
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
File: FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json)
Hash identifier: iMaLr1wrj2r/uRQkSz1HHP/8OkGYqAtPDLY8641UHi4=
Subject key identifier: 41:26:92:4B:C6:04:15:4B:2B:F5:B4:19:29:4D:54:4A:19:5A:25:F1
Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
Certificate issuer: /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Certificate serial: 066E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
Manifest number: 0661
Signing time: Fri 04 Sep 2026 22:27:40 +0000
Manifest this update: Fri 04 Sep 2026 22:27:40 +0000
Manifest next update: Fri 11 Sep 2026 22:27:40 +0000
Files and hashes: 1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: oNg1mno1oOpmXa0s/YuxoOwM5OQsQJfoOyX5/MJud84=)
2: 2A52AB54138811F0BA2C056DC4F9AE02.roa (hash: +IpWmHn21lv1JDCd0DfT+m1o2uccKHiSqsImB3ZiiSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646 (0x66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Validity
Not Before: Sep 4 22:27:40 2026 GMT
Not After : Sep 11 22:27:40 2026 GMT
Subject: CN=6a9b45dc-88b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:33:1e:e8:e9:62:73:ff:08:61:7f:ab:d7:
89:a9:90:30:28:92:ad:8f:70:b1:b4:54:96:e0:27:
d2:3d:61:34:33:4f:1b:b8:d3:15:d1:a4:55:2e:9a:
35:78:0c:a6:24:0c:76:5c:44:8e:d8:da:ae:05:41:
f4:73:6e:a0:57:63:7e:1b:7f:97:9f:36:99:42:a7:
0b:55:48:ac:a2:66:42:38:0b:d4:27:92:91:8e:be:
c6:09:fb:0f:6c:1a:7a:78:7c:bd:50:73:27:ac:e1:
0f:e6:fd:c4:14:d1:5e:ca:17:e1:e9:60:02:73:18:
24:a3:36:05:b2:b9:82:06:52:8e:69:7b:a6:72:4a:
2e:98:ea:57:3c:d8:7e:ab:9c:1b:99:e3:9d:83:59:
dd:ff:93:2c:5b:d8:e7:39:76:1b:3e:94:44:b6:3b:
7b:88:9c:c3:db:9e:1c:9f:1c:e0:1b:22:6d:5d:91:
80:75:fc:66:87:b3:1b:c2:ad:a7:e4:39:b3:78:a4:
b3:04:3b:15:6c:0b:6b:be:a2:03:cf:4d:5e:ab:ce:
ec:60:1a:a1:b3:6d:5a:fe:06:12:f0:1a:05:20:15:
87:6c:21:60:57:18:0d:b8:75:c7:de:0f:b6:df:30:
95:b4:85:31:46:4c:45:ee:f5:41:0b:a3:53:6b:29:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:92:4B:C6:04:15:4B:2B:F5:B4:19:29:4D:54:4A:19:5A:25:F1
X509v3 Authority Key Identifier:
keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:f9:63:2d:38:c4:43:bb:d8:1b:f2:85:c4:a0:ff:62:13:00:
79:0b:7f:e8:bb:53:e6:86:5e:97:f1:ad:2f:e2:51:21:a5:fb:
a0:26:2c:70:cf:52:d2:11:b5:bf:42:31:12:8c:1d:fc:bd:bb:
c3:aa:c0:15:5e:10:e4:63:2c:c5:20:6a:96:24:2a:38:76:aa:
93:3b:71:f4:33:e0:11:eb:ef:bd:1c:20:82:4f:e3:4a:b7:10:
a0:47:c4:82:61:b7:f4:07:30:9f:28:0e:e1:3f:0c:2f:41:28:
25:07:bc:2b:c0:96:33:da:1e:a1:43:6e:50:fc:61:13:11:9c:
b3:c0:c4:07:76:66:4b:08:95:8d:45:18:57:ad:9b:c6:6c:d4:
6e:dc:b2:bc:01:c6:a4:a0:70:b6:0d:1b:2b:d0:f0:f0:ab:be:
80:f2:88:b1:4f:b2:24:c3:86:c2:c4:95:bd:64:02:c0:33:72:
91:ad:d2:87:d9:3e:63:97:15:6c:01:b9:15:27:c1:5c:1c:50:
a3:ba:39:d0:58:e6:78:2d:cd:dd:b5:91:97:7b:d7:74:7f:55:
1d:b7:12:9c:95:1e:6a:de:ae:ea:95:12:9d:62:e3:9e:22:45:
33:8d:68:54:53:d7:72:09:59:73:44:39:74:04:e0:03:a8:c3:
bc:b8:d3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:14 2026 by rpki-client