
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json)
Hash identifier: il4yo8FEssoHHTsQGHgqdIAU0wX5wYDgzGnFOlpnzEg=
Subject key identifier: FA:8E:A7:19:A2:5B:09:A8:48:C5:7B:51:42:CF:9C:2C:64:EC:44:B8
Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Certificate serial: 123B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
Manifest number: 1231
Signing time: Thu 16 Jul 2026 17:11:03 +0000
Manifest this update: Thu 16 Jul 2026 17:11:02 +0000
Manifest next update: Thu 23 Jul 2026 17:11:02 +0000
Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: 1jyHXF1MIr5xk46WKn3pbI84lcmxk5E8dhKFy/TBqL8=)
2: D728B250060011F0A0448C64C4F9AE02.roa (hash: jr1Bh2Tza0ZsNT3OcPcUQ8PAuKdrZij+9+lC6Zj1Cvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 17:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4667 (0x123b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A
Validity
Not Before: Jul 16 17:11:02 2026 GMT
Not After : Jul 23 17:11:02 2026 GMT
Subject: CN=6a5910a7-dde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:f5:49:10:07:6f:14:fe:22:5d:58:cd:f9:
15:66:74:d4:16:47:2d:d4:32:e4:0e:71:4f:a0:60:
f9:a4:24:82:f5:9d:b5:74:0f:3c:81:4f:0a:8a:98:
f2:6b:dc:52:21:36:94:ad:27:d3:ab:e4:c6:e0:ae:
c4:83:6a:e0:0c:36:a7:56:24:14:25:cb:64:30:e8:
d2:91:cd:8e:83:3e:79:10:c8:cd:23:0b:4a:c1:f5:
99:d5:93:c3:e4:42:5f:fe:6f:a3:d6:96:88:8a:55:
aa:25:3a:18:0c:75:26:0b:9c:73:97:92:e5:62:8a:
e9:27:bb:7b:58:5b:cd:21:24:ed:8c:d7:a2:e6:53:
fe:b8:4c:6f:e7:87:b1:b1:8c:99:97:0c:27:ae:b1:
c0:98:1d:7d:2e:b2:7e:db:71:4d:d3:5d:ec:00:f2:
b9:1e:7b:c5:02:fb:2e:9b:98:08:7b:c4:cc:3f:7a:
87:f0:92:03:32:02:ad:61:53:ff:de:81:13:0a:93:
a5:91:14:ab:c2:f8:4e:72:fa:fa:ea:40:fe:c1:eb:
f5:df:9c:c2:fc:bf:2f:c7:ec:8a:4b:7e:5f:2e:95:
ce:6d:3f:a8:bb:27:ae:1a:c4:a2:c4:1f:96:93:17:
b5:73:dd:ab:df:b2:b1:aa:c7:d3:69:e8:1a:2d:d8:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8E:A7:19:A2:5B:09:A8:48:C5:7B:51:42:CF:9C:2C:64:EC:44:B8
X509v3 Authority Key Identifier:
keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:d8:56:f3:c6:6e:74:64:d0:9d:c4:58:7f:f6:99:84:66:c1:
71:30:b3:91:34:58:48:c0:e2:0d:1d:2c:8a:33:ef:5b:b2:4a:
5d:8c:fe:c3:38:13:40:da:9e:34:14:8a:3d:76:ff:f0:62:11:
78:46:7c:8b:8e:99:45:89:a0:a5:99:21:48:cc:5c:cd:c1:a2:
0e:89:4a:80:dc:ad:d7:0d:30:2e:20:61:e5:de:98:fb:19:d3:
22:a5:28:6d:8d:c5:f8:8f:b2:84:55:ef:32:e2:c2:91:83:40:
26:1f:1e:cd:b3:86:2d:13:64:f0:9b:ae:d4:50:b9:5c:ea:63:
77:79:5f:f8:56:5a:bc:e0:34:7f:ef:cb:ff:c7:ab:d0:8c:98:
00:8e:9a:f9:20:31:bf:44:15:13:3a:83:09:43:c3:40:66:ab:
ad:0f:01:27:b8:aa:bf:eb:39:18:0d:a2:08:93:7e:a1:60:dd:
96:22:c8:b0:1a:13:d5:f6:2b:65:ea:67:be:1f:e1:31:dc:c8:
09:0b:48:ba:ba:33:37:f8:64:5a:3d:6e:23:bd:0b:c8:eb:b1:
92:50:49:f1:89:17:c3:ca:2f:fa:96:8a:c9:4b:94:0f:29:40:
83:93:3e:76:87:c4:9d:a2:c1:e3:5c:5b:9f:c8:eb:67:74:83:
db:90:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:32:27 2026 by rpki-client