
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier: IyucBHknVbumBEktaxeAT0Rbo0p4dR2AX3qxO4/PM0I=
Subject key identifier: 21:78:55:F1:C8:73:9C:3A:9B:84:23:3B:44:94:1E:DE:99:67:56:54
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: 02A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number: 02A1
Signing time: Sat 03 Oct 2026 02:12:15 +0000
Manifest this update: Sat 03 Oct 2026 02:12:14 +0000
Manifest next update: Sat 10 Oct 2026 02:12:14 +0000
Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: jQLLWjpzSzfa6SSeTfNmu+OgJDbH2+91rD47tQX0EWs=)
2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: 6SZegSN1bEm8IpeY56I3OBOVi6qp9uRdOosU1uc4tzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 679 (0x2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: Oct 3 02:12:14 2026 GMT
Not After : Oct 10 02:12:14 2026 GMT
Subject: CN=6ac0647f-7d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:9b:38:5e:2d:dc:06:40:af:7c:63:7c:c9:
95:c5:d7:33:6c:19:62:f7:08:1e:ce:19:d3:14:cf:
b2:2d:9e:5c:d9:3c:1e:a6:34:fb:63:49:75:d0:9b:
f2:50:3b:ea:26:9c:8d:ad:4f:20:ac:39:31:84:3c:
c7:f2:06:58:eb:97:cd:ce:d0:ac:c5:a5:45:cd:86:
62:dd:c1:7b:d3:c2:58:04:f5:0c:cf:a9:1a:7e:74:
4b:89:30:fc:ea:04:c0:d4:91:dd:fd:76:bd:cd:c8:
cc:96:e0:8b:64:cb:13:dc:a0:4a:40:bc:3b:22:60:
b2:02:3f:46:41:cd:9f:95:47:16:ca:61:e7:21:d6:
b2:bc:c2:c5:96:a4:91:9f:5a:ba:8d:9a:e7:27:d9:
a2:c5:68:f2:93:1b:5d:1f:db:42:2e:61:35:ca:2f:
d1:83:d1:ee:a2:23:da:fd:8d:16:b5:7a:1d:09:b0:
c1:53:ae:d2:89:ce:1b:90:f9:a4:8d:27:b6:ba:e3:
dd:aa:20:cf:62:99:b8:fe:f0:2c:1f:46:bc:ab:3f:
cd:29:25:19:cb:06:45:14:06:ab:6b:f4:85:75:35:
4b:9d:e7:fd:b1:84:c3:88:59:2e:68:17:ad:dd:64:
c1:10:fe:c1:94:e6:f7:d7:c2:ef:3b:ac:70:9b:2d:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:55:F1:C8:73:9C:3A:9B:84:23:3B:44:94:1E:DE:99:67:56:54
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dd:72:4e:88:3d:a6:76:58:b8:1f:fa:bc:c7:1d:a8:70:1a:
d2:31:39:fb:b7:e0:d1:0a:20:b6:b4:79:0c:93:e5:c8:cd:ee:
7f:6d:c1:29:62:62:9b:de:00:ee:3a:6d:2d:e7:8c:4e:c6:7f:
49:3f:2a:26:a0:a8:36:04:58:28:e3:55:fa:1b:f3:2c:63:a3:
9b:e7:bb:66:12:bf:f7:66:1b:c6:df:06:09:3b:4f:10:d6:7a:
87:3c:cc:26:29:2a:bf:0c:86:5c:fe:7e:52:38:fd:d5:26:4c:
d5:a0:df:13:5b:17:c5:f7:53:c2:f4:33:e1:5a:74:61:45:b4:
f2:fb:3a:ea:4d:5a:f9:1a:59:01:f4:24:6a:39:84:63:50:0c:
b8:de:26:95:1b:12:7e:bf:98:dd:fd:e2:55:ce:10:ba:96:ed:
53:67:96:51:0a:23:57:74:9c:6e:e2:b5:5b:cd:b8:5c:f3:ed:
96:df:7d:4b:b8:bc:1e:8d:6d:27:f9:d3:b9:5a:2d:92:a2:af:
5b:39:15:66:d8:ed:55:48:2a:85:93:6d:d3:99:5a:87:ff:31:
15:ad:47:72:ff:92:8a:0a:5a:02:61:e0:b4:c3:22:85:ce:43:
25:8f:9b:1b:75:0c:62:62:87:a1:76:72:c8:89:90:3f:09:76:
8f:31:07:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:52 2026 by rpki-client