
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json)
Hash identifier: 2lh42xNpsdfKnRGoXV1DVA9AQQl1Q0tse7BfE6R+gHA=
Subject key identifier: 3F:A7:EC:75:86:38:8C:BB:58:11:87:58:4D:7F:7F:10:2D:4D:4B:AF
Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Certificate serial: 36AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
Manifest number: 3602
Signing time: Fri 18 Sep 2026 14:26:03 +0000
Manifest this update: Fri 18 Sep 2026 14:26:03 +0000
Manifest next update: Fri 25 Sep 2026 14:26:03 +0000
Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: 0xI4J/eZGisq8nCGlthVmia0y/JCor0uy7fJDzGDmgs=)
2: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: qvyFhV5nfC47Pz/c2vFFgaDNyFH03/suCvs+Lzbb6l8=)
3: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: WrBoB3k+TzkgstCIfTVURqYqkE8urIjGdVsTJXRt8nM=)
4: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: eUE+3jMWRE91uNAz/UrqOI3BwQdgVh4p6mb1bKLIKjg=)
5: FE04732C49D011F1880DD96DA7833773.roa (hash: jgs72j8BhXg/9NR1Osjy0LnTtcyYQeZQ7M/1/+KlbT8=)
6: 427996B2D4CF11F0BFE5643BC4F9AE02.roa (hash: H7pGeAUfsX1Ef7hbxb99LMdw8SUiA5hk/Rk7uMPdOQU=)
7: A4C78624D4CC11F083620C83C4F9AE02.roa (hash: 0F3WwX6JLWtvVg/ceJ0+Xc+w1kqKsMeH8GrxG9Um5ig=)
8: A45B04065A3F11F1886D544AAD833773.roa (hash: 1AN5k0MNLAYAKTZr9CZ0ez53EwSpf4f9LN0CXmXrk70=)
9: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: KmrmvAFX3BTDWk59dNTGnglJUjuw4X1fTptZ/iswC68=)
10: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: cBL31aNqyNsIeJXA3Iuq1SJRi4eOoI2ZiZ/y1qNLNdA=)
11: 1BFF9222D63F11F0B4EDAD32A6248E41.roa (hash: fXY7n/YUUYNROC6oMNKBDx9Co6GGde/fC8cz3XgdF84=)
12: 4214F694D4CF11F0822D643BC4F9AE02.roa (hash: toaIt9aua90UvezwtJBkMjp9ByR6flck72bGeCuWe2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13995 (0x36ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8
Validity
Not Before: Sep 18 14:26:03 2026 GMT
Not After : Sep 25 14:26:03 2026 GMT
Subject: CN=6aad49fb-4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:df:28:f7:5b:7c:ff:1e:1e:a0:e8:48:20:
c1:1a:30:ca:2a:f3:fc:ca:b3:31:98:11:0f:9b:f6:
6b:87:a5:73:86:b8:3b:5c:ed:aa:4f:a0:1a:85:89:
71:a5:5f:c2:c4:3b:8e:10:eb:d8:00:1a:ab:f0:a3:
1e:fd:5b:2a:32:ba:ff:e9:bc:d9:af:01:16:10:c7:
fc:aa:a0:81:f8:aa:97:c0:4c:35:ab:ca:53:e2:63:
ff:e3:6f:12:b0:2d:7a:6f:98:06:9a:4f:e5:80:85:
94:90:37:ff:59:c9:4a:35:18:d6:8d:db:1a:dd:2c:
8b:09:05:42:41:4e:76:b2:9c:e7:da:b8:5e:ad:84:
05:54:66:d0:f5:04:fb:51:0e:10:cf:af:b4:71:ba:
4f:8d:65:69:65:78:a7:87:c5:99:c4:9a:f3:72:ef:
a8:30:22:6b:4c:7f:e0:1c:1f:ef:b9:fc:a7:85:64:
2c:d8:83:49:02:d4:49:47:64:95:dd:67:b2:8d:c7:
04:2e:5e:93:b5:af:31:92:c5:c1:51:2b:3e:6b:c5:
d7:e8:da:3f:d6:64:6a:b7:e3:90:9b:10:b2:de:2d:
d2:33:93:c3:f9:8a:cf:4a:86:22:9a:91:77:5d:f3:
73:99:89:58:a2:e0:b8:ca:56:21:9d:c4:47:0f:9d:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A7:EC:75:86:38:8C:BB:58:11:87:58:4D:7F:7F:10:2D:4D:4B:AF
X509v3 Authority Key Identifier:
keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:6d:b4:72:93:72:ef:ef:00:c5:f7:7b:89:5e:03:ca:47:2e:
64:20:f7:bc:bb:a5:1c:2b:74:f1:9b:86:00:6f:b2:03:d4:00:
3f:b6:6d:12:74:2f:0a:da:47:c3:cb:63:6e:c5:1c:1c:fc:ff:
47:6c:44:0a:da:08:07:46:f1:69:e4:59:f7:a8:d2:40:89:88:
75:be:41:16:2f:57:8f:7f:a4:2f:e1:9a:fa:3c:61:10:5d:96:
b7:b8:8b:10:08:2f:37:ad:f4:cf:37:bd:67:7f:dc:3e:e9:15:
0c:57:11:63:9f:6c:50:c5:58:9a:24:2f:a7:33:83:5d:a1:60:
47:f0:06:1a:f6:39:f2:51:95:fe:81:36:54:cf:4f:fc:6c:b6:
0c:1d:f0:8d:ea:ab:5a:c8:1f:4c:90:26:a5:08:45:16:5b:c1:
3e:02:bc:e1:d8:b6:82:47:fa:b4:69:ef:0a:46:63:be:26:12:
56:2e:05:f5:9a:ce:f4:58:be:fb:09:cc:25:4f:b4:2d:e3:3f:
d7:4d:6b:f9:8e:e0:39:f3:46:d6:21:4d:7d:9d:fb:b5:b2:09:
b2:a2:0a:09:f2:2c:44:16:f3:ac:e1:a0:35:eb:1b:f4:72:a8:
d2:03:f9:8d:5f:c6:0a:6e:55:1a:c3:16:24:9e:bd:ce:95:c9:
24:bd:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:43:40 2026 by rpki-client