
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier: xNfny16LrpPJ5jGw4IFIBsLqrKqCd+7FTCwfPKJPQ5A=
Subject key identifier: 43:B5:28:35:63:F8:46:17:5B:90:E9:85:3A:E9:AF:3E:C9:09:6D:04
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number: 01D9
Signing time: Fri 11 Sep 2026 03:39:34 +0000
Manifest this update: Fri 11 Sep 2026 03:39:33 +0000
Manifest next update: Fri 18 Sep 2026 03:39:33 +0000
Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: FvJBaSXAG5Tr79huBupsisIt9sdJgj0QJhk3xMNsivA=)
2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: O7Lj4yPFpwZm2VwkuRfj2gTrVG1pPTs7zZ1NbT7XSSw=)
3: Z4aH_tdZ0tOLwEu69Vy4G69gf-4.asa (hash: Aislko8MBzysrn48sutN/9wnmjDSj9ZREo4lAeWYs0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Validity
Not Before: Sep 11 03:39:33 2026 GMT
Not After : Sep 18 03:39:33 2026 GMT
Subject: CN=6aa377f6-ac5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:2c:dd:e8:9b:2d:29:55:84:b6:2e:74:71:
ce:c6:e8:73:1d:65:08:7d:44:ce:c5:78:fb:f4:b5:
9c:c4:55:bb:12:50:57:a8:25:e7:1a:f1:b3:77:c0:
e1:c1:5a:66:28:08:16:85:4d:29:d7:9c:ee:78:20:
34:de:bd:59:a0:3a:69:08:1b:40:86:6d:19:ff:32:
06:e9:00:2f:b1:2c:9b:9c:b2:00:4c:cc:4c:37:5a:
cb:3f:0e:a5:ab:18:af:4b:8b:8d:f5:8c:06:a6:e0:
06:0d:eb:00:e1:0d:58:0a:44:30:5e:f7:a1:52:94:
f4:98:94:c9:0e:9c:57:c6:3a:68:8e:7d:67:12:04:
37:5b:86:1d:30:93:7d:d5:fe:e0:45:98:4e:dc:de:
1d:9b:4e:db:4f:d0:8d:38:4d:0a:77:8b:05:1a:24:
0d:27:3b:a6:6a:9d:d1:17:49:77:88:51:89:2f:80:
65:00:76:9f:9a:31:13:e0:b7:d4:b2:68:80:83:16:
ee:e0:b2:35:0c:3f:2e:c8:3d:71:ca:93:ec:4b:99:
db:e9:64:06:51:c5:34:cc:50:7f:29:86:48:a4:c9:
1d:2e:34:36:86:69:b7:20:dd:00:51:5a:93:b9:1b:
51:88:38:50:c7:a6:09:80:c5:28:bd:21:48:cf:0c:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B5:28:35:63:F8:46:17:5B:90:E9:85:3A:E9:AF:3E:C9:09:6D:04
X509v3 Authority Key Identifier:
keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:9f:d1:1f:fa:8d:81:b1:24:cc:ea:e0:2b:ed:6e:bf:02:8b:
12:a8:ef:e9:eb:85:7c:e0:c8:b0:26:24:1a:d4:60:c2:fb:77:
a2:9a:87:41:3f:37:f4:8f:f1:47:37:9b:0a:b1:c3:24:c1:73:
7b:f7:7e:cb:5f:02:2a:13:68:e7:da:d1:8a:f8:a4:ac:96:40:
c6:22:bf:ab:74:20:18:7c:ae:77:22:90:bd:92:4b:29:c6:26:
83:f0:e9:bb:56:0d:71:b3:42:f1:1b:57:32:39:93:6a:f3:14:
3f:4d:b1:40:17:70:f5:e9:66:01:d7:a6:95:14:a1:b9:31:c5:
79:52:fe:5f:7e:1c:36:47:99:a4:3b:d5:13:f7:b7:a1:69:ca:
df:b7:c4:49:03:a9:72:bf:4c:11:9a:f8:9b:07:58:85:f3:7c:
16:f6:f5:32:6b:6d:3f:11:20:0a:19:03:e2:ca:dc:3e:8e:ae:
49:4e:9f:9e:4d:ad:df:55:8c:3d:c1:1a:4c:73:98:c9:48:2a:
a2:41:da:fa:3b:fc:a9:5b:cb:7b:54:bc:66:2a:83:83:23:c2:
08:a6:2b:15:76:3a:61:b8:dc:0a:1f:75:7c:1c:d3:1a:19:35:
05:e4:5e:98:6f:14:6a:89:92:89:54:d6:81:3f:fe:31:c1:74:
9f:25:d1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:04 2026 by rpki-client