
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: twHa2kOd4H99x8JHQeHqnKS8VbEf9ww/z1Pq+YhTZ+k=
Subject key identifier: 81:B8:17:82:0F:41:14:5B:42:BB:AD:BC:0D:71:F9:11:32:15:0C:15
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 09D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 095E
Signing time: Fri 02 Oct 2026 20:37:13 +0000
Manifest this update: Fri 02 Oct 2026 20:37:12 +0000
Manifest next update: Fri 09 Oct 2026 20:37:12 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: jNy/Bnlg7ZB46L3jPrvoqgEOxc6W78VzMdKVQ626xKc=)
2: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: hipmINl5QhmUdtwVQhhZDP0tnwpiCxBXThMjdcaX9Jc=)
3: 78D63F3A49E611F1A18E902DB5833773.roa (hash: 6yed7TU5WsVwocy0PyrBQTwQ0MhVSm9L6l06FSV8VNI=)
4: 6500BEB849E611F18B665F22B5833773.roa (hash: oRJVDNNEq9yJM3kRWRLDOu8PzfoDFGvUq7nhvQCa5c4=)
5: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: 448SaP62zIEeDoT+BKnPnMZxQLrDOlT4PwJtIrUEjGQ=)
6: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: pb+67QUwu5Hw/Dgr2vwKugBBsOlkl0MS1lsM8PjI48o=)
7: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: AzbPG4+Ay9Py93BezJDBHyNMd2NxBXLctC8P1DC+Z84=)
8: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: VEN7PHjgXJ17sdBlfk+R1gfjCu4511OjPAUhn66pLqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518 (0x9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Oct 2 20:37:12 2026 GMT
Not After : Oct 9 20:37:12 2026 GMT
Subject: CN=6ac015f8-27cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:32:d7:f6:c0:51:c7:4c:a5:85:d2:a4:55:
71:23:7c:ac:c6:f8:03:d1:d5:e8:4e:f5:c7:1c:db:
c7:35:8f:ea:f1:f1:20:2f:53:2b:1d:59:f9:08:0d:
d2:6e:5b:6a:78:25:3a:ce:ae:25:45:e9:ff:7c:52:
21:45:3a:85:db:f5:37:39:d5:e1:b3:f3:e7:31:da:
f3:55:f4:76:5e:c8:0a:04:30:f5:26:54:c6:2b:14:
8e:ac:c4:e2:d4:d7:6c:f4:10:10:00:d8:f0:21:49:
cc:f7:d7:8e:a6:24:63:1d:27:e9:7e:ae:cc:a0:b2:
f5:00:fd:b3:b4:98:b8:ae:96:c0:4f:bd:a4:2e:e0:
cc:74:19:68:f4:5e:8f:04:f4:9b:1b:99:eb:82:6b:
1a:fe:26:c2:d8:af:56:e7:4d:32:2d:bc:07:83:77:
36:f2:71:34:9a:ff:fe:33:a0:50:db:c8:2a:f8:57:
e0:ca:1c:fa:47:d8:35:f0:af:42:f0:fa:99:48:4b:
13:2b:dd:a4:47:62:d8:7a:fb:18:fb:83:c8:e7:30:
55:86:68:b7:1e:bd:99:0c:dc:d0:d3:c6:37:be:b1:
52:e3:4c:56:6c:af:89:d2:a3:ca:09:c8:04:45:a2:
19:c9:1f:2c:d2:e6:e0:d9:8c:79:e9:e5:07:db:65:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B8:17:82:0F:41:14:5B:42:BB:AD:BC:0D:71:F9:11:32:15:0C:15
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:73:32:40:1f:db:0b:c0:b0:a9:17:41:02:4f:7c:aa:a8:04:
57:31:16:4e:02:93:b1:af:3d:c2:c1:ad:0f:93:f1:d2:6f:a1:
c2:b7:1b:56:db:fe:0a:2a:f1:12:cd:20:59:21:08:56:ed:5b:
b4:c4:49:66:c6:d1:a9:2d:a1:c7:3b:70:f1:12:41:27:db:7e:
eb:ba:97:2a:00:7a:00:d3:f4:76:c7:fc:b7:49:de:ea:9a:67:
6b:7e:21:22:91:2d:45:93:cc:87:d0:3a:ce:91:58:1d:34:8a:
31:59:de:8f:86:da:fa:92:71:b1:f8:c5:b7:11:44:b1:bb:8f:
70:32:90:32:cc:e1:0b:67:7d:49:d1:af:51:17:29:6c:c7:74:
77:7a:3e:04:ee:cc:d8:6a:c6:4b:60:a3:22:41:74:56:e1:c2:
6b:51:e6:28:95:80:d0:66:fb:c0:50:ed:37:9d:c1:48:08:b0:
0b:f2:a2:90:39:a0:8c:1f:a4:e6:d7:00:c9:49:0d:b7:48:a8:
69:21:4f:89:a0:a3:d8:f7:d9:2c:25:48:e6:c6:80:4a:b9:40:
96:7d:79:35:1a:e8:3d:3f:24:30:cc:04:41:25:81:26:8b:c6:
28:4e:fa:97:8b:74:3e:b2:cb:93:12:31:c6:3e:83:86:90:cf:
f3:cb:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:06:41 2026 by rpki-client