
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
File: FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft (raw, json)
Hash identifier: QN55z8uuhQrVkNZ6VcgYtVZvKjv4pQucaJh/d+jETyM=
Subject key identifier: EB:C3:80:A1:98:2D:F3:3C:D0:1C:98:76:90:80:C4:FA:FD:16:06:BF
Authority key identifier: 15:3A:66:56:37:60:27:32:4C:19:BE:EA:06:B5:44:65:46:1F:BE:3F
Certificate issuer: /CN=A91AE6DE/serialNumber=153A6656376027324C19BEEA06B54465461FBE3F
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
Manifest number: 2B
Signing time: Sun 01 Nov 2026 09:50:44 +0000
Manifest this update: Sun 01 Nov 2026 09:50:44 +0000
Manifest next update: Sun 08 Nov 2026 09:50:44 +0000
Files and hashes: 1: FTpmVjdgJzJMGb7qBrVEZUYfvj8.crl (hash: xfE42AwRT+GoKFsAfFGNbNp8wYHgm2uZQ/oFRixawI4=)
2: 9888C224977211F19213E74F4611F970.roa (hash: qjKOuVRuo0iSJkq/X2X1qVQVx0b/lgzrwkYHlNPxuOM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.crl
rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Nov 2026 09:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE6DE, serialNumber=153A6656376027324C19BEEA06B54465461FBE3F
Validity
Not Before: Nov 1 09:50:44 2026 GMT
Not After : Nov 8 09:50:44 2026 GMT
Subject: CN=6ae70b74-ba6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:e5:ea:05:a1:d1:4f:97:c5:e5:64:1c:d4:
69:08:b8:5d:e7:1a:64:f5:f7:bf:f7:d4:6b:cb:e5:
f3:12:18:10:2a:24:bd:80:14:a2:f7:85:a2:5b:e3:
5e:6a:42:cc:a3:2b:41:c5:40:bb:a9:6c:87:ab:4c:
01:bd:cb:15:35:80:c9:4d:d1:5a:e1:31:cc:2f:8b:
e2:16:15:17:d7:27:5a:72:a4:c9:98:1d:e8:5c:6c:
0f:a7:56:9e:63:a9:47:0b:47:71:ec:b4:7f:71:f9:
bd:43:5f:8d:77:e6:81:fe:c0:56:8c:ed:e4:7e:03:
01:a5:09:32:6f:93:81:92:9f:0b:ed:d2:f1:65:20:
a5:26:02:f9:34:3a:6f:83:0f:f6:0b:51:f4:bc:18:
e9:d3:24:1a:5d:d8:57:8d:68:55:c9:49:33:6d:41:
7f:94:72:38:ee:c2:59:b0:a0:bf:83:70:db:47:ff:
53:87:c0:55:48:4a:e1:69:7e:2a:24:b8:e1:75:e4:
f8:ab:e8:4d:8d:c4:bc:13:f7:16:57:65:30:02:6a:
f8:3b:bb:c3:9c:f7:30:84:a5:29:98:e1:c4:78:34:
62:35:b3:84:28:4d:27:b8:0d:e8:ed:e7:33:30:c4:
57:51:ae:51:6f:31:04:34:01:fd:d4:6d:35:cf:4b:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:80:A1:98:2D:F3:3C:D0:1C:98:76:90:80:C4:FA:FD:16:06:BF
X509v3 Authority Key Identifier:
keyid:15:3A:66:56:37:60:27:32:4C:19:BE:EA:06:B5:44:65:46:1F:BE:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTpmVjdgJzJMGb7qBrVEZUYfvj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE6DE/D7C63AE0977011F19CA186DC4511F970/FTpmVjdgJzJMGb7qBrVEZUYfvj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:fc:c2:f3:1f:8f:fc:f1:54:63:a8:04:82:22:ff:a4:74:
02:f6:23:77:0d:dd:29:2b:c4:c0:ae:ea:ed:2d:d5:54:9a:4a:
80:7c:f4:c6:88:d2:a9:ef:86:b5:15:3d:76:63:34:16:12:f5:
df:b5:86:23:ce:7c:71:a1:37:f9:67:f5:21:6f:5c:a7:d1:45:
6b:f5:0d:a9:63:be:d8:14:19:0b:bc:25:d9:8d:42:b6:50:f9:
72:94:bd:67:7e:4b:06:ae:16:3b:1c:2b:7c:9f:19:c3:a2:22:
32:d5:68:a2:f0:aa:74:31:fd:a3:34:86:2b:ba:db:5b:13:3a:
de:fc:44:c7:20:0c:77:ef:01:e3:16:b9:35:cb:4b:10:07:b4:
15:95:f5:b1:d4:d2:1f:aa:d3:58:3c:1c:4e:e0:70:ea:89:85:
5b:0e:6e:8b:49:49:dc:99:f1:30:08:7a:09:62:ea:b5:56:ea:
c1:3f:59:92:43:90:ed:57:7e:a6:cf:f0:38:9c:ef:eb:44:60:
6a:7f:0a:a6:5a:db:d3:76:95:ab:62:d9:1f:9f:a6:53:ad:75:
5d:78:33:22:ea:7a:6e:ff:66:a1:51:26:3f:fa:c2:73:21:88:
e1:aa:92:b7:7f:25:cf:a5:bd:31:c2:84:b3:29:3b:70:1a:90:
f1:7e:f4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:41:41 2026 by rpki-client