
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier: 4eChyjmHtREvOnnTXKoSZe+hZe+57Qz9b9R8H7dTYgM=
Subject key identifier: 32:6D:F2:77:EE:5E:62:BB:D8:D3:EB:7E:D8:F7:64:DA:D7:39:51:79
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 036C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number: 034E
Signing time: Sun 25 Oct 2026 00:56:13 +0000
Manifest this update: Sun 25 Oct 2026 00:56:13 +0000
Manifest next update: Sun 01 Nov 2026 00:56:13 +0000
Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: bgNi5BDMzsv//L/bfoXTtby36OmnahLJpB9OSkXcZg4=)
2: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=)
3: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=)
4: 4B2917AE2BFC11F18FD847BBCA833773.roa (hash: UobL0n4d1TIu9JHNtfVYLskZdX7Mjm5UtYnjoxKoY94=)
5: 4BADF2C62BFC11F18FD847BBCA833773.roa (hash: CMNjVUflNbanBr2nUZsWrSDMaaVdhmqPKm2xo8NZ8TY=)
6: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=)
7: D39916A82C2811F1968A560B9D833773.roa (hash: Cg7Q5lSS3gOcyBdrrL+IQ2fYxtaoU1QG1+lbZqI7zqQ=)
8: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876 (0x36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Oct 25 00:56:13 2026 GMT
Not After : Nov 1 00:56:13 2026 GMT
Subject: CN=6add53ad-e118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:1a:b7:32:ef:11:c8:f9:19:84:71:ca:7d:
98:a8:d3:97:a2:5c:a3:59:92:38:4f:99:8a:cc:62:
fb:3c:74:69:77:99:53:97:66:b4:0f:68:80:0b:79:
b2:dc:b2:40:99:10:73:6e:04:bc:ee:8a:39:0f:1a:
6b:5c:70:cf:37:13:fd:c1:8a:a2:c4:6e:99:32:c3:
b6:d5:04:9c:71:94:22:f6:42:f1:05:cc:e3:2f:c9:
54:13:85:3f:3d:db:72:c3:65:58:50:40:7c:ca:d3:
8b:cb:2f:c5:f3:70:5e:59:93:1d:81:b9:47:d7:b8:
7d:63:b1:9e:f0:2f:4d:eb:ad:75:af:83:07:40:ff:
66:77:6a:f1:94:bc:34:70:7e:07:8f:b3:9a:88:c3:
3f:d0:b2:13:60:42:fc:f5:eb:e5:22:91:ce:0a:d9:
a1:3b:f0:95:b6:2c:a0:13:a9:18:b1:87:2c:55:96:
7e:e9:87:84:4b:93:08:92:9f:89:d7:a6:ed:58:8f:
03:36:04:a2:52:73:8a:be:87:01:5e:a7:67:7a:a0:
39:5f:a4:1e:bd:de:0d:2e:ae:c0:c7:df:bd:b7:f9:
11:a8:15:0c:a1:7c:f6:cb:91:aa:9b:23:df:bc:ec:
fd:8a:e6:a8:d1:d8:33:50:a8:b5:ce:27:d6:82:3b:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:F2:77:EE:5E:62:BB:D8:D3:EB:7E:D8:F7:64:DA:D7:39:51:79
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9d:04:44:c7:2f:4b:2d:99:d0:79:f4:a4:1d:fb:a6:83:8f:
95:9c:31:10:d0:ed:f0:a6:87:aa:47:b3:33:40:00:1e:be:02:
ac:4d:07:e7:38:e1:4a:45:1a:1a:76:bc:3e:37:17:53:a3:b1:
1c:54:6f:9a:0e:78:f8:98:1c:4d:9e:3b:0f:87:b3:b0:cf:25:
82:8a:01:68:1d:64:e5:b1:e1:df:22:e8:3a:2d:5f:a0:a2:25:
65:35:88:9e:9d:ab:b6:73:90:12:9f:27:9d:ce:85:ed:8e:07:
3a:6e:95:da:f3:f2:1c:cc:68:f2:41:6e:bb:e3:6e:e5:06:54:
6d:c7:25:6f:67:d6:f9:18:da:df:7b:24:56:29:72:ce:80:bd:
2b:18:53:2e:73:09:0a:4e:e1:60:17:56:5d:ca:00:a1:75:78:
4e:34:73:b8:5e:42:d5:18:f2:ea:a6:0d:ed:3c:10:3b:f0:3d:
2c:de:bc:d6:d8:ff:a4:f6:23:7c:79:34:16:b4:1e:44:de:21:
19:b5:eb:c9:72:00:6b:c4:ff:88:11:3a:47:fe:b4:a2:32:eb:
34:7d:3c:c0:70:74:fc:d2:c5:73:f9:4c:9a:90:91:51:2d:14:
50:97:f0:6e:de:7b:d0:fd:d1:94:53:c4:3a:1e:01:21:79:fa:
23:c5:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:45:41 2026 by rpki-client