
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: ALSOrUav90cIFtI9ITTbeqS+n3pLjiFDuKf61bAZYUM=
Subject key identifier: 46:63:FC:A9:7E:5E:FD:76:65:C9:1F:EB:FF:4C:A5:67:B4:BC:70:86
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 09BD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 0945
Signing time: Fri 14 Aug 2026 20:27:13 +0000
Manifest this update: Fri 14 Aug 2026 20:27:12 +0000
Manifest next update: Fri 21 Aug 2026 20:27:12 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: 8SlZR46fFu9MZ1SQB4ZPu/+0yXsDGu44Jazah8cnBsM=)
2: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: 448SaP62zIEeDoT+BKnPnMZxQLrDOlT4PwJtIrUEjGQ=)
3: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: hipmINl5QhmUdtwVQhhZDP0tnwpiCxBXThMjdcaX9Jc=)
4: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: VEN7PHjgXJ17sdBlfk+R1gfjCu4511OjPAUhn66pLqw=)
5: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: AzbPG4+Ay9Py93BezJDBHyNMd2NxBXLctC8P1DC+Z84=)
6: 6500BEB849E611F18B665F22B5833773.roa (hash: oRJVDNNEq9yJM3kRWRLDOu8PzfoDFGvUq7nhvQCa5c4=)
7: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: pb+67QUwu5Hw/Dgr2vwKugBBsOlkl0MS1lsM8PjI48o=)
8: 78D63F3A49E611F1A18E902DB5833773.roa (hash: 6yed7TU5WsVwocy0PyrBQTwQ0MhVSm9L6l06FSV8VNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 20:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2493 (0x9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Aug 14 20:27:12 2026 GMT
Not After : Aug 21 20:27:12 2026 GMT
Subject: CN=6a7f7a21-6ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:75:e2:5e:9e:84:78:88:0d:3b:1a:4c:7d:
95:4c:61:f7:30:cd:35:33:22:32:d4:ff:8d:96:3f:
1d:89:d9:ae:ae:46:1d:23:f9:a8:da:02:76:a0:62:
1b:1a:93:62:45:08:fd:7c:44:27:03:56:16:d8:80:
a5:40:45:70:4c:99:82:74:31:8e:c5:5f:5e:06:40:
f9:1b:0c:60:10:d6:b1:4f:67:49:8c:35:85:8a:64:
5d:70:e1:3a:1e:75:a9:91:e5:96:6e:f5:42:b4:a9:
c6:26:e5:f4:da:61:0a:e0:bb:c6:17:c1:e9:89:f6:
18:93:ba:2a:7b:8b:b0:5d:a0:4a:e4:52:0e:7d:f5:
b6:ca:39:05:51:2c:91:89:33:d8:bf:f4:fe:df:97:
8f:8e:6a:56:d0:1a:19:2b:ea:24:99:59:10:55:5e:
37:42:be:22:07:e2:dc:2e:62:86:35:3d:d3:af:70:
d8:61:bf:ff:b4:de:14:23:df:a7:31:c3:04:ec:4b:
0a:a6:25:46:f8:29:db:05:4a:2a:15:01:72:ee:af:
89:e9:01:5d:8c:99:d4:77:b1:c3:8c:09:6e:d3:d5:
c6:94:6b:6b:ed:a5:ea:61:df:f8:1e:cc:45:18:c3:
90:91:fa:f7:c1:99:c4:e9:05:ce:1b:04:bb:06:38:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:FC:A9:7E:5E:FD:76:65:C9:1F:EB:FF:4C:A5:67:B4:BC:70:86
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:e5:b3:cf:a7:4b:44:20:f7:89:af:7a:a9:b0:bf:e9:2d:d2:
d3:0e:28:3a:3e:10:69:2c:b9:f8:ed:f5:e4:24:79:75:7c:0b:
3f:bb:a8:ea:13:52:0b:5b:01:5e:6f:f3:0a:a9:54:52:99:b9:
76:1f:47:eb:90:fd:cc:ea:e6:2b:bd:9a:01:10:e5:76:45:ee:
e6:9e:4c:be:45:9c:2b:ad:f5:06:23:b6:3e:c1:00:ac:a2:44:
ad:07:7a:3b:8b:af:73:dd:e9:a2:28:cd:49:71:28:35:ed:be:
f3:4b:f3:c6:2f:19:66:56:b6:44:2b:47:e2:2e:35:09:7d:86:
57:0b:61:ac:1f:2b:2e:6e:79:da:52:17:72:31:ff:5d:d7:0a:
03:b2:6e:d4:cf:e8:48:7e:9a:9d:c9:32:78:cb:b3:e1:59:1d:
7b:e6:22:fa:a0:2a:8d:8f:00:38:26:2c:3b:e2:15:f9:ac:dd:
b1:05:c7:72:c6:47:de:0d:6c:d9:5c:31:97:ea:ea:e5:ba:57:
fd:43:89:25:98:c5:85:89:db:2b:df:06:ec:7f:09:79:0f:9d:
66:07:68:d4:b6:bc:9a:a7:8d:0f:0f:3a:bb:8c:a6:20:1d:2c:
11:01:cf:32:04:bb:7b:69:bc:fe:72:16:87:08:09:8b:ca:52:
90:62:e0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:54:31 2026 by rpki-client