
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json)
Hash identifier: ni7254gvk9L+j3PRihPqda+PBsKUSyZ58Rip5Cr421o=
Subject key identifier: 93:D8:2D:8E:AF:75:91:A6:D2:0B:B1:2A:A3:7B:28:06:44:8A:4D:C1
Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
Manifest number: F8
Signing time: Fri 17 Jul 2026 07:31:01 +0000
Manifest this update: Fri 17 Jul 2026 07:31:00 +0000
Manifest next update: Fri 24 Jul 2026 07:31:00 +0000
Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: EEKy7x6+NjjRuhQTaRSk+sn/grxxvn8RzSSzFIWPujM=)
2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: yGM7eKq5h+PmwajQSPDe5cv2bwop3r2WJ/lVhjv7Pu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Validity
Not Before: Jul 17 07:31:00 2026 GMT
Not After : Jul 24 07:31:00 2026 GMT
Subject: CN=6a59da35-21fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:07:87:fc:cc:b8:4b:d7:fa:46:33:e5:e5:
bd:e3:b1:bd:f4:fd:9b:90:84:7c:3c:f0:b9:08:07:
6d:3e:b7:74:f7:a5:23:74:2b:84:54:dd:6a:cc:6c:
d1:b7:c9:f3:ce:2e:49:bd:ec:d6:bb:3a:3f:d3:3e:
f8:f0:b9:3c:50:73:ec:51:01:c3:a7:af:4b:b9:20:
2c:0a:9e:2a:be:86:9e:8a:93:b5:01:77:7b:13:4b:
49:ad:bb:2f:d3:45:75:17:7c:57:05:eb:df:82:18:
f9:69:0b:5d:6c:28:e3:af:3c:21:61:bc:50:a4:32:
dd:ce:f4:ca:86:28:0e:5c:2d:79:0b:d0:31:da:d7:
aa:eb:26:de:d5:ea:a1:94:e4:ee:6c:c7:f6:05:71:
14:14:55:c7:ed:89:10:5d:8f:b7:a0:91:e4:e9:c5:
72:77:86:df:7b:48:1c:f0:2c:79:09:5a:a5:80:19:
80:f1:41:5f:ad:cd:be:75:e3:88:65:f5:fb:1f:36:
71:82:35:38:18:16:0d:5b:8d:b4:0f:48:6b:71:b7:
e6:de:f6:d3:2e:95:f4:02:0c:84:8f:64:10:7b:49:
89:17:38:b5:91:1b:c0:89:c0:c5:23:e1:0c:e6:cc:
3a:fb:bd:b4:e7:02:a9:4a:82:48:7b:ef:c2:52:b6:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D8:2D:8E:AF:75:91:A6:D2:0B:B1:2A:A3:7B:28:06:44:8A:4D:C1
X509v3 Authority Key Identifier:
keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c0:82:68:51:af:d5:e1:52:e5:f5:61:19:9d:02:e8:f9:b8:
1f:42:e8:fd:66:1a:32:18:94:62:13:93:37:f3:7a:b0:1d:66:
92:ac:db:a7:e8:0d:fd:71:75:ee:67:ad:c4:93:0d:84:26:3b:
e1:f7:a1:26:ac:76:45:11:13:97:46:5d:d7:d7:d2:ca:5a:be:
a0:0a:6a:95:0a:08:6e:12:05:50:0d:2f:e7:eb:58:41:56:4f:
7d:d8:6c:ee:f2:cb:4e:9d:14:53:3f:6c:56:f5:7c:3b:60:05:
53:d4:c5:a9:e2:4f:09:50:f5:ed:73:68:2d:41:c8:7c:14:c3:
3a:6f:b8:ec:6c:7e:2a:83:bb:9b:ba:e3:ff:c2:62:13:d0:11:
b4:16:d6:84:fc:50:9d:8d:38:6e:1c:df:ee:57:22:d2:27:48:
8e:99:06:7e:6a:e0:90:41:02:1d:2f:33:8a:e8:13:b6:12:0e:
e1:bf:d6:95:26:1a:03:e3:55:77:81:18:94:32:91:e7:a9:18:
55:d3:74:59:d5:b7:d9:2a:91:f8:5e:93:c8:17:57:1d:93:db:
42:7b:66:7c:88:ed:92:91:e2:4b:6a:58:1d:24:d1:e0:28:af:
ba:b7:45:87:41:21:75:34:73:ad:a0:56:8e:0d:f3:1a:fa:75:
1f:3f:a4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:34 2026 by rpki-client