
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
File: FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json)
Hash identifier: Em6awS/gksfLXwimxCehv8aXjQ/UOtjubaE3psLxJ7Y=
Subject key identifier: F4:68:B7:31:7F:34:48:29:E1:EE:DB:D3:DA:2F:3B:B8:EA:F6:B5:FA
Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
Certificate issuer: /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Certificate serial: 0656
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
Manifest number: 0649
Signing time: Mon 20 Jul 2026 23:27:56 +0000
Manifest this update: Mon 20 Jul 2026 23:27:55 +0000
Manifest next update: Mon 27 Jul 2026 23:27:55 +0000
Files and hashes: 1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: NOjVVgumKByxzz+fKgsbb/wjdfFJU5h2kD7ghtBMLRQ=)
2: 2A52AB54138811F0BA2C056DC4F9AE02.roa (hash: +IpWmHn21lv1JDCd0DfT+m1o2uccKHiSqsImB3ZiiSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:27:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Validity
Not Before: Jul 20 23:27:55 2026 GMT
Not After : Jul 27 23:27:55 2026 GMT
Subject: CN=6a5eaefc-17a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:b4:33:c2:c5:9b:6c:f4:7b:a9:9c:41:23:
4d:78:36:24:91:21:3f:7a:41:be:5b:b9:2b:08:84:
12:cd:67:09:cb:1b:a8:3d:00:61:17:45:d2:91:d7:
5b:15:f7:ee:2a:28:c4:7f:b4:34:30:2f:d2:6a:53:
fc:a9:3a:ed:ef:4b:89:9e:7e:a0:50:4c:e8:19:ca:
af:0c:48:20:2c:40:2d:8c:5e:29:0a:71:e4:34:59:
79:20:35:42:74:a7:10:e4:39:cf:72:d3:df:3d:04:
76:c3:78:1c:9c:98:58:27:32:7f:09:a5:e1:69:35:
fa:12:61:2b:e4:49:2d:fe:8f:e1:d2:46:f9:c1:92:
e8:61:28:0d:aa:cc:4e:fd:b8:fd:ac:4a:da:8c:79:
83:73:3d:5c:89:fb:c9:39:3b:49:93:a1:7c:7f:77:
a9:70:e2:44:7d:b3:27:f2:f4:f0:eb:ee:66:c6:71:
06:06:87:e1:cd:e0:ef:ab:48:74:0f:20:0e:69:1d:
a6:ea:e7:e4:89:9f:2b:57:80:71:87:01:f9:8f:2d:
d5:6d:24:28:93:4f:fc:a4:d1:fc:5b:45:70:39:7c:
3b:48:73:d8:cf:86:c8:4c:3e:f0:46:31:4a:60:a1:
78:20:54:b6:ca:28:6e:91:0e:b2:7c:0a:2f:61:10:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:68:B7:31:7F:34:48:29:E1:EE:DB:D3:DA:2F:3B:B8:EA:F6:B5:FA
X509v3 Authority Key Identifier:
keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:3d:44:85:09:04:ba:28:b8:13:4d:3d:d0:34:52:3d:ef:e3:
18:3f:79:2c:d4:b6:96:8e:ab:24:10:05:97:c8:45:9b:b8:e4:
5d:3c:b9:da:e1:e2:8e:f9:0b:12:f6:6d:49:c7:dd:ca:82:15:
5e:6e:93:db:57:22:a7:58:1c:40:93:a8:e9:c5:c6:91:41:b6:
17:af:c2:ca:90:21:7f:66:0b:eb:de:7f:99:4e:92:7c:8e:95:
b8:81:ae:38:56:db:51:6a:15:e7:ce:73:72:05:e4:a3:8b:a2:
01:e9:6e:3a:18:43:91:b1:54:17:59:c1:64:00:29:f4:c7:70:
39:fc:ea:9e:dc:5b:b9:dd:40:7d:28:13:c1:e4:0d:ad:9b:24:
f1:e9:ec:b7:80:bd:eb:d1:81:24:45:b9:2d:1e:06:0e:cc:17:
f1:b8:26:19:28:33:8f:68:e5:3f:8f:db:e2:b4:cb:7c:48:13:
6a:73:99:01:c9:05:ce:94:44:d5:6b:8c:43:e9:f5:1f:b6:d7:
59:d9:6c:f9:d8:9f:08:24:21:c8:f5:46:0c:ec:2e:a5:98:09:
9d:5d:d6:0a:c7:b5:24:2f:f1:14:fc:4d:d2:ea:3b:8c:0e:16:
94:25:89:8d:6c:7b:f9:57:90:d9:ca:3b:35:d6:ac:ee:a2:26:
5d:13:08:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUzMjMxMTAvBgNVBAUTKDE0Mzc4OEQyMzVGRDY5REIyRjI1Qjc3NzIyNUY3QUI3
NjlEQTM1MEIwHhcNMjYwNzIwMjMyNzU1WhcNMjYwNzI3MjMyNzU1WjAYMRYwFAYD
VQQDEw02YTVlYWVmYy0xN2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYK0M8LFm2z0e6mcQSNNeDYkkSE/ekG+W7krCIQSzWcJyxuoPQBhF0XSkddb
FffuKijEf7Q0MC/SalP8qTrt70uJnn6gUEzoGcqvDEggLEAtjF4pCnHkNFl5IDVC
dKcQ5DnPctPfPQR2w3gcnJhYJzJ/CaXhaTX6EmEr5Ekt/o/h0kb5wZLoYSgNqsxO
/bj9rErajHmDcz1cifvJOTtJk6F8f3epcOJEfbMn8vTw6+5mxnEGBofhzeDvq0h0
DyAOaR2m6ufkiZ8rV4BxhwH5jy3VbSQok0/8pNH8W0VwOXw7SHPYz4bITD7wRjFK
YKF4IFS2yihukQ6yfAovYRBLbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRotzF/
NEgp4e7b09ovO7jq9rX6MB8GA1UdIwQYMBaAFBQ3iNI1/WnbLyW3dyJferdp2jUL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTMyMy9ERjY2REUyNEU1
NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFkc3ZKYmQzSWw5NnQybmFO
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZEZUkwalg5YWRzdkpiZDNJbDk2dDJuYU5Rcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTMyMy9ERjY2REUyNEU1NjExMUVCODRCRkU4MjBDNEY5QUUwMi9GRGVJMGpYOWFk
c3ZKYmQzSWw5NnQybmFOUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKT1EhQkEuii4E0090DRSPe/jGD95LNS2lo6rJBAFl8hFm7jkXTy52uHijvkL
EvZtScfdyoIVXm6T21cip1gcQJOo6cXGkUG2F6/CypAhf2YL695/mU6SfI6VuIGu
OFbbUWoV585zcgXko4uiAeluOhhDkbFUF1nBZAAp9MdwOfzqntxbud1AfSgTweQN
rZsk8enst4C969GBJEW5LR4GDswX8bgmGSgzj2jlP4/b4rTLfEgTanOZAckFzpRE
1WuMQ+n1H7bXWdls+difCCQhyPVGDOwupZgJnV3WCse1JC/xFPxN0uo7jA4WlCWJ
jWx7+VeQ2co7Ndas7qImXRMIEQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:34:08 2026 by rpki-client