
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json)
Hash identifier: AvqDHUTaXRDinRaetY6V+hbkmvj7KS/kZlaqx/+c/mA=
Subject key identifier: 50:81:A4:35:F0:10:7F:40:5E:7C:FF:9A:80:4E:39:0E:3E:91:93:75
Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Certificate serial: 0297
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
Manifest number: 117E
Signing time: Fri 04 Sep 2026 17:36:41 +0000
Manifest this update: Fri 04 Sep 2026 17:36:41 +0000
Manifest next update: Fri 11 Sep 2026 17:36:41 +0000
Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: FbgUSd9JCCuoemFQJTNBjZ3uqGSX2WYPsQa1ozyORcs=)
2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: LPlQvyP4GbUm5RG5ECEhvL2ZjD88OXS223O3hIeCkik=)
3: C81D36F6BEDC11F0AF08E624C4F9AE02.roa (hash: Tkxg3E9zZ6oNMWL2MvDhktoFqNUlB3qfA8SouJ2KXDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663 (0x297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225
Validity
Not Before: Sep 4 17:36:41 2026 GMT
Not After : Sep 11 17:36:41 2026 GMT
Subject: CN=6a9b01a9-59da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:60:5f:45:19:fa:02:7d:81:a1:93:fb:55:
69:ae:94:f0:5e:00:50:0a:65:95:b7:15:28:ec:10:
d7:bd:15:ce:1d:ad:d7:b8:61:db:e4:ac:16:c5:6c:
d9:4e:a3:0c:71:51:4d:62:d8:df:d4:02:05:4f:7a:
86:3e:3d:ce:74:cd:4c:df:69:0c:1e:6c:97:a2:6a:
38:ad:a7:1e:ef:70:eb:f5:88:dd:cb:59:50:f8:cd:
40:82:d0:14:33:5a:09:d9:e6:fb:ee:92:2e:ec:79:
52:99:fb:52:d7:8d:8d:21:80:89:8e:c6:5c:1e:9f:
94:65:b0:06:53:d9:be:91:39:53:bd:44:30:c4:6a:
71:b9:0a:0a:86:f2:c3:4f:36:1a:73:ce:23:d5:7e:
e5:7c:d3:42:90:99:e7:9b:41:66:12:da:2d:93:97:
3c:db:65:8a:30:79:ef:f5:ca:e2:75:2d:ed:1e:63:
d8:f5:7e:05:00:2c:ae:5f:6d:15:d8:44:b2:3e:c9:
a9:61:07:78:a1:4c:d1:be:65:ad:73:01:05:a5:67:
f9:b8:10:7e:d1:70:48:3e:51:d2:e7:12:da:e8:53:
8e:3e:f2:a9:93:02:1d:19:a2:3b:12:e0:c3:39:b7:
c4:24:bf:fe:1e:5c:f7:e1:d2:86:ff:8c:80:de:e2:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:A4:35:F0:10:7F:40:5E:7C:FF:9A:80:4E:39:0E:3E:91:93:75
X509v3 Authority Key Identifier:
keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:f4:05:b8:97:03:78:71:05:16:65:9d:c4:5e:ed:c5:97:ce:
6d:ed:0c:0e:9a:b2:7d:c5:48:c5:91:3c:05:0a:c5:f3:88:5d:
ca:5d:25:c2:37:44:13:cd:c5:85:fa:f8:d4:d0:39:c7:a3:32:
ef:80:ef:ae:f5:16:72:11:86:b4:37:bb:eb:9f:2f:3d:d4:c1:
3e:83:b3:9d:46:ad:ba:97:ea:0b:78:22:7a:45:26:fd:d3:47:
00:9b:97:d2:36:bd:88:ea:27:5e:aa:55:60:01:c2:28:f4:cd:
0a:13:74:ca:72:44:c7:b1:24:ea:8e:ad:4b:2b:52:8c:0e:e1:
d3:74:ac:2e:78:86:94:81:f0:b5:8f:8d:39:ae:15:c2:be:74:
77:4c:20:d5:9d:82:75:9c:ea:3d:7e:07:6b:cf:7a:b9:90:4c:
ef:87:d2:4b:b8:c8:7c:e9:81:23:f9:1f:5b:83:32:ab:77:0e:
c0:3a:e3:95:9f:4f:a5:b1:a3:6d:69:dc:81:ea:a9:2e:30:4f:
f8:7c:2d:e4:b4:9c:be:40:82:4e:9e:14:96:99:84:f8:c3:d5:
b2:55:8e:4d:10:10:db:c2:b6:76:bc:67:42:f7:81:41:85:14:
82:d0:ab:ff:1a:eb:39:12:61:f8:71:1a:71:5d:6f:e7:88:f2:
05:72:23:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5
ODM4MTQyMjUwHhcNMjYwOTA0MTczNjQxWhcNMjYwOTExMTczNjQxWjAYMRYwFAYD
VQQDEw02YTliMDFhOS01OWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjxgX0UZ+gJ9gaGT+1VprpTwXgBQCmWVtxUo7BDXvRXOHa3XuGHb5KwWxWzZ
TqMMcVFNYtjf1AIFT3qGPj3OdM1M32kMHmyXomo4race73Dr9Yjdy1lQ+M1AgtAU
M1oJ2eb77pIu7HlSmftS142NIYCJjsZcHp+UZbAGU9m+kTlTvUQwxGpxuQoKhvLD
TzYac84j1X7lfNNCkJnnm0FmEtotk5c822WKMHnv9cridS3tHmPY9X4FACyuX20V
2ESyPsmpYQd4oUzRvmWtcwEFpWf5uBB+0XBIPlHS5xLa6FOOPvKpkwIdGaI7EuDD
ObfEJL/+Hlz34dKG/4yA3uKvRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCBpDXw
EH9AXnz/moBOOQ4+kZN1MB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF
QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY
Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmPQFuJcDeHEFFmWdxF7txZfObe0MDpqyfcVIxZE8BQrF84hdyl0lwjdEE83F
hfr41NA5x6My74DvrvUWchGGtDe7658vPdTBPoOznUatupfqC3giekUm/dNHAJuX
0ja9iOonXqpVYAHCKPTNChN0ynJEx7Ek6o6tSytSjA7h03SsLniGlIHwtY+NOa4V
wr50d0wg1Z2CdZzqPX4Ha896uZBM74fSS7jIfOmBI/kfW4Myq3cOwDrjlZ9PpbGj
bWncgeqpLjBP+Hwt5LScvkCCTp4UlpmE+MPVslWOTRAQ28K2drxnQveBQYUUgtCr
/xrrORJh+HEacV1v54jyBXIjKQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:18:20 2026 by rpki-client