
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier: I128xv8iRI2SWvuk+6SmBquMgw8PP4g4JBgZfBBbDH0=
Subject key identifier: 2E:22:4D:A5:A8:DD:FA:F1:3A:99:2C:EB:E3:99:62:46:B5:08:9E:A7
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number: 01A9
Signing time: Thu 11 Jun 2026 06:16:17 +0000
Manifest this update: Thu 11 Jun 2026 06:16:17 +0000
Manifest next update: Thu 18 Jun 2026 06:16:17 +0000
Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: LHjqjDk5/+lCs9e2Kj1kUbJrMFLEqM1q70JgZtK/0Lc=)
2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: O7Lj4yPFpwZm2VwkuRfj2gTrVG1pPTs7zZ1NbT7XSSw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 06:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Validity
Not Before: Jun 11 06:16:17 2026 GMT
Not After : Jun 18 06:16:17 2026 GMT
Subject: CN=6a2a52b1-165b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:35:00:fb:1a:fe:35:1b:2a:20:88:3e:b1:
93:0c:99:c8:0a:da:89:2a:db:7c:e8:c9:c7:c2:49:
b6:4d:c6:c7:b8:6b:1d:e6:11:2d:3d:5e:90:e5:2c:
e5:c7:f3:77:69:4a:78:11:b4:8c:a7:4d:9d:b8:e1:
a5:98:d2:84:da:c5:bb:46:5d:10:0a:c3:a1:b5:c5:
25:eb:df:35:1c:50:eb:02:c7:3c:bf:03:a5:32:e2:
c1:34:a4:48:b0:c2:9d:38:76:00:a0:27:b2:71:a9:
75:0a:8f:72:82:f9:d7:ac:66:ab:8d:cd:66:d7:ac:
4d:95:3a:f0:f1:d1:25:20:c5:cf:a5:ed:15:f2:8c:
a1:42:15:d0:99:f3:1d:94:08:d4:75:3d:8d:eb:7c:
bc:6a:27:19:cc:a5:58:70:ba:5c:3d:97:1e:9a:52:
7d:9c:05:63:e8:2c:5b:b3:ac:55:45:62:2f:50:1c:
36:fc:f2:25:e8:db:ea:d8:7e:58:27:5f:25:21:0d:
a2:be:52:07:1b:42:bd:28:cb:69:80:35:e8:74:56:
7d:38:5e:5a:55:84:c2:2e:2d:7e:e0:37:8c:ee:de:
a2:4f:8c:e5:60:5f:57:eb:3f:04:9f:2e:06:f0:60:
3e:dd:ec:c2:16:f6:47:38:d5:23:58:30:4a:64:ef:
c2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:4D:A5:A8:DD:FA:F1:3A:99:2C:EB:E3:99:62:46:B5:08:9E:A7
X509v3 Authority Key Identifier:
keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:ac:94:1b:c3:c1:6e:cd:23:30:aa:6c:e0:b9:2c:b2:d5:
c8:40:ef:1f:1f:2e:fb:58:95:7a:14:c4:22:f0:62:1c:ab:12:
8c:e7:a4:f8:64:04:44:ae:14:e3:0a:c7:ab:3b:46:f1:f5:37:
05:87:ff:7b:2d:5e:2f:80:c0:9b:a7:58:69:c8:54:05:ae:14:
6a:8d:0d:c2:3f:50:6d:19:27:f0:56:72:08:ba:db:49:6a:63:
0e:2f:da:86:d4:fc:d0:e6:ff:d1:ce:66:5e:b9:b8:d3:e9:a4:
2f:1c:54:1d:86:d0:7f:cf:80:f4:70:e3:88:9b:f6:95:6b:06:
5e:30:58:3a:2d:b0:38:32:fb:b3:a9:29:dc:6c:9a:0b:ea:23:
d8:72:27:aa:7d:78:27:e6:2e:e6:98:67:f7:3b:41:90:56:b2:
80:2c:4a:9a:64:e2:66:06:73:39:47:0a:a4:59:70:c3:16:9c:
4a:91:ac:0c:44:66:28:f3:f9:29:fc:77:9a:c0:2c:a1:6e:e0:
69:09:9e:5d:b2:8d:cc:d9:1b:3f:c9:86:50:7b:18:25:83:09:
e7:40:42:bc:df:0a:ce:9a:29:ee:1b:cd:79:33:63:a5:22:05:
fb:dc:31:78:5b:ad:13:c3:fc:3c:58:49:29:21:1b:ee:46:d1:
d1:19:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 21:35:11 2026 by rpki-client