
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json)
Hash identifier: tkHu3FZlkSrAZvpGd7uS3fgi47nnK08W4FOXZq6ByuY=
Subject key identifier: DE:91:06:F8:88:C1:20:84:A5:EC:5B:2F:D6:05:F5:5B:C0:B1:A2:BF
Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B
Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B
Certificate serial: 1083
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
Manifest number: 1074
Signing time: Wed 20 May 2026 17:23:38 +0000
Manifest this update: Wed 20 May 2026 17:23:37 +0000
Manifest next update: Wed 27 May 2026 17:23:37 +0000
Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: V7ibHS+7QPXOmISw0Pqjtl21msg0zw9Bn0DqrqToyc4=)
2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: R10os2GVAU1pg56KEoXBll908hbE1lHWdHzq1cEqVa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl
rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 17:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4227 (0x1083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B
Validity
Not Before: May 20 17:23:37 2026 GMT
Not After : May 27 17:23:37 2026 GMT
Subject: CN=6a0dee1a-09bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:ac:0d:89:2e:d9:6e:48:89:d3:3a:29:08:
89:bb:8b:ee:27:f9:2a:75:93:51:6a:60:91:c5:37:
10:bc:e1:12:27:18:b5:58:c0:67:24:f9:f0:9a:0b:
b2:74:64:f8:70:91:5c:fa:72:b8:9f:12:4c:7e:1d:
f5:cf:18:13:d7:3e:84:0d:3c:5e:54:f1:a9:bc:a9:
27:b2:d7:50:5d:84:4b:b9:81:87:7e:69:f2:14:69:
53:d1:f1:74:f8:30:b1:c8:66:f9:b0:0e:8f:6d:eb:
87:a6:41:01:76:7b:b9:49:6e:52:6e:bd:fd:e2:69:
ad:a9:98:f0:43:6c:99:a2:1a:a6:21:a3:04:34:1f:
9e:ae:96:4a:68:62:ef:27:c9:c9:79:42:18:de:5e:
8a:f1:0f:51:79:ad:2c:e1:41:1c:77:16:ab:e6:79:
07:80:30:de:c0:04:5b:69:db:6c:97:d6:f2:98:44:
37:0f:4c:28:a2:31:f0:fe:75:ad:a0:48:94:7a:7c:
54:f2:0b:e0:04:e8:4d:a7:e1:e3:d2:72:84:59:c9:
6d:9a:7e:2a:04:91:29:12:a4:6a:3e:71:42:20:ca:
94:9f:7b:fe:35:b8:cd:35:44:ed:5f:7e:20:c2:b1:
ea:9b:2a:0a:b4:79:90:a8:0f:72:fc:7b:86:47:a8:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:91:06:F8:88:C1:20:84:A5:EC:5B:2F:D6:05:F5:5B:C0:B1:A2:BF
X509v3 Authority Key Identifier:
keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:26:97:d8:3b:e3:d2:52:53:86:1a:cf:e3:d9:27:71:e0:f3:
65:59:b4:c8:8d:73:ba:08:a6:5b:5c:36:69:69:4e:62:cf:c4:
2e:64:61:be:ce:70:d5:cf:f4:84:4d:e3:a1:55:a2:51:b2:e4:
39:81:ef:56:1a:be:df:70:b6:01:6c:de:f5:f6:f7:8a:9b:60:
37:ff:7d:09:06:ac:43:87:e3:76:42:a3:d3:80:59:13:78:b3:
77:e8:84:60:51:55:58:a3:dd:90:fe:1e:81:e7:dd:3a:28:a7:
8c:8b:1c:68:03:c3:77:a9:be:f5:54:9a:eb:68:89:e7:47:9f:
be:37:1c:ed:8e:2b:c1:58:71:59:19:79:3c:a7:86:5a:37:ef:
6f:ce:64:02:92:42:c7:97:b6:89:10:5d:13:fa:08:14:0d:06:
49:34:b5:63:5b:da:d6:d5:d4:1a:37:96:fe:90:eb:d3:a3:4a:
9b:c3:f9:f1:04:02:16:99:65:0e:24:28:bc:8c:3d:6a:69:75:
ef:74:da:38:4f:5d:c9:24:99:83:f0:19:ae:ce:02:9b:4b:6b:
48:25:cc:37:81:5c:5c:31:d4:69:a9:1c:4d:5c:24:cb:57:56:
8f:90:e8:82:3f:fa:8b:2d:35:2e:51:c2:6f:1e:dc:18:ab:16:
d0:45:0c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:31:09 2026 by rpki-client