
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
File: FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft (raw, json)
Hash identifier: F9gNpkHWVl0k6dbVyhE+mWSdvGhIqDGMww8s548tkao=
Subject key identifier: 79:C5:E0:90:82:01:00:F1:62:DD:FA:3C:14:F7:7D:C1:DE:E2:E7:F6
Authority key identifier: 14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
Certificate issuer: /CN=A914F5BA/serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Certificate serial: 09E8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
Manifest number: 09DF
Signing time: Tue 22 Sep 2026 19:40:38 +0000
Manifest this update: Tue 22 Sep 2026 19:40:38 +0000
Manifest next update: Tue 29 Sep 2026 19:40:38 +0000
Files and hashes: 1: FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl (hash: zRhVPkglPjGuGeiIPYJIci0r/wf2V27umHnvmiLqJ74=)
2: E9E80356AD6211EABEDF046AC4F9AE02.roa (hash: 3/DJ3hL5G9etvpvOyj7MflbEEZYKEAa9BhYU/ttjjb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:40:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2536 (0x9e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F5BA, serialNumber=1420F80709DDD3DFC3F511565503CEF4444BEDC3
Validity
Not Before: Sep 22 19:40:38 2026 GMT
Not After : Sep 29 19:40:38 2026 GMT
Subject: CN=6ab2d9b6-b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:71:f7:63:5e:8e:b4:cc:a9:93:2b:ae:6d:
ad:77:af:92:fd:bb:0f:30:65:18:c1:98:99:25:f2:
eb:22:e3:a5:5c:9b:03:4d:08:70:53:fb:e3:b4:1d:
02:fd:57:38:93:4c:82:b7:7e:35:25:2b:be:35:81:
75:7b:1d:0b:63:12:48:d3:36:04:29:6d:11:49:b7:
8c:74:34:b7:a7:da:7b:8c:62:17:fc:70:b6:72:b0:
36:c0:83:c7:68:3e:26:f3:bb:f5:e1:88:ba:21:84:
c0:eb:ea:fb:24:19:f9:6c:bb:2a:55:b2:c8:22:4e:
18:4c:1b:f9:fd:8d:e6:63:55:7f:13:1c:a0:94:ba:
76:6d:86:54:e9:a4:9e:cc:03:2a:d2:5b:a6:cb:4d:
62:5e:dc:8e:24:00:0e:05:99:97:8b:c6:78:2d:7e:
a3:9c:01:26:68:32:96:e8:e2:f3:3b:5f:b8:d1:ae:
42:cd:e9:09:19:7f:6d:86:fb:38:a7:d0:16:9b:76:
1a:17:83:54:d4:5d:4d:36:31:a5:76:81:9e:35:ec:
5d:9d:fc:27:a6:ff:d6:7f:c8:7a:a1:07:8f:20:1e:
02:5f:1c:b4:1f:60:cc:f4:1c:1b:54:9e:78:b0:60:
cb:c5:ba:87:d5:a2:8f:8f:91:3b:5a:47:d4:f1:9f:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C5:E0:90:82:01:00:F1:62:DD:FA:3C:14:F7:7D:C1:DE:E2:E7:F6
X509v3 Authority Key Identifier:
keyid:14:20:F8:07:09:DD:D3:DF:C3:F5:11:56:55:03:CE:F4:44:4B:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FCD4Bwnd09_D9RFWVQPO9ERL7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/049DCD22AD6111EA8F1A8D63C4F9AE02/FCD4Bwnd09_D9RFWVQPO9ERL7cM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:02:92:32:3a:c8:94:03:e4:1a:07:27:04:52:f2:c8:86:7a:
32:a6:c1:c2:e8:3a:39:74:87:cd:ae:31:4f:34:0e:4f:e3:1a:
c3:ce:0c:33:43:c2:5d:3f:9e:9b:73:39:d4:9e:e5:c4:87:72:
3b:44:f3:22:7c:80:bc:ee:61:57:39:a5:ca:41:55:25:4e:1f:
70:41:55:7b:16:ab:a0:75:fc:96:14:5d:19:40:c0:75:1a:6a:
6c:7f:9d:ab:3d:79:2c:22:04:ef:73:35:d6:ed:25:57:ea:66:
ec:78:a5:89:84:24:17:b5:a8:3a:ce:9f:bc:6c:6a:02:78:1a:
b2:0b:9a:e1:ab:f9:c7:63:11:04:b6:08:bb:5c:91:b9:7b:05:
24:0b:7f:76:39:d0:e5:b5:e6:9f:be:8e:b1:16:4b:18:0e:27:
1e:69:20:56:ad:60:db:7b:d7:62:99:c8:8c:80:c1:13:2f:6d:
e1:c1:42:c8:ce:62:1a:ae:bf:b7:77:b8:12:b1:7e:dc:b5:0c:
3d:6f:fb:f5:ba:a9:a0:af:4e:3c:8d:7c:56:c0:b4:0f:dc:f8:
4f:0b:1e:d1:74:28:3f:cb:49:6c:84:90:81:a6:e4:b6:38:68:
90:5f:b2:3b:4f:cd:32:a7:e9:43:0d:62:1d:87:4d:02:3f:fd:
31:6e:b1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:11:45 2026 by rpki-client