2D:98:B8:08:5C:73:CB:A2:E3:59:FF
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial: 0BCA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number: 0BB4
Signing time: Tue 18 Aug 2026 19:21:00 +0000
Manifest this update: Tue 18 Aug 2026 19:20:59 +0000
Manifest next update: Tue 25 Aug 2026 19:20:59 +0000
Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: 1cY7QHu+1bL3RkrnL/n9V40NAUhpeIgfh9Zo1rOzvdo=)
2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: 9P/caarcdfE5fgEntnYZ7v6bJcDbToqOd+JV3OwQEFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Validity
Not Before: Aug 18 19:20:59 2026 GMT
Not After : Aug 25 19:20:59 2026 GMT
Subject: CN=6a84b09c-21b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:c6:e3:26:12:d4:c3:64:d1:32:57:64:ef:
2a:30:06:b0:24:c2:d3:2f:9b:7d:00:ea:a8:24:cc:
60:6e:a3:c7:fe:78:06:56:7d:77:2a:87:4f:5d:16:
a9:ea:3e:49:68:73:15:62:73:dc:b4:28:2c:2e:93:
12:20:6a:2c:c8:e5:64:59:8a:38:91:91:9b:bb:0a:
25:99:1d:98:c9:c0:bc:4c:05:dd:47:ac:87:95:55:
53:5c:43:d2:8d:fa:97:3c:95:ef:99:2a:3e:e8:72:
16:26:f7:c6:65:fd:af:8a:5a:66:53:78:3e:00:50:
65:1d:29:58:b3:f1:ab:94:02:a2:4c:cd:ce:22:cd:
54:f2:7c:fb:21:55:e0:ca:ed:19:fc:50:29:ae:24:
71:7e:81:b3:f3:1f:59:f6:69:25:ad:ba:f0:6d:27:
7c:82:46:bd:4c:56:10:93:5e:8b:f0:ca:21:af:e0:
56:19:ce:fe:af:f6:58:35:bc:09:0a:d6:48:2c:fa:
4b:43:d7:d3:9e:25:81:f5:1f:81:58:bd:f9:80:aa:
67:3d:b0:7d:bd:b6:e7:62:7d:c4:81:9d:55:7b:17:
6b:61:21:56:22:ee:39:94:0d:6d:45:67:77:d7:ac:
7b:cf:5c:e1:ab:36:5c:13:15:90:1d:46:90:ef:e6:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:F3:05:7D:37:90:05:52:2D:98:B8:08:5C:73:CB:A2:E3:59:FF
X509v3 Authority Key Identifier:
keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:f1:a5:1d:9c:17:d0:d6:f8:50:1e:26:ce:0d:09:38:23:
63:21:a1:68:0c:85:51:58:d9:d6:98:81:2f:91:27:e1:36:be:
90:0c:34:21:b1:5d:67:c2:60:c2:53:a8:77:c5:68:d8:a5:97:
21:5d:f6:83:10:35:9e:81:bb:66:85:76:53:88:6b:5f:59:d4:
13:40:a1:51:2d:08:78:63:5b:7d:23:0b:8a:30:03:3f:1f:96:
57:0f:e1:a5:32:db:be:f8:36:e9:54:b5:f8:2b:95:90:70:82:
6b:63:d0:25:7a:9b:0f:06:81:ff:93:ba:3a:44:30:7d:b0:ab:
9d:21:8c:63:cd:96:69:bf:d6:ef:31:0d:b5:72:a4:22:56:20:
02:9c:cb:3e:43:d5:9e:fc:4f:7e:bb:ed:dc:91:f8:96:71:17:
3b:e2:be:b4:ca:0f:bc:a5:a7:a5:65:8a:62:60:ca:16:02:38:
c0:43:e2:11:ae:d9:83:83:b0:57:cd:07:7a:31:21:5d:0b:08:
30:18:08:9a:6f:ab:e0:54:f9:46:ac:e4:ef:1c:00:05:1b:12:
8a:c5:ca:64:96:7d:00:a3:e5:27:64:16:b1:cc:8a:c8:ed:e4:
3f:4f:cb:4d:48:ae:f9:99:06:d7:6c:ec:7e:c2:a5:51:8c:6f:
f2:63:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:02 2026 by rpki-client