
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier: bqmUH7id1plniO1103WPknFeqddDV/rC4u8hX6maDiY=
Subject key identifier: 62:DE:1E:A2:28:4F:5F:01:8D:99:4D:27:A3:EB:EF:6F:0C:F7:39:0F
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial: 0549
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number: 053F
Signing time: Fri 04 Sep 2026 23:16:20 +0000
Manifest this update: Fri 04 Sep 2026 23:16:20 +0000
Manifest next update: Fri 11 Sep 2026 23:16:20 +0000
Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: 0EhCFdu8jqnleMKyOoft7zBgYohBhUCnfk0c2DVsTEA=)
2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: 0Yuj8jwsHlCnMcg0SGtiJaONeRl25wMXy9ufRSKcIXM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 23:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Validity
Not Before: Sep 4 23:16:20 2026 GMT
Not After : Sep 11 23:16:20 2026 GMT
Subject: CN=6a9b5144-6d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:5c:9f:3b:f8:4f:84:2c:11:96:e8:86:64:
59:77:de:52:fa:38:8c:11:52:09:2f:65:e5:ea:7e:
e6:7b:24:79:47:57:68:98:da:32:6f:aa:9a:47:93:
36:c2:6a:71:06:f0:f8:92:4a:e7:fc:23:c9:f0:5a:
e0:09:00:7e:4a:a8:7c:ee:90:e9:af:a4:21:1e:ed:
14:5f:0b:e2:aa:cb:2f:75:f7:95:ba:33:30:39:c9:
77:35:4e:c9:14:ad:ea:8c:71:97:75:ae:c2:4a:91:
68:4b:0f:63:9a:f8:81:a7:18:2d:22:ea:80:02:0e:
42:9b:d7:67:92:3d:42:2e:33:8f:9d:00:a9:49:19:
c2:e1:7c:ed:c4:ea:16:47:c9:39:b6:61:9e:ec:a8:
53:21:16:ee:cc:99:8d:e1:54:e4:27:e0:24:b5:e7:
8c:17:f7:dc:2f:5c:a4:1d:94:1c:e4:58:59:0f:b6:
23:16:a3:0b:7b:91:af:94:4d:43:24:f1:44:fa:71:
69:15:17:d8:4e:12:11:b0:2a:dc:6b:7f:73:b8:14:
2e:95:e6:6e:ba:23:44:77:b9:58:5e:27:c0:17:65:
0e:b8:9f:ac:ce:a1:78:5e:59:2c:17:b4:d1:61:10:
11:8c:98:c9:02:d4:9e:b0:73:e0:ca:00:55:de:0c:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:1E:A2:28:4F:5F:01:8D:99:4D:27:A3:EB:EF:6F:0C:F7:39:0F
X509v3 Authority Key Identifier:
keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:93:bc:c8:b8:bc:00:ab:6c:b6:5f:e4:79:08:de:b6:80:82:
4a:5d:63:12:21:f2:ea:e6:85:44:2b:1e:1f:5c:94:8b:9d:bd:
ce:a2:a7:99:95:7a:40:ac:9a:3d:de:5b:1a:c1:b0:f3:0d:52:
7d:4e:e2:ba:b1:1b:d3:e4:ef:7d:9a:93:4e:a4:00:b2:39:49:
43:27:92:be:e9:e4:80:c0:92:24:07:e9:6f:fb:0d:bc:34:15:
50:f1:1c:ee:c2:18:bc:4b:3d:70:1a:c0:a2:7d:14:2a:2a:3c:
2e:58:49:29:12:ad:6a:e8:e4:af:b2:7c:e6:b9:9f:3c:e7:c2:
0f:f2:6a:0e:64:91:fb:48:74:38:e0:a0:d4:65:5c:53:84:30:
12:17:76:79:54:24:d1:51:35:b6:c7:e1:8b:db:de:d9:7c:d1:
c2:59:60:79:e4:11:73:b1:6c:1c:75:46:76:48:1b:04:e5:9e:
05:16:8d:6b:65:55:bd:6f:c5:86:73:6b:9b:a1:99:f4:32:78:
4f:ad:bd:b5:11:31:77:f1:7b:cc:c8:43:09:98:de:38:5e:f2:
f4:16:ef:f6:19:e0:ac:36:ff:73:76:75:20:5a:56:c6:75:d3:
64:26:a1:a9:80:68:9a:b3:03:f6:fb:b3:14:33:f9:eb:b3:d1:
2a:85:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:53:54 2026 by rpki-client