
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier: ilFOxZzVOv16dCUMctaLqpK59xS5bhS2gmu168A/D3I=
Subject key identifier: AC:4E:D6:0C:3C:20:F2:34:97:81:6B:56:F6:92:CE:63:F9:92:F0:E8
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number: 0103
Signing time: Tue 27 Oct 2026 06:30:29 +0000
Manifest this update: Tue 27 Oct 2026 06:30:29 +0000
Manifest next update: Tue 03 Nov 2026 06:30:29 +0000
Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: EmTWpX3GOSqweFiM4IkzFYMrOqD6M/d6F+ZaGDCpqkk=)
2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 4L0qNczFCVQsT0d5qT7GZf12BVPc/HfNGs+jHWl9kBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 06:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Oct 27 06:30:29 2026 GMT
Not After : Nov 3 06:30:29 2026 GMT
Subject: CN=6ae04505-2589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:4b:08:93:b0:85:a0:f2:48:ac:ce:4a:5d:
aa:d8:f9:71:90:60:91:c4:af:94:fe:cf:6a:ff:5b:
75:b0:bc:3d:a3:f9:42:47:89:77:d1:fc:2e:d2:9f:
4a:08:a2:10:29:64:a4:6f:3f:1d:1c:b5:ad:7c:76:
8d:69:6a:62:b3:1c:5f:68:8c:c6:b1:ad:10:f7:ed:
0f:e1:6f:93:0a:08:de:5b:c4:95:0a:20:45:6f:a9:
a9:9c:8b:e5:7b:94:e2:5d:a2:a0:27:cf:c8:1c:bd:
34:a1:86:d2:e1:48:7a:0f:25:c4:0f:f3:85:a0:de:
1d:aa:6d:3c:f8:96:18:61:14:c5:92:dd:c0:a4:7d:
9c:ef:f3:79:61:d5:97:ee:aa:8f:c2:c3:fa:84:ff:
b5:be:e9:46:39:a4:32:26:2b:ed:47:46:58:98:8e:
87:8c:8c:60:3e:6b:5d:a3:63:46:7d:29:f0:01:d9:
ba:89:b3:97:ea:35:0a:0a:7e:0a:15:99:fc:19:0c:
12:68:97:09:99:00:29:1a:5a:c5:20:45:df:d2:49:
0d:fe:c0:e6:e4:8d:6b:3e:3e:b2:33:fc:8d:8f:e3:
ef:ec:43:4b:0c:af:da:c8:62:8b:2a:98:07:db:b1:
a5:9e:ac:b4:a0:cb:8b:4f:ac:ce:f6:56:cc:35:a8:
f5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4E:D6:0C:3C:20:F2:34:97:81:6B:56:F6:92:CE:63:F9:92:F0:E8
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2f:c2:82:69:2c:c5:9a:5b:7e:f3:3d:f4:52:04:3c:58:ab:
92:67:c0:4e:22:00:0c:a5:ac:8c:2a:2e:53:ad:af:57:e2:89:
1d:c1:5b:5e:57:2e:29:65:9c:6d:a0:c4:26:9e:c6:d6:41:bd:
da:ec:7c:c3:30:8f:34:28:9c:40:7a:cc:8c:68:64:33:80:2d:
50:b6:b1:64:36:64:84:83:8d:90:63:46:55:cf:ab:c0:24:ef:
de:ca:f8:f9:68:e3:13:25:7b:ac:70:28:28:4e:58:0c:b7:19:
5a:2b:7b:88:92:00:97:ab:bb:e3:41:31:18:e5:24:58:9d:26:
b2:4f:3b:7c:66:e2:54:e7:d2:76:d9:43:19:70:57:5b:09:de:
db:8b:ba:31:0d:08:30:84:81:7e:6a:ca:4f:26:08:bd:25:fe:
7c:b3:20:f3:7c:3f:f9:e2:c1:ae:f4:db:c4:31:3e:27:cc:b8:
85:03:0d:47:53:97:76:47:47:c1:65:9f:8f:45:12:b0:5c:99:
ed:9a:02:58:f0:b7:68:fe:11:c3:07:b8:11:82:47:59:3c:94:
1a:34:4c:33:40:e8:74:8f:7a:b3:2f:8a:7a:f6:bf:56:b8:b2:
a8:7d:f0:ec:b7:d1:47:68:de:a9:f1:3a:ce:c3:2e:bd:62:9d:
a7:22:54:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:11 2026 by rpki-client