
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json)
Hash identifier: /Au4bJFDe9m51U01bYo6K1gQUW133MEN7Ul09ocATEU=
Subject key identifier: 14:D3:5F:65:CE:E3:3B:97:BA:40:5F:FB:0C:5D:5B:A5:D3:FC:C0:7A
Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Certificate serial: 0A1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
Manifest number: 20E1
Signing time: Fri 02 Oct 2026 16:48:39 +0000
Manifest this update: Fri 02 Oct 2026 16:48:38 +0000
Manifest next update: Fri 09 Oct 2026 16:48:38 +0000
Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: LavVyqfQf00qBbVX/bcjG1veb1v4fEA+3v4E1tAPtb4=)
2: 7556B6A08BEF11F1BF3F50993A11F970.roa (hash: NilNWx5tPMW8WwallDZ+keY1nEEv/4B9dbAFIjGGUUQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2588 (0xa1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0
Validity
Not Before: Oct 2 16:48:38 2026 GMT
Not After : Oct 9 16:48:38 2026 GMT
Subject: CN=6abfe067-5dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:25:d5:dc:81:21:d4:9b:2c:fd:ee:70:ed:
a5:63:38:ba:b1:3d:9c:3b:5d:b3:71:0b:8b:c2:09:
d4:86:21:3b:81:a6:e4:5f:a7:4c:c7:4a:10:9c:78:
c3:d6:0b:29:b5:ef:20:aa:3a:68:ef:0a:a3:2a:dd:
75:39:00:5c:9e:a0:65:46:7b:2f:ad:21:82:42:49:
28:af:aa:8e:9b:61:e7:fb:47:e2:b5:27:03:5f:d4:
1e:61:20:da:33:46:43:e2:bf:7f:19:13:7b:15:32:
27:87:b7:af:8a:66:c0:26:70:1e:30:08:52:e8:b9:
71:da:33:82:72:d9:6f:72:17:4c:cd:9a:88:43:e9:
83:c8:43:d4:05:36:68:37:95:81:76:2d:13:16:e6:
fe:05:59:69:c0:c1:1a:29:a4:e4:65:dc:87:00:07:
e7:f5:06:3e:88:05:8b:16:5e:35:9b:21:a8:83:e8:
d4:16:05:5d:93:aa:d9:3e:12:95:11:9d:3d:2e:6b:
2c:4d:ef:05:12:3c:3d:bb:5e:22:3f:de:4b:77:a0:
a3:03:6b:62:fc:65:2c:b7:a1:39:73:8b:a3:55:e1:
f2:89:88:57:92:7f:50:9c:18:53:8f:f1:6a:c2:d7:
20:7b:83:81:0e:43:de:0b:81:a3:23:49:6f:3a:a9:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D3:5F:65:CE:E3:3B:97:BA:40:5F:FB:0C:5D:5B:A5:D3:FC:C0:7A
X509v3 Authority Key Identifier:
keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d2:5f:a8:41:f7:83:e2:24:49:12:6b:88:27:9c:fe:b8:05:
cd:d6:21:90:0f:6e:28:0b:a5:94:34:b8:50:b7:25:ea:dd:54:
4b:44:41:86:fd:51:c8:71:18:a4:11:f9:bb:cc:c2:e4:7a:5f:
95:37:cf:d3:67:ed:18:d8:51:a8:27:7e:88:79:14:bc:9e:78:
9e:c9:fb:45:fc:f4:64:6f:32:83:b7:46:35:91:02:79:34:6c:
7b:fa:ca:9b:74:cb:fc:e8:d2:4b:ca:b7:e1:c1:5f:b6:76:7f:
8d:5a:a1:a8:6a:07:c3:b1:4a:34:8b:fe:98:33:33:93:27:9e:
73:d8:cc:95:e8:3c:e8:87:c3:bf:a3:30:8d:83:80:d3:bd:7f:
6f:50:58:d0:bc:6d:4f:52:a1:d9:00:16:35:b9:5d:2e:6b:b8:
03:4e:a7:b3:15:28:64:45:37:c0:c9:e1:7e:fc:5d:ca:8c:51:
7e:ac:9b:f7:11:cc:ab:93:30:98:8a:09:9c:34:39:32:d5:40:
57:46:2f:03:f9:19:0f:2b:3b:7a:3e:a1:09:b3:3f:7d:7f:9b:
0a:2e:58:35:89:23:36:18:24:ff:01:2b:93:9e:a7:3d:6c:8c:
44:89:28:29:cc:d7:62:76:f3:3b:34:55:cb:71:e4:9b:20:98:
83:79:8a:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICChwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4
RTY1REI5QjAwHhcNMjYxMDAyMTY0ODM4WhcNMjYxMDA5MTY0ODM4WjAYMRYwFAYD
VQQDEw02YWJmZTA2Ny01ZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJol1dyBIdSbLP3ucO2lYzi6sT2cO12zcQuLwgnUhiE7gabkX6dMx0oQnHjD
1gspte8gqjpo7wqjKt11OQBcnqBlRnsvrSGCQkkor6qOm2Hn+0fitScDX9QeYSDa
M0ZD4r9/GRN7FTInh7evimbAJnAeMAhS6Llx2jOCctlvchdMzZqIQ+mDyEPUBTZo
N5WBdi0TFub+BVlpwMEaKaTkZdyHAAfn9QY+iAWLFl41myGog+jUFgVdk6rZPhKV
EZ09LmssTe8FEjw9u14iP95Ld6CjA2ti/GUst6E5c4ujVeHyiYhXkn9QnBhTj/Fq
wtcge4OBDkPeC4GjI0lvOqmFswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBTTX2XO
4zuXukBf+wxdW6XT/MB6MB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz
NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL
bHdSajN5MExCZ2lPWmR1YkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHNJfqEH3g+IkSRJriCec/rgFzdYhkA9uKAullDS4ULcl6t1US0RBhv1RyHEY
pBH5u8zC5HpflTfP02ftGNhRqCd+iHkUvJ54nsn7Rfz0ZG8yg7dGNZECeTRse/rK
m3TL/OjSS8q34cFftnZ/jVqhqGoHw7FKNIv+mDMzkyeec9jMleg86IfDv6MwjYOA
071/b1BY0LxtT1Kh2QAWNbldLmu4A06nsxUoZEU3wMnhfvxdyoxRfqyb9xHMq5Mw
mIoJnDQ5MtVAV0YvA/kZDys7ej6hCbM/fX+bCi5YNYkjNhgk/wErk56nPWyMRIko
KczXYnbzOzRVy3HkmyCYg3mKgA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:24:49 2026 by rpki-client