
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: pKeCez/FdwDm8GjPKR5E7lCAKjfWaqy5zPeFMd/f5CI=
Subject key identifier: EC:22:04:C7:E8:72:26:19:34:9F:CC:1E:25:C5:BF:CC:81:A9:D1:ED
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0985
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 0914
Signing time: Thu 14 May 2026 20:33:20 +0000
Manifest this update: Thu 14 May 2026 20:33:19 +0000
Manifest next update: Thu 21 May 2026 20:33:19 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: mD7jV6TV2VDfY5UhkbE7fVBdnriKqXuyPZrQazTdphA=)
2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: RfCFLymN4ZhMZVFr84inHmETvl0bVDY8V0QLa8tHpq8=)
3: 78D63F3A49E611F1A18E902DB5833773.roa (hash: W+uFGsPxzsL2drkk4prusa7UME7kIuo89yrjYDiapIE=)
4: 6500BEB849E611F18B665F22B5833773.roa (hash: uclpyx76x4OXtpsf2jbdgSqJN6T+ApIb4vTVWWT5b7Q=)
5: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: MLWfrOxjTe3AR9tg1+HLkf7LXjRAcZZbPyx6j5qp/E0=)
6: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: vakBkNtUUuGs7h4zM7eGY5+Ut3h93Lyy2S4tZhrD+pQ=)
7: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: z+HwCEnQPM1ZWbTaxIobMQlSkN1lILUyzjqFvMLdIyM=)
8: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: tdhB/LQ2MoAuDsLhkF8HuP8bJ9jFlOIm2EVgF88Nu04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 21 May 2026 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: May 14 20:33:19 2026 GMT
Not After : May 21 20:33:19 2026 GMT
Subject: CN=6a06318f-ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:a4:95:e8:53:dc:fc:a9:ba:e7:b8:24:8a:
f6:38:93:15:0b:db:2f:8e:a0:7d:b6:8f:dd:7b:8a:
71:e3:18:78:f3:5f:52:40:46:2f:bb:ca:44:b3:f2:
71:26:06:b0:b0:a0:ad:26:68:19:6d:98:18:1e:8d:
62:1c:e4:66:b7:d6:dc:dd:6c:a6:65:ab:e8:e6:ec:
cf:d7:38:c7:84:cf:e2:5c:12:e7:b4:ff:eb:9f:d6:
f9:6d:01:18:99:cb:0a:25:68:66:f2:45:4a:6a:6f:
e0:04:d5:2a:f5:9e:d0:84:03:fd:c4:d5:f9:ac:18:
b6:ea:03:bc:a5:0c:34:46:09:cb:f0:4d:d1:3e:94:
06:e9:db:94:78:0e:85:f9:34:e1:4a:9e:79:86:8a:
b9:0f:0d:c6:f2:0f:80:62:b7:96:3a:10:8f:c7:df:
53:c4:05:31:b7:90:d2:69:d5:43:a5:f0:cc:4d:cc:
9f:18:89:5a:4c:8f:d5:9e:58:0b:11:c8:b5:36:6d:
2a:73:fd:3c:78:82:86:c0:7c:57:b1:ae:32:ae:31:
19:23:43:c2:43:19:59:bd:04:26:ab:e2:d5:9d:eb:
c6:d5:ad:72:e1:27:26:93:f7:3a:41:d1:16:fd:5f:
a0:ce:f7:c7:cc:a2:75:0f:ac:4e:ba:6b:95:e7:42:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:04:C7:E8:72:26:19:34:9F:CC:1E:25:C5:BF:CC:81:A9:D1:ED
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c7:cc:f2:75:e3:81:c5:9f:84:5e:1d:15:21:62:b3:66:3c:
88:9d:68:2a:dc:15:24:72:f7:59:18:d8:ee:68:7e:6b:36:b3:
ab:83:aa:fd:a1:33:13:e4:a3:a7:15:da:f0:d9:74:3d:9b:8c:
c5:47:ba:a6:d0:70:59:07:5d:18:d3:1a:3b:68:32:39:94:0a:
68:b1:ae:9f:76:b8:b0:1a:4f:4f:bc:f1:f2:84:4f:df:07:fd:
9e:4d:27:b2:b5:05:a6:2a:82:91:93:2f:5e:bb:d4:ef:a1:bb:
61:76:5a:bd:c8:da:ca:e3:04:2c:2c:b7:e5:b8:93:79:74:92:
07:b2:0c:bc:ff:e2:70:33:0b:e0:70:f0:06:ce:ec:fa:41:4d:
45:de:05:96:02:0c:b3:ba:29:c1:08:3e:29:7c:e3:71:13:ae:
9a:01:b3:ef:f9:ba:b8:48:2c:88:70:68:37:be:de:63:f1:9a:
19:88:5b:f4:b2:78:15:03:8b:03:bf:65:16:e1:81:91:c6:3a:
4e:3a:c2:7f:12:ee:ca:f6:ce:46:85:a8:89:fe:1c:ab:fa:3b:
74:18:fd:ce:d4:8a:ed:80:1e:34:0b:84:f1:78:34:4d:e7:bd:
ff:5f:6a:ad:65:10:1c:a2:f0:58:bb:76:af:b8:2d:ed:00:ed:
d7:db:20:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDdFMjQ0MzEwRDdBNDU2RUIxMjdCOTI2QzQyRjI2RDc5
RTlBQ0RCODgwHhcNMjYwNTE0MjAzMzE5WhcNMjYwNTIxMjAzMzE5WjAYMRYwFAYD
VQQDEw02YTA2MzE4Zi1hYzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDyklehT3Pypuue4JIr2OJMVC9svjqB9to/de4px4xh4819SQEYvu8pEs/Jx
JgawsKCtJmgZbZgYHo1iHORmt9bc3WymZavo5uzP1zjHhM/iXBLntP/rn9b5bQEY
mcsKJWhm8kVKam/gBNUq9Z7QhAP9xNX5rBi26gO8pQw0RgnL8E3RPpQG6duUeA6F
+TThSp55hoq5Dw3G8g+AYreWOhCPx99TxAUxt5DSadVDpfDMTcyfGIlaTI/VnlgL
Eci1Nm0qc/08eIKGwHxXsa4yrjEZI0PCQxlZvQQmq+LVnevG1a1y4Scmk/c6QdEW
/V+gzvfHzKJ1D6xOumuV50KtPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwiBMfo
ciYZNJ/MHiXFv8yBqdHtMB8GA1UdIwQYMBaAFH4kQxDXpFbrEnuSbELybXnprNuI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GN0RGQTcyRUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1c1NlNUpzUXZKdGVlbXMy
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZpUkRFTmVrVnVzU2U1SnNRdkp0ZWVtczI0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjkzQS9GN0RGQTcyRUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9maVJERU5la1Z1
c1NlNUpzUXZKdGVlbXMyNGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHsfM8nXjgcWfhF4dFSFis2Y8iJ1oKtwVJHL3WRjY7mh+azazq4Oq/aEzE+Sj
pxXa8Nl0PZuMxUe6ptBwWQddGNMaO2gyOZQKaLGun3a4sBpPT7zx8oRP3wf9nk0n
srUFpiqCkZMvXrvU76G7YXZavcjayuMELCy35biTeXSSB7IMvP/icDML4HDwBs7s
+kFNRd4FlgIMs7opwQg+KXzjcROumgGz7/m6uEgsiHBoN77eY/GaGYhb9LJ4FQOL
A79lFuGBkcY6TjrCfxLuyvbORoWoif4cq/o7dBj9ztSK7YAeNAuE8Xg0Tee9/19q
rWUQHKLwWLt2r7gt7QDt19sgXA==
-----END CERTIFICATE-----
Generated at Sat May 16 19:30:26 2026 by rpki-client