
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier: WGK2B11vZIA6KDwMaWjqz2nyLw8PxrsXg5HNcovclt0=
Subject key identifier: 83:96:4D:F8:88:F0:E7:86:EA:8E:42:3F:53:98:43:77:8A:AC:46:03
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number: 1110
Signing time: Wed 20 May 2026 17:42:50 +0000
Manifest this update: Wed 20 May 2026 17:42:50 +0000
Manifest next update: Wed 27 May 2026 17:42:50 +0000
Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: OHCARQRwXnRx91KUnA2HqjAApbKyzGWlcKq/JcRTWVE=)
2: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: Tkxg3E9zZ6oNMWL2MvDhktoFqNUlB3qfA8SouJ2KXDk=)
3: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Validity
Not Before: May 20 17:42:50 2026 GMT
Not After : May 27 17:42:50 2026 GMT
Subject: CN=6a0df29a-d75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:8e:16:ca:b3:3c:42:60:15:c4:5e:67:2a:
9c:e7:71:25:4d:6b:c5:79:39:ba:52:b2:dd:39:eb:
f7:b9:4d:37:7f:62:86:5a:be:41:5a:94:72:5c:53:
96:f2:eb:f2:a3:1c:01:bf:48:c9:60:01:ea:ad:cc:
24:7b:bc:a4:47:64:8f:37:42:3b:72:e8:45:d5:c6:
c4:38:00:2e:f8:94:73:f5:22:82:fa:b5:72:f2:84:
fc:5a:5e:bb:fe:c6:86:75:99:1a:8f:af:97:6d:86:
aa:75:ee:60:3a:bf:6a:1f:55:a1:f2:4a:87:cc:d8:
d1:02:85:5d:bd:f8:fc:40:9e:69:92:5c:ca:7c:e5:
de:13:8d:e9:8d:69:5e:00:c4:a9:60:cc:f8:b7:5b:
a1:f8:20:64:be:4c:6b:16:ee:cb:57:4b:7d:7a:be:
8c:64:b4:42:e3:23:16:49:2e:d8:72:2b:e9:68:44:
75:99:99:6a:3f:14:44:a1:8c:fb:00:6f:00:d1:c8:
99:03:e0:fe:2c:8e:87:e0:45:66:f3:ae:ba:f3:eb:
e9:d8:b5:87:16:f4:70:65:6a:61:b0:ff:d4:8b:55:
59:5c:34:8c:98:b9:26:5d:69:ac:11:e0:2a:9f:ff:
80:5b:f4:d9:38:a1:b7:08:10:ca:54:d1:45:41:b2:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:96:4D:F8:88:F0:E7:86:EA:8E:42:3F:53:98:43:77:8A:AC:46:03
X509v3 Authority Key Identifier:
keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:72:01:b2:cc:c9:35:8c:37:a5:aa:3f:74:e9:90:97:30:0a:
77:70:9b:01:9b:c6:da:39:68:da:16:e2:c3:42:24:58:6c:23:
8e:34:ad:d8:a6:39:ca:b7:42:51:02:b3:c1:67:20:69:68:a3:
db:59:f3:0f:a9:e5:ab:43:66:70:3d:2a:4e:03:94:e6:40:6d:
ea:41:16:fc:f5:87:02:18:34:a3:5a:95:b2:b4:1a:f7:4e:f7:
b7:36:79:de:08:3a:eb:53:99:90:00:c7:a2:ce:46:10:6f:24:
8b:45:7b:9e:d5:a3:0e:f9:c5:50:c5:b3:69:8a:2b:8a:0f:91:
bb:3a:0a:b8:1f:53:6c:2f:5b:ea:05:6d:9c:74:69:91:1c:04:
2a:c5:66:32:4c:26:d7:dc:49:40:85:87:8d:97:f4:9d:70:5c:
98:25:db:d5:05:e7:69:fe:92:04:2f:cf:d1:48:5d:4a:5b:90:
26:0f:2f:90:6c:26:b1:bc:41:c4:77:a1:68:27:f4:c7:1a:a4:
ed:b5:af:74:f5:a1:cf:d3:31:f7:32:52:06:e4:fd:fe:d4:8f:
22:a5:f0:8d:e3:da:55:8b:c3:18:0d:fd:bb:8c:15:40:f5:83:
7f:aa:6e:1d:c1:9c:c6:da:cf:e0:99:83:9c:9a:a5:fb:b8:17:
e9:21:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:55:47 2026 by rpki-client