
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier: JYmVI7I6yrAsjYBTBPHEh74BVQXXEcsNRgG1WkdaTnY=
Subject key identifier: EF:81:A8:68:D4:0D:3A:C7:12:61:78:69:86:D4:FD:CC:2C:3E:CB:4A
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 0784
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number: 076F
Signing time: Wed 02 Sep 2026 21:39:51 +0000
Manifest this update: Wed 02 Sep 2026 21:39:51 +0000
Manifest next update: Wed 09 Sep 2026 21:39:51 +0000
Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: zkCULz+SYNhldUWz+uGV65pWCfGliF3uMZrTIZE4WlQ=)
2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 21:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Sep 2 21:39:51 2026 GMT
Not After : Sep 9 21:39:51 2026 GMT
Subject: CN=6a9897a7-a1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:f3:a1:58:05:c2:85:18:b0:f6:46:8c:e7:
81:15:12:d4:7d:18:1b:c7:d2:58:e8:ed:1d:b6:6c:
8e:dd:ef:04:76:bb:31:72:46:0e:8d:9f:78:95:8d:
13:32:37:96:0a:c1:46:32:77:7a:d9:ea:ca:f0:a6:
9c:ae:73:af:2b:83:62:58:77:0c:be:c1:ec:5f:0d:
23:01:df:ae:2a:01:8c:e8:9b:1e:1e:2e:0e:88:9a:
d4:73:b6:c6:a7:1a:15:82:34:8f:e8:8c:e4:53:39:
58:ae:d8:d1:89:e4:09:e7:20:43:4e:5a:3a:2e:4c:
ae:8e:f2:da:a1:96:e0:5a:98:cd:5d:8e:25:43:df:
0c:0c:14:64:61:79:7b:3e:06:4c:b0:54:ff:f4:b9:
e6:d6:e4:10:ca:bd:a5:ba:0e:9f:92:4d:f5:e9:c5:
6a:51:5d:2a:d3:13:e9:ea:e7:fd:cb:5f:d2:35:19:
ae:87:7d:06:33:13:01:4a:1d:87:26:25:1f:4d:87:
98:1f:a0:ce:b5:ae:f7:4d:48:bd:5e:7a:47:f9:72:
d1:8c:a0:39:e2:1f:e2:bc:3e:58:77:c3:5c:63:ac:
6c:59:ad:29:10:99:93:d1:d6:21:71:56:07:b4:41:
51:55:96:38:4e:9d:2f:d2:ea:ab:be:12:36:1c:34:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:81:A8:68:D4:0D:3A:C7:12:61:78:69:86:D4:FD:CC:2C:3E:CB:4A
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:b9:55:a7:4d:c2:73:71:e1:42:3c:49:b8:05:e0:7c:e5:
78:bf:c4:44:f0:d9:ba:06:a2:84:e3:c0:c6:33:da:a0:93:6a:
59:41:b0:96:b3:05:be:30:77:0d:62:93:00:fd:eb:2c:28:80:
85:23:e8:5d:f5:45:f8:a0:b8:f6:da:89:76:00:8a:5d:56:ae:
39:fe:7c:5a:c0:00:98:cb:20:2f:d7:d8:41:68:1f:0c:f3:78:
ae:23:6f:c1:27:29:15:aa:4e:c0:f1:db:06:b9:2a:97:25:4a:
53:22:26:41:7c:22:b5:48:77:92:a9:fc:9e:77:a2:e9:1a:4e:
df:ea:37:8c:eb:3a:98:ec:50:b2:a5:d8:de:73:01:08:fc:08:
71:c0:ec:6a:8e:39:57:2a:45:ab:03:af:cf:5e:0c:3b:4c:52:
ac:70:9d:01:11:35:2a:75:bc:f7:4e:ec:8a:96:7a:3f:42:ef:
00:b8:b3:c0:2b:bd:9b:97:8b:2a:c7:de:d9:f1:eb:4a:09:07:
ff:b3:d4:0f:3b:56:dc:68:67:38:f1:4f:e8:14:ed:90:a4:32:
f4:b6:21:34:e4:7b:cf:91:ab:97:04:79:11:af:dc:56:ce:26:
95:c9:de:3a:9b:1c:2d:2c:b3:4e:ef:96:6e:0c:27:80:2a:09:
43:10:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:38 2026 by rpki-client