
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier: i2AFq4vFluWxI2G7UbOVp4ALgaM+lmOhK+6KWQy7d+w=
Subject key identifier: 68:6D:36:39:35:E6:C5:E9:7E:C4:1A:A0:E6:F6:17:8E:9A:C5:F5:A3
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial: 0BAF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number: 0C25
Signing time: Mon 22 Jun 2026 19:06:06 +0000
Manifest this update: Mon 22 Jun 2026 19:06:05 +0000
Manifest next update: Mon 29 Jun 2026 19:06:05 +0000
Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: LsKOtnb8QQqsxpkTPx2tsvLuPnQTstMoV4Owxd53JrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Validity
Not Before: Jun 22 19:06:05 2026 GMT
Not After : Jun 29 19:06:05 2026 GMT
Subject: CN=6a39879e-38e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:7d:e4:9d:28:2a:b2:30:d8:8c:be:d5:13:
f1:6e:8c:12:23:ec:d2:4e:43:91:43:f6:20:ef:66:
cf:88:c3:3f:40:ba:ac:27:a0:13:ea:22:b9:fe:fc:
53:2a:62:a1:a5:08:1d:89:d1:26:bf:52:8b:1e:26:
7f:b7:6f:41:06:94:5f:f8:e0:72:4e:7f:35:8f:c2:
53:fa:2c:0c:6e:a5:5e:ef:2d:f0:b3:bc:9d:da:c9:
2d:2a:d4:f2:2e:d3:81:e6:f7:b5:47:13:ff:84:db:
6e:99:a3:25:ea:f7:fe:eb:9e:31:a3:05:41:6b:fa:
0e:0a:9d:22:f0:90:ba:44:33:3e:78:1b:0d:5b:ea:
6a:93:a2:0b:2f:6d:0a:08:18:34:e3:c8:6e:7b:45:
3a:ed:9e:23:5e:76:5c:cf:85:46:91:a2:bb:fd:d8:
7e:e2:86:81:54:62:7e:3e:cf:08:3a:ca:68:66:1e:
ac:61:e3:dd:5e:54:84:17:dc:3e:be:1f:46:38:e9:
a9:c9:a5:55:6e:5b:e1:71:cd:82:59:15:98:4b:27:
b0:49:76:cb:b3:3e:e4:56:f8:1e:43:bc:c1:87:d5:
d9:9c:bd:8a:d0:7a:c1:10:78:b0:14:17:3f:83:c3:
86:b4:e9:24:cc:8c:02:b4:3d:f3:46:cc:b4:0a:9b:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:36:39:35:E6:C5:E9:7E:C4:1A:A0:E6:F6:17:8E:9A:C5:F5:A3
X509v3 Authority Key Identifier:
keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:83:54:0e:4e:c1:12:b2:d3:02:96:24:fb:a9:44:8f:af:
61:c9:6b:4c:f1:55:0a:f8:b2:93:54:bf:3f:8b:25:a3:88:5a:
8c:5f:24:5f:08:1e:3b:5a:4f:d8:c6:eb:af:e1:87:62:6f:21:
ed:5e:51:d7:e5:66:68:ed:a8:be:f3:c5:d0:1e:23:1f:0b:20:
eb:5c:32:ec:63:10:7d:92:68:65:77:7f:8c:c0:8c:a0:38:88:
c8:3f:6c:b0:d2:20:09:e0:b0:e6:d0:d6:57:07:c9:7a:9f:81:
a9:4b:e4:1c:c9:9c:67:17:51:93:8d:61:6c:ba:86:89:f5:03:
ec:17:d8:db:f8:83:50:4a:90:c2:f0:d4:42:14:67:36:fa:de:
b4:2c:39:64:9e:a9:d1:43:07:71:25:1b:ef:db:62:25:9e:41:
71:f3:2f:68:ea:fe:29:5d:fd:fb:85:3d:b6:47:57:ec:e0:0f:
37:ff:a2:8a:51:71:a5:9d:15:37:ba:05:31:f5:ef:20:7d:3e:
01:4d:43:82:03:79:d5:6d:c4:1e:3f:57:e2:62:48:92:9c:43:
1c:a8:d3:d8:cb:ee:a8:2e:7c:0b:94:bc:f0:73:e4:9e:fe:35:
41:93:f2:df:4b:d0:3a:de:0d:b0:76:fa:ff:82:f0:a5:42:51:
26:9b:89:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:00 2026 by rpki-client