
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier: guFcEbOiL29uhbp93iGG16IMT/3eeQBHHLvFSndcFAc=
Subject key identifier: FD:68:4F:F2:B7:B1:8E:4A:CE:18:D9:95:79:94:DC:07:84:78:8D:03
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number: 02A4
Signing time: Wed 19 Aug 2026 02:08:31 +0000
Manifest this update: Wed 19 Aug 2026 02:08:31 +0000
Manifest next update: Wed 26 Aug 2026 02:08:31 +0000
Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: GlCEK5kLKt8RyQEzEcUMy1w/Z3WSzKi2PzTfagA4OpY=)
2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: oaiaqucuuW2GkSf9+4cz6o/y7s/8O/quv+/nOFG+UjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Validity
Not Before: Aug 19 02:08:31 2026 GMT
Not After : Aug 26 02:08:31 2026 GMT
Subject: CN=6a85101f-0ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:95:46:b2:31:bf:24:ea:34:78:67:c9:89:
57:16:7f:95:e6:09:5a:c7:d8:26:cb:64:64:6a:a6:
6f:9f:c2:21:34:07:33:0e:af:06:c5:ae:e9:ce:eb:
55:42:36:69:95:7c:c5:78:99:65:35:11:be:be:30:
f1:0c:da:1a:55:e0:f5:d7:46:e6:6a:12:6f:06:5c:
9b:9d:eb:b4:5c:4d:29:3a:00:a4:c1:9f:86:25:bb:
7e:19:75:54:29:d6:79:1c:8a:60:e2:0a:ad:c3:da:
39:38:48:93:5d:83:3a:33:a9:3d:de:bb:35:5d:5a:
22:c9:f7:36:7a:5e:f4:b8:13:37:3a:55:d3:96:27:
56:49:24:26:89:77:ed:2d:05:48:de:73:cc:fb:d1:
8a:99:3e:91:9a:c6:f2:1a:20:f4:2f:ed:09:c8:94:
c7:50:74:a6:6c:07:e0:25:58:91:53:16:68:d6:38:
14:bc:62:75:f9:f1:89:cd:e5:65:b2:ae:96:db:94:
d3:19:da:00:5e:64:ab:1a:1c:41:80:46:e1:e0:2b:
35:3e:7c:fa:2f:bb:a6:19:a7:24:52:17:b3:9b:ec:
13:49:9b:36:f9:6f:aa:1d:12:e1:1a:ae:28:c5:e0:
f2:bb:09:6e:fe:ef:21:26:a2:77:01:a9:86:19:77:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:68:4F:F2:B7:B1:8E:4A:CE:18:D9:95:79:94:DC:07:84:78:8D:03
X509v3 Authority Key Identifier:
keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:75:56:21:43:f5:0a:13:de:2f:b0:e8:ef:eb:5e:72:04:
a3:35:00:3a:42:4b:bb:23:73:41:90:c0:b9:43:f0:13:91:56:
5f:a6:0e:a8:17:e6:0f:02:cf:db:35:b7:fc:30:3f:22:f6:a2:
0f:cd:0b:8b:6b:06:9d:1a:b5:ce:c0:5d:fe:56:f8:57:a1:9a:
83:ac:4d:ab:6a:6b:3f:f5:71:2e:28:a0:b7:29:c0:8e:00:ff:
81:78:27:a1:0f:3e:34:5a:15:3e:03:e1:c9:ed:47:5b:c3:e0:
80:42:b3:82:f1:31:22:fc:91:67:b3:79:a1:56:e4:a9:b8:5e:
bb:70:96:16:3a:5b:63:79:15:08:cc:e5:08:08:35:e1:ed:76:
6a:cb:d3:e0:d2:ac:d1:a2:6a:29:ca:7c:da:75:18:7d:34:26:
88:0e:69:48:bd:2c:6d:d9:eb:41:1e:c0:da:59:11:ee:ae:c0:
31:67:c3:a9:40:f2:1b:cd:bf:9d:c3:bf:f0:3c:0a:6e:c6:ff:
96:a9:e5:23:dd:e9:d5:7c:d4:73:f2:89:1f:da:37:3d:14:65:
d3:1a:e1:fa:43:fe:0e:68:94:a8:81:ae:fb:68:18:ca:6d:7b:
c8:fb:98:cb:b2:88:98:87:a5:2b:a3:a3:21:7c:b2:95:3e:68:
a6:f9:53:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:11 2026 by rpki-client