
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File: FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier: olwwpcNqxYUiCXuEjATVKD+ISugU/mXeSpVAhDBqhCA=
Subject key identifier: 1A:20:8A:85:A9:4D:63:B3:26:B7:9A:77:B7:D5:7C:74:94:56:80:9F
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer: /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial: 062A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number: 0616
Signing time: Tue 22 Sep 2026 22:44:52 +0000
Manifest this update: Tue 22 Sep 2026 22:44:51 +0000
Manifest next update: Tue 29 Sep 2026 22:44:51 +0000
Files and hashes: 1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: nFC0BzGGpE5kLIz/TJcoKTX/2ijADE5R9O7heLIXFQw=)
2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: UxSfVK8mOg7oI1TREX9lZ6O+DFZlz9v5PI0cc9vSjto=)
3: C8900982059611ECB2896C55C4F9AE02.roa (hash: HKuyh9i460jyPjgVsedDP+wI2X5laRM2DWFL1VhZUHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:44:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1578 (0x62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Validity
Not Before: Sep 22 22:44:51 2026 GMT
Not After : Sep 29 22:44:51 2026 GMT
Subject: CN=6ab304e4-43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:53:21:33:73:9d:77:54:bd:b0:61:fa:b2:
5d:f8:23:09:64:1e:60:1d:a2:f0:52:ae:1b:cc:41:
94:30:b8:5e:c9:89:de:d1:f4:e7:39:1b:46:bc:4b:
ba:67:09:e2:40:8d:d4:3b:c7:64:9f:c4:d7:bf:c2:
21:67:8f:05:f6:13:10:3b:45:65:74:0f:d1:1d:bb:
f3:46:6a:f2:3f:a3:60:a6:03:e7:86:ee:7e:b9:27:
8e:5e:b8:c0:a5:6e:93:cb:73:a9:ac:10:92:7c:8c:
e8:cd:0c:c5:d5:95:66:a8:a2:d0:7e:af:2f:1f:e6:
c1:9e:3d:9e:a5:cd:61:5c:a0:6a:f7:8a:99:9b:3e:
91:74:b1:b9:20:cc:a8:a2:03:da:48:02:60:61:38:
2b:8b:bc:90:99:b4:32:7d:d1:0f:c0:03:44:19:71:
48:5d:7d:84:7d:98:5c:4d:79:9a:df:ff:7f:3a:9c:
9c:75:07:df:c4:2e:93:64:93:c4:48:0f:ea:fa:a0:
19:d6:72:a3:ac:88:b8:4a:59:10:3a:25:21:ce:cb:
c2:9a:66:91:f3:1e:fd:cc:96:cc:77:31:c1:2b:37:
3d:d9:18:ab:58:3e:ca:34:c8:0d:72:72:18:55:b3:
a2:bf:11:51:ba:84:07:b3:7b:ca:69:d2:e0:12:c5:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:8A:85:A9:4D:63:B3:26:B7:9A:77:B7:D5:7C:74:94:56:80:9F
X509v3 Authority Key Identifier:
keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:48:45:dc:89:11:6a:f0:60:32:e3:1f:6f:12:2d:2f:a5:aa:
75:7a:99:60:37:24:30:38:56:28:61:f6:5a:ad:05:07:43:44:
4f:35:35:1c:05:4a:32:a3:fc:01:cd:11:44:65:23:e9:c6:6a:
95:2a:a2:0c:5c:fc:7d:e3:c3:01:38:4a:32:d3:fa:2a:a4:0e:
4d:3d:57:84:3e:45:1d:cd:48:72:63:2b:2e:e1:a0:b0:0d:e8:
9f:22:38:32:35:1c:2f:79:2a:76:52:b8:87:eb:17:f8:38:42:
28:8f:d3:06:ae:e2:a8:33:48:1c:78:e5:d3:8d:33:b9:a7:33:
f1:36:48:8e:9a:70:97:5e:7b:d8:ed:39:7e:07:11:c1:10:b5:
7a:e4:12:5f:1e:f6:c0:6a:7c:36:d6:f3:e7:9c:f9:04:59:49:
41:e3:ab:88:c0:1d:e4:e7:b5:43:5c:41:d7:bb:a4:1b:0e:8b:
28:25:b6:eb:a5:35:f9:18:30:0d:4a:a6:42:15:47:3f:6c:6b:
39:fd:14:d6:69:74:59:1b:52:f3:7e:e9:2c:44:fc:7b:11:c5:
d9:74:74:87:42:08:1a:2a:03:59:01:f4:51:66:54:00:28:64:
00:f1:b7:e1:10:4f:81:f4:4d:18:b9:96:82:4f:5f:a5:63:10:
1e:23:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:00:55 2026 by rpki-client