
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json)
Hash identifier: tPsoxMvefu/va3ADY9GPn+EbQGoA62mI1aeyw86co40=
Subject key identifier: 89:A7:48:50:24:6F:83:01:FE:15:A6:FF:AB:F7:63:71:CD:54:2A:BF
Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Certificate serial: 0BCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
Manifest number: 0BBD
Signing time: Thu 08 Oct 2026 19:10:51 +0000
Manifest this update: Thu 08 Oct 2026 19:10:51 +0000
Manifest next update: Thu 15 Oct 2026 19:10:51 +0000
Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: /GPef6PcLI09HQNYLZsAvSuF1kYCELEZP7untAY5KIw=)
2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: 93myqRCGlM9gaBwSjZMsVr+5i1INIuBngFHfzUnDQE4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 19:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Validity
Not Before: Oct 8 19:10:51 2026 GMT
Not After : Oct 15 19:10:51 2026 GMT
Subject: CN=6ac7eabb-a1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:06:e3:01:5f:43:64:b6:65:a7:a5:aa:c0:
80:30:a9:1a:21:16:01:9b:9c:c6:aa:6f:26:36:64:
1a:57:7d:4c:16:35:6a:d2:e9:f7:6c:ac:e9:f4:e8:
31:0c:a5:71:e4:7e:12:3b:f1:75:22:38:da:26:d1:
90:f0:7b:29:73:54:3c:a8:c6:91:6e:9b:b4:4c:76:
6c:e2:ac:dd:7c:5a:30:fd:db:da:4b:76:61:7f:79:
59:e1:ed:f4:5e:ea:ae:e6:25:ce:d2:85:9f:f0:89:
f3:af:ba:7d:26:be:20:bb:0b:2f:da:8d:4a:6a:17:
eb:6c:7d:a8:9d:b4:0e:2c:2b:2a:85:f1:ec:6b:b4:
b0:d7:64:3d:34:b1:0c:b2:89:42:99:d8:a5:b2:65:
5b:f9:88:97:e2:39:08:29:ef:28:32:c7:df:4d:fe:
54:4e:bb:f3:15:13:82:09:37:0e:16:d5:fe:64:2b:
90:ad:3d:93:b9:b3:a9:a0:de:da:04:f3:af:a5:da:
00:5a:db:e7:c5:58:3f:b5:c9:b9:2b:ba:3f:97:49:
b0:83:c8:d2:49:4b:24:34:17:c1:70:45:05:14:a6:
20:b3:db:15:29:d8:99:d2:1b:33:f4:48:d6:cf:d1:
82:8c:c9:d0:b4:73:f5:78:6e:3c:c1:d6:ad:4f:83:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:48:50:24:6F:83:01:FE:15:A6:FF:AB:F7:63:71:CD:54:2A:BF
X509v3 Authority Key Identifier:
keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:83:87:d5:ad:39:87:2f:5e:8f:2e:68:b2:c9:3f:9d:69:0c:
cf:61:5c:0f:9b:9a:22:57:cf:64:55:6c:f0:fe:25:5c:79:3d:
8b:e8:12:8a:d0:6c:46:53:09:aa:e2:cb:d1:16:d5:8d:7e:a2:
d3:78:67:aa:fa:fb:fd:35:43:9e:0f:92:f8:1d:0c:80:f7:df:
d5:4d:5d:62:12:ef:16:0c:99:fb:10:9b:d3:57:d8:12:31:31:
5a:a7:09:8d:a8:b8:8a:4b:dd:c5:76:17:46:93:ea:92:aa:e7:
57:37:dd:9e:6c:c7:a2:eb:f2:be:2e:a6:f2:2e:c9:c5:ff:26:
c7:bb:e4:07:ae:d4:53:b2:db:c2:1b:0b:11:e8:1a:05:60:e6:
d8:8e:b8:57:e0:17:8c:42:03:d2:10:9a:b1:3c:bc:4c:a4:c7:
aa:f4:1d:b7:61:a7:2d:2a:96:a9:79:d1:35:03:00:da:dd:b2:
b5:a2:2f:3b:31:47:35:b8:79:a2:6c:d6:6a:70:cf:b6:68:a0:
af:f6:f0:0b:b7:2a:ba:5e:2b:bc:3e:3f:c1:e8:68:da:12:3f:
85:3d:9d:e0:43:9d:b0:0d:cd:02:75:a3:32:3e:19:b9:0b:64:
fe:00:5b:31:e3:ac:5f:06:45:17:e2:8f:da:38:58:87:7f:d0:
97:a5:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:57:03 2026 by rpki-client