
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json)
Hash identifier: yAxvmP8h58VOyXiLdraHPvimNqRAoouvDDJyymldOwM=
Subject key identifier: B6:08:EB:72:1C:7C:D2:01:5A:71:C6:B2:9E:40:B4:F9:15:5F:D9:80
Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004
Certificate serial: 0200
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
Manifest number: 0B63
Signing time: Fri 02 Oct 2026 20:40:14 +0000
Manifest this update: Fri 02 Oct 2026 20:40:13 +0000
Manifest next update: Fri 09 Oct 2026 20:40:13 +0000
Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: kWlnGz+kdv3jcbC74jdVOAA5WOFEH5+ey8cpEqQ145I=)
2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: ZX3gzuVVdSt9pwPI3aB1UqH4krxlC/IXAAYaCHcrBD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004
Validity
Not Before: Oct 2 20:40:13 2026 GMT
Not After : Oct 9 20:40:13 2026 GMT
Subject: CN=6ac016ae-4d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:7d:69:76:c5:92:b6:20:14:2e:7a:c7:f6:
8b:75:05:bc:90:6b:ca:fd:f8:94:8e:51:f3:ff:a5:
01:2f:27:e5:d4:ae:b1:0f:98:9e:88:4c:44:01:99:
a3:78:bf:b4:a6:71:3d:de:97:ab:94:66:04:ea:f2:
7d:95:00:4d:23:dd:ac:d0:94:14:44:0e:b8:b5:39:
52:25:4c:6b:84:8e:a0:67:d8:89:db:41:c1:ff:f5:
32:89:7e:0c:aa:d7:2c:38:5f:39:1c:1b:56:30:e1:
51:8f:a5:e8:b9:b6:15:8a:68:f3:4b:84:97:19:b0:
9e:94:cd:83:90:a4:ce:00:3e:1e:5f:b2:50:3d:55:
c3:45:84:99:17:d0:de:a1:29:b9:fb:36:80:62:ad:
66:99:c4:19:31:7d:22:92:9d:9d:1b:97:62:7b:ab:
6b:ca:67:80:14:1d:49:07:20:69:ef:64:38:05:2a:
8d:6f:9a:b0:34:40:be:48:65:38:32:28:fc:37:6b:
30:0c:e7:48:df:db:82:b1:f0:ef:59:72:bc:dc:ce:
a1:7b:3d:0c:bd:22:41:e4:ad:1c:00:6f:27:34:74:
b4:e9:95:e8:9e:7e:93:fc:0e:83:21:fc:c6:07:5a:
1e:e3:9f:db:23:81:87:93:3f:91:b8:3a:b2:f3:ec:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:EB:72:1C:7C:D2:01:5A:71:C6:B2:9E:40:B4:F9:15:5F:D9:80
X509v3 Authority Key Identifier:
keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:6d:44:18:96:8c:58:6d:3b:5d:40:4c:00:be:c0:40:b1:3e:
0f:cc:5f:45:3f:1c:93:4f:65:0d:19:78:a6:7b:67:99:80:40:
2d:9d:f9:9d:88:5b:20:c8:49:3e:3f:a5:a9:22:3b:59:cc:06:
5b:98:32:50:4b:16:2e:25:3b:97:20:f0:c1:a7:81:5e:e4:4d:
3c:e6:f1:b3:5a:9d:28:be:96:ee:79:21:f1:69:a3:39:5c:19:
6c:ce:c0:f4:5c:1f:0d:fe:1c:4f:b5:90:7f:a2:b2:e5:92:4e:
aa:f6:a8:24:c6:3f:14:c0:ba:99:03:c0:91:e0:c1:6b:7a:05:
51:b6:5e:82:91:3a:ee:17:78:1d:48:a8:59:33:cd:77:17:31:
3a:bb:e9:8b:f8:be:38:e2:21:be:db:e5:f7:53:54:d5:f0:25:
d3:39:57:6b:e5:22:fb:f4:3c:f3:98:7e:2b:f2:6e:2e:a2:70:
95:b7:78:b7:68:88:81:a9:b6:f2:84:ed:09:c6:9d:7b:50:7a:
50:cf:42:c3:8b:c0:02:fa:09:db:75:1c:b1:a0:3f:7f:ff:ed:
7e:85:c8:f6:0b:dd:f1:aa:70:39:6a:73:62:03:dc:ba:e8:85:
60:55:e8:2b:d4:9b:86:8f:aa:3c:3d:e9:e2:df:2f:ba:4f:82:
99:85:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:51:41 2026 by rpki-client