
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
File: FnnqBmaD8qFVDecPRYQy3RqDJw8.mft (raw, json)
Hash identifier: BGq4EdtOwcnlH+2Afs3ujjZH5Y8xo9Jq2HwFQY7nAfE=
Subject key identifier: 1E:60:2D:4F:BE:0A:89:D6:40:05:05:80:FF:22:9A:06:5F:02:1F:7D
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Certificate issuer: /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial: 0BCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
Manifest number: 0C62
Signing time: Tue 18 Aug 2026 19:20:01 +0000
Manifest this update: Tue 18 Aug 2026 19:20:01 +0000
Manifest next update: Tue 25 Aug 2026 19:20:01 +0000
Files and hashes: 1: FnnqBmaD8qFVDecPRYQy3RqDJw8.crl (hash: FLMM0Vf7j2RAckNDeh5gfIcgkKvRlshUmtmyOtjvoa0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 19:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3021 (0xbcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9, serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Validity
Not Before: Aug 18 19:20:01 2026 GMT
Not After : Aug 25 19:20:01 2026 GMT
Subject: CN=6a84b061-c606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:5f:2c:bb:31:4e:40:26:ac:9e:5c:af:7b:
b1:b9:c8:ff:f3:3f:9c:17:a1:47:9b:75:0d:1a:76:
10:e3:c2:ab:95:8d:46:45:6e:0b:88:5b:6b:08:ca:
06:39:6a:ac:34:57:a7:95:4d:f4:a1:80:10:b0:22:
d5:a5:be:73:3e:ae:e7:df:09:39:05:99:c9:63:69:
cf:4d:5c:2b:be:3b:30:cf:e4:49:c9:7f:0f:00:6b:
4d:d7:7d:4e:20:95:c5:a6:8a:81:c4:ff:c0:e4:ca:
df:ce:6d:9e:e9:aa:eb:71:1f:79:a4:a7:04:4c:e5:
c4:6b:ee:f9:ac:58:6e:ea:d8:d3:e2:d0:c0:21:6a:
3a:e1:a3:81:2f:a0:40:0f:67:9e:05:81:d1:83:d9:
b3:a6:04:5d:6e:ff:dd:1d:25:ec:84:fe:d7:0b:4c:
ee:ec:89:68:13:4c:8d:e6:c2:db:9f:e9:4a:67:1d:
17:a5:18:79:97:e4:5e:73:2b:d9:21:1f:4e:57:20:
10:c1:fb:e0:a1:90:1b:eb:a2:a9:0a:72:01:7a:14:
b0:e0:2b:55:71:e1:6c:3d:70:a7:ae:d0:bc:a7:79:
33:72:0e:ca:f7:04:d1:0f:a6:ff:62:54:31:11:52:
4c:fa:76:62:62:60:16:9d:38:81:bf:ab:3d:7a:a1:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:2D:4F:BE:0A:89:D6:40:05:05:80:FF:22:9A:06:5F:02:1F:7D
X509v3 Authority Key Identifier:
keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:cc:7f:bc:9b:be:37:47:43:b7:0d:3e:f1:b6:62:26:47:97:
19:e0:ca:bd:96:17:95:c2:cd:54:98:be:cb:e6:91:d8:51:74:
b3:17:dd:40:6d:cc:17:98:81:bd:2c:28:4f:5a:62:b3:87:96:
dd:6d:af:82:bc:53:f2:4a:b5:5c:27:09:bf:cc:23:81:98:ea:
58:b1:6e:80:56:dd:c3:c8:8d:9d:d5:31:72:e5:e0:44:ca:6d:
66:ff:db:71:5d:5e:d6:f0:5e:6d:d2:35:48:f4:1a:cd:af:77:
98:af:56:3a:2b:25:87:30:4a:ee:96:8a:83:10:2e:c7:0a:19:
bc:26:cd:40:93:90:0d:66:14:e4:9e:d8:0c:5c:4f:ce:c7:c3:
ff:04:e2:66:cc:00:00:d1:09:58:12:b5:07:85:ad:5b:af:c1:
41:31:1e:61:01:4f:bd:70:2c:a7:dc:56:82:68:f6:4f:63:45:
d0:e7:92:e2:39:1d:c2:f3:15:36:29:a9:29:5d:c5:c1:b7:b0:
21:d2:85:ce:4e:d0:06:bd:11:ca:23:c3:0b:bc:c8:01:18:54:
28:88:1c:4c:6e:74:fe:62:cf:4c:b9:64:6e:e9:51:64:77:c6:
56:f9:bd:5a:d8:11:fe:bf:f9:8b:7e:6b:8d:df:07:28:59:7a:
af:fb:1e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:33 2026 by rpki-client