
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier: kEe55SjZtnUup5KdS1pa1jptgEDzuI7DN1HajoFeBt0=
Subject key identifier: 3A:52:B9:C0:FD:68:76:C6:75:24:66:9C:76:A1:BB:86:97:66:6B:22
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial: 0292
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number: 0AA7
Signing time: Thu 10 Sep 2026 21:06:36 +0000
Manifest this update: Thu 10 Sep 2026 21:06:36 +0000
Manifest next update: Thu 17 Sep 2026 21:06:36 +0000
Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: CcZJPOFH9W43Lk3XWw+ALX1B/xTmflmxcTTdzWFpPUY=)
2: D4E747A681F411F195188DD178A30FBC.roa (hash: 6dv4eQ+/pdigXhYVekYEJh3imGafMJAgl8pggYEI6s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Validity
Not Before: Sep 10 21:06:36 2026 GMT
Not After : Sep 17 21:06:36 2026 GMT
Subject: CN=6aa31bdc-3d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:43:c1:9a:4b:77:32:33:17:5d:ef:5d:e3:
62:1e:6c:d5:4a:b4:41:39:21:45:47:8e:d3:97:8f:
cc:d6:90:01:79:02:14:a2:2b:d8:3d:57:c5:2c:b5:
06:16:6d:dc:7d:ce:1d:8c:be:c5:a2:06:2e:f3:a3:
28:9a:74:a7:1e:6f:3b:5f:f8:aa:0d:40:77:c5:2b:
b5:fe:14:e0:88:10:7c:b2:e8:98:a6:78:9f:ef:1c:
41:8c:bc:73:19:5a:01:24:82:53:00:a4:bd:94:5c:
49:7d:aa:83:0d:94:87:ad:35:24:45:84:49:15:3a:
ba:41:1b:cc:c5:98:9c:56:80:89:ff:62:0a:2c:68:
4b:39:29:f5:2d:51:cd:09:d3:9e:47:02:19:f0:3a:
ae:54:b5:09:01:00:dc:14:cd:c7:05:36:9f:79:b7:
ad:34:62:62:e9:dd:b0:60:6d:f6:e3:09:2a:01:c7:
e7:f9:b4:cd:9f:90:ad:6e:f6:11:4d:b9:67:11:d6:
67:f1:85:70:19:79:64:8f:1a:25:56:d4:c4:c2:51:
b9:56:83:81:46:b0:ce:47:e4:a0:24:4c:a5:65:59:
9e:2d:d6:2f:d4:d6:9c:90:4e:f0:dd:4e:dd:49:36:
f0:56:4a:c0:d0:13:3d:ea:61:1c:6a:40:be:16:6a:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:B9:C0:FD:68:76:C6:75:24:66:9C:76:A1:BB:86:97:66:6B:22
X509v3 Authority Key Identifier:
keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:23:10:f4:6a:fd:7d:85:85:95:cc:a7:bc:61:87:f8:da:28:
dd:66:72:ff:b2:8d:9d:fd:ad:92:d2:e3:82:a8:c6:85:a8:17:
e8:24:99:fe:eb:c8:9c:a0:a1:1c:ff:2e:65:11:95:6e:49:85:
d8:a5:8d:3c:f0:40:78:ad:d2:b2:6a:6a:07:f5:9a:07:d8:02:
4f:6a:0a:c9:f9:75:26:bd:65:03:ac:9f:c8:32:d7:23:5a:57:
1d:cc:4a:4d:26:06:4b:98:33:11:f0:69:cb:69:4b:35:e5:83:
bf:92:fb:4b:36:16:9d:c4:e6:57:b0:35:97:3b:53:1b:a9:07:
72:87:19:67:46:35:73:44:44:ba:d1:bc:9b:71:01:a6:d9:5d:
60:e9:7a:2c:42:ea:cd:bc:aa:a5:95:44:53:69:0c:d6:d3:7c:
ea:22:e1:54:e0:82:a5:2f:42:e0:28:c7:66:62:78:36:c2:c5:
5c:b9:94:39:34:76:3a:ad:87:fb:60:b4:6a:a5:25:46:92:6e:
8b:28:b9:a6:85:59:0a:51:7c:47:4a:1a:b7:32:52:3e:d9:21:
97:33:b3:6b:db:85:4d:2a:ac:82:8b:92:3d:6d:fa:b3:06:8c:
3a:25:fc:a2:bb:8b:14:76:9f:6d:08:3f:73:27:03:d5:17:45:
ce:70:8b:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE
RTZBQjI3MUEwHhcNMjYwOTEwMjEwNjM2WhcNMjYwOTE3MjEwNjM2WjAYMRYwFAYD
VQQDEw02YWEzMWJkYy0zZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAneZDwZpLdzIzF13vXeNiHmzVSrRBOSFFR47Tl4/M1pABeQIUoivYPVfFLLUG
Fm3cfc4djL7FogYu86MomnSnHm87X/iqDUB3xSu1/hTgiBB8suiYpnif7xxBjLxz
GVoBJIJTAKS9lFxJfaqDDZSHrTUkRYRJFTq6QRvMxZicVoCJ/2IKLGhLOSn1LVHN
CdOeRwIZ8DquVLUJAQDcFM3HBTafebetNGJi6d2wYG324wkqAcfn+bTNn5CtbvYR
TblnEdZn8YVwGXlkjxolVtTEwlG5VoOBRrDOR+SgJEylZVmeLdYv1NackE7w3U7d
STbwVkrA0BM96mEcakC+FmrgQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpSucD9
aHbGdSRmnHahu4aXZmsiMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1
MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80
X0hYdXJqN1BqVHZlYXJKeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkCMQ9Gr9fYWFlcynvGGH+Noo3WZy/7KNnf2tktLjgqjGhagX6CSZ/uvInKCh
HP8uZRGVbkmF2KWNPPBAeK3SsmpqB/WaB9gCT2oKyfl1Jr1lA6yfyDLXI1pXHcxK
TSYGS5gzEfBpy2lLNeWDv5L7SzYWncTmV7A1lztTG6kHcocZZ0Y1c0REutG8m3EB
ptldYOl6LELqzbyqpZVEU2kM1tN86iLhVOCCpS9C4CjHZmJ4NsLFXLmUOTR2Oq2H
+2C0aqUlRpJuiyi5poVZClF8R0oatzJSPtkhlzOza9uFTSqsgouSPW36swaMOiX8
oruLFHafbQg/cycD1RdFznCLlg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:33:52 2026 by rpki-client