
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: zATrL/chxe6rX9miAaOv7GkZFyYPIZmKChyMoudUF+U=
Subject key identifier: 52:83:40:4C:4F:73:E5:24:6B:F3:41:4F:EF:8C:8A:26:1C:4A:64:E0
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 09A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 092E
Signing time: Tue 30 Jun 2026 21:06:24 +0000
Manifest this update: Tue 30 Jun 2026 21:06:23 +0000
Manifest next update: Tue 07 Jul 2026 21:06:23 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: xgbtOb85TZCJNFJRFdg4WLjBb8TmXS/ySMpI9DD2Vrw=)
2: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: hipmINl5QhmUdtwVQhhZDP0tnwpiCxBXThMjdcaX9Jc=)
3: 6500BEB849E611F18B665F22B5833773.roa (hash: oRJVDNNEq9yJM3kRWRLDOu8PzfoDFGvUq7nhvQCa5c4=)
4: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: 448SaP62zIEeDoT+BKnPnMZxQLrDOlT4PwJtIrUEjGQ=)
5: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: AzbPG4+Ay9Py93BezJDBHyNMd2NxBXLctC8P1DC+Z84=)
6: 78D63F3A49E611F1A18E902DB5833773.roa (hash: 6yed7TU5WsVwocy0PyrBQTwQ0MhVSm9L6l06FSV8VNI=)
7: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: VEN7PHjgXJ17sdBlfk+R1gfjCu4511OjPAUhn66pLqw=)
8: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: pb+67QUwu5Hw/Dgr2vwKugBBsOlkl0MS1lsM8PjI48o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 Jul 2026 15:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470 (0x9a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jun 30 21:06:23 2026 GMT
Not After : Jul 7 21:06:23 2026 GMT
Subject: CN=6a442fd0-32e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:9f:29:d7:b2:d4:70:01:8d:49:ff:ab:e2:
9b:a2:5c:4d:ea:d1:d3:e2:55:11:11:a5:f6:e8:14:
35:70:e8:f8:82:55:6d:da:ec:48:fa:bc:c6:a0:ab:
9a:30:da:1c:d5:64:ba:4a:ea:51:1f:10:f3:a7:b3:
59:6c:32:67:32:13:50:71:6f:cb:c4:d4:db:b6:1d:
02:6e:ba:3f:88:e8:21:c2:09:15:09:82:2f:b7:ed:
5a:37:14:d5:6b:bb:3e:eb:8e:2d:11:1b:30:9f:c7:
2e:ce:91:9b:a5:56:9a:5b:50:0c:da:e7:e5:9a:bb:
d1:6c:3d:30:f0:c4:bc:a4:4e:ff:40:f8:b7:97:c5:
9c:c0:37:78:d3:bd:3d:c8:cd:de:70:d6:11:7f:3e:
b2:5a:85:5e:a2:8b:16:6a:84:9a:46:48:a6:5f:0e:
c2:c2:f4:e4:9e:0e:54:17:70:e7:de:6d:de:a1:a7:
e9:a5:f1:c7:39:6e:7e:8e:40:4d:e0:97:8e:16:c2:
18:e1:bd:ec:86:22:6d:21:45:38:5a:42:35:28:c7:
3d:fb:27:b1:03:c6:93:ae:f6:07:95:bc:2b:29:86:
62:04:80:d8:8a:c6:ea:3b:b3:12:9c:87:d4:e9:d7:
6e:c1:73:7c:86:38:c3:b2:95:5e:a0:4e:04:a7:42:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:40:4C:4F:73:E5:24:6B:F3:41:4F:EF:8C:8A:26:1C:4A:64:E0
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:0e:41:52:69:1d:37:fc:41:32:d3:df:06:de:21:6e:d7:
8e:19:ce:5d:c9:53:86:0a:85:69:fd:54:20:ee:1f:bb:28:3c:
60:8c:d8:65:6c:62:c1:95:96:fa:23:7f:40:d6:38:f1:56:27:
0a:73:23:f9:5c:8b:30:cb:76:d9:b8:76:5b:11:f4:98:d6:7e:
11:f3:d8:9e:4f:72:81:af:b6:d9:be:3f:1e:d7:c1:da:9e:1f:
3c:b1:0a:3a:65:fa:5a:cc:23:dd:8f:0d:5d:71:94:3e:90:1d:
c9:9c:56:b1:80:2a:a4:90:ff:bb:c8:43:7c:9e:0a:8d:93:8a:
b7:d8:c8:ba:85:db:b7:4d:eb:89:d4:5c:dc:36:94:01:61:96:
7d:4e:8a:d6:85:3a:3c:fb:54:3e:aa:9b:9e:c0:1e:b4:ed:b9:
f7:6d:c7:70:67:54:b3:b8:8c:1c:33:e1:3d:cf:6b:73:ec:1f:
b3:f7:f5:2b:46:b7:5f:01:50:33:34:6f:bd:26:03:97:e6:e6:
30:9a:c7:51:44:00:f8:dd:c5:ae:ab:a6:61:6a:00:68:6b:71:
ce:8a:48:99:63:0b:ef:e5:ce:28:25:0f:11:32:ee:f4:6f:4a:
ba:e8:0f:60:f4:16:0d:47:fa:b2:f8:07:48:aa:01:b7:5e:b5:
52:c9:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:17 2026 by rpki-client