
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json)
Hash identifier: 8FCc71IpRikIbdIdAhatpKXkhwlL6NC3Ed0Rjcjw4Qg=
Subject key identifier: 35:BD:43:B4:7A:B7:68:7F:4E:CA:4B:0F:15:71:9F:18:8E:46:7D:30
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial: 0100
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
Manifest number: FA
Signing time: Wed 19 Aug 2026 06:55:10 +0000
Manifest this update: Wed 19 Aug 2026 06:55:10 +0000
Manifest next update: Wed 26 Aug 2026 06:55:10 +0000
Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: 4eIeLnButp9adjpDTiDCUNMNA4p0kdaOeBl4gs+H8Q8=)
2: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: CzRt1Vpg04doCx/2AnXX00Zgt+5+vt+JMpvQg/HVV4g=)
3: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: cpq7k1JX/xbHtsPCC0YYOWWVGpVC7cEuSLkMccTVKVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Validity
Not Before: Aug 19 06:55:10 2026 GMT
Not After : Aug 26 06:55:10 2026 GMT
Subject: CN=6a85534e-3856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:87:5e:6a:90:ef:c4:23:37:57:09:56:7e:
f4:91:0d:12:32:9c:3f:db:81:eb:b7:1a:74:d2:b2:
fd:cd:a1:c7:64:54:cd:b4:02:0c:a6:bc:b1:c7:a6:
44:70:5c:2b:29:30:85:83:35:4d:55:c9:54:5e:d3:
49:ac:2f:12:a0:ad:42:ec:5d:ad:8a:44:b9:91:b5:
55:4d:2f:36:07:51:b9:73:4f:29:67:61:e4:d8:a8:
db:48:bf:7e:72:47:3f:9d:f9:36:68:d2:63:b2:84:
c4:57:6c:a7:0d:a6:b2:2e:e3:e8:66:95:53:6b:76:
9b:3f:98:10:56:6e:f9:91:34:9e:b8:8b:b0:33:25:
da:5f:f6:5c:60:7b:c9:3d:55:28:64:2d:14:50:4c:
43:d8:04:6d:1b:c9:dd:38:10:25:c4:bd:34:a2:7c:
bc:e6:bf:9b:ae:de:a6:f6:93:30:16:62:3f:c2:7a:
97:38:96:52:8d:6c:d7:cc:dc:71:a0:ed:36:4d:17:
2c:5b:b0:56:ae:b4:f9:53:6e:11:be:b8:08:0f:89:
0f:5d:78:20:3e:8c:ad:f1:0b:7c:ff:8f:4e:4d:0a:
a1:32:fb:c5:dd:e7:02:12:cc:ae:5a:80:94:d4:48:
53:5f:03:33:4a:c0:e8:fc:c9:e9:4a:8a:fa:59:d6:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:43:B4:7A:B7:68:7F:4E:CA:4B:0F:15:71:9F:18:8E:46:7D:30
X509v3 Authority Key Identifier:
keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:0b:e3:47:1f:7f:6a:de:7b:16:ae:e7:1a:73:20:2a:c5:f0:
30:07:22:dc:b9:f2:ce:70:53:44:26:b6:63:65:0f:7f:87:d4:
39:a5:c0:8b:c9:4e:35:f1:fc:46:7e:fb:f5:a2:5f:9c:8f:bd:
4d:f8:aa:4d:0c:96:4a:42:6f:c4:3e:ef:08:8f:45:a5:6c:bd:
a3:1d:de:d4:e8:49:15:75:93:99:bc:b6:9b:14:3c:fa:82:b5:
09:90:1a:de:7e:e2:fd:93:b7:62:bf:7a:be:0e:cd:5f:7e:4b:
77:d2:b0:7f:98:da:5b:68:d3:90:eb:09:3a:02:6b:d3:f1:42:
d7:fd:64:ab:6a:6e:b7:f1:9b:c0:9f:30:c5:2e:3d:69:cd:26:
c7:9d:78:f4:ad:a5:1a:67:c8:08:db:f4:4e:e7:8e:14:40:8e:
e7:52:8b:d5:7f:a4:fb:97:f6:1c:bb:81:4b:e0:aa:df:a4:08:
c3:1f:e9:f6:c2:b6:15:dc:66:b3:a9:90:ce:8f:5b:1f:fc:84:
64:a2:15:c3:02:02:9c:c1:18:6e:99:87:07:4d:3b:16:73:69:
b2:20:7f:0c:ea:ea:8d:c8:30:7e:f9:fe:32:07:a0:94:bf:a1:
84:bc:0a:db:e3:a9:e2:f5:e1:37:96:ee:ad:fa:ff:4d:44:c7:
c6:57:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:16 2026 by rpki-client