
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier: xi4DFw8S1bG/bYwMIdmG6xa6jf+/FmzYMpccuLL4xks=
Subject key identifier: 76:08:52:77:A3:B7:76:8C:96:FA:5C:6A:89:44:07:31:0A:9D:80:43
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial: 0274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number: 0A6C
Signing time: Mon 20 Jul 2026 21:49:16 +0000
Manifest this update: Mon 20 Jul 2026 21:49:16 +0000
Manifest next update: Mon 27 Jul 2026 21:49:16 +0000
Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: ygIbb/sfpum9lHNKqPGSMJsWGTNloLcNYXeb4+Jas6E=)
2: B901579481F311F188CCE67E78A30FBC.roa (hash: WaJxilaMX668bkKbJaQrQipOZrxwqwt8LnhR0g+6OHo=)
3: 8A5E70CA80FE11F1B942E7BF68A30FBC.roa (hash: gQ16C+7LyUwQrCZYNyLq3CwaeUJm+hlXnTo1SeMaFQU=)
4: D4E747A681F411F195188DD178A30FBC.roa (hash: 6dv4eQ+/pdigXhYVekYEJh3imGafMJAgl8pggYEI6s0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 628 (0x274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Validity
Not Before: Jul 20 21:49:16 2026 GMT
Not After : Jul 27 21:49:16 2026 GMT
Subject: CN=6a5e97dc-ac13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:62:26:5c:78:89:42:7c:7d:0a:1d:83:3d:
f0:d9:5d:25:2b:76:8f:c2:60:32:96:63:db:ac:54:
56:7d:ff:71:a9:f0:00:0f:5d:18:f3:e4:2b:b8:37:
1b:3d:91:c2:03:4c:27:93:76:7a:90:36:39:47:56:
f2:ed:69:7d:38:7f:39:6f:42:0e:e1:cf:c3:c7:08:
0c:5e:54:cd:a3:5a:ad:5b:08:24:82:a7:d4:f3:b0:
ad:eb:e6:d2:a3:45:8e:0d:50:4d:ef:09:6b:dc:97:
2d:6c:8a:72:8d:c3:02:0e:9e:e7:ea:66:9a:67:b7:
63:34:ee:f3:84:d4:70:62:c5:c3:2a:f5:6e:6e:ad:
03:1d:5e:4a:17:94:45:ee:03:ab:67:ef:bb:03:e1:
dd:f7:86:7d:ff:8b:1e:94:de:e8:cb:e1:83:11:6a:
4d:df:95:c5:26:fa:72:e0:53:b9:61:82:3f:d3:10:
95:7b:3d:2a:57:30:d3:3f:ef:42:7b:03:0f:00:ac:
2f:6f:8d:d4:57:c5:7b:28:65:1f:44:3b:4e:e5:28:
75:54:f6:08:2d:83:37:ad:64:99:7d:ad:43:31:e6:
43:48:4a:6c:cb:47:4a:20:ec:a3:b2:16:bd:21:e9:
46:9b:47:6d:3d:40:94:a2:0e:ff:b9:91:55:12:62:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:52:77:A3:B7:76:8C:96:FA:5C:6A:89:44:07:31:0A:9D:80:43
X509v3 Authority Key Identifier:
keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8f:af:e9:69:b9:aa:f2:7b:13:fb:e0:fd:70:77:ed:ef:dd:
92:20:f1:78:92:8e:ab:72:34:39:4a:34:5f:3a:31:4d:22:fc:
59:ff:bc:d1:18:e4:05:93:96:7e:1f:f4:1a:23:6f:79:40:ee:
49:ce:71:40:02:67:69:c4:2e:c7:9c:9b:6f:b1:76:af:1f:75:
c1:04:fb:8e:54:36:0a:62:3a:c2:7d:db:5c:f8:34:c1:83:f7:
0d:9c:fe:cd:70:34:71:ca:d9:00:05:ab:c1:bc:e3:80:93:b2:
3d:5f:54:61:88:fc:66:bd:bf:b6:5d:0b:96:e3:bc:2c:a3:3c:
c6:5a:3b:e6:71:6a:77:d4:45:eb:03:4b:c1:87:2b:61:42:10:
91:a6:87:d4:69:15:53:b4:e3:8f:f3:5a:f0:a5:fc:82:a6:37:
cc:ce:a5:27:39:c2:bc:cb:d8:d6:e8:03:64:1a:48:3c:7b:0a:
e4:7f:e8:2f:a4:6b:9d:0e:d8:e1:f9:8b:13:29:ff:0a:fd:54:
11:3e:3e:2f:77:11:fb:6f:01:75:4e:66:b0:ce:0a:0d:ab:2c:
c5:01:1d:a8:aa:14:1c:b6:91:da:2b:aa:9f:d5:8a:69:3a:7f:
77:d6:e1:cc:4e:cd:9b:5f:fc:26:42:e1:68:eb:5e:7d:b3:b7:
a6:a7:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:21 2026 by rpki-client