
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json)
Hash identifier: PuKfuP/2R2cvwwYjMbGGnxKMZmdUa/YfCQxmVGML29Y=
Subject key identifier: B7:8C:C6:70:D1:11:44:07:D6:4D:3C:D6:4B:6C:20:E4:43:A4:FC:8B
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial: 034E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
Manifest number: 0347
Signing time: Wed 23 Sep 2026 00:35:50 +0000
Manifest this update: Wed 23 Sep 2026 00:35:50 +0000
Manifest next update: Wed 30 Sep 2026 00:35:50 +0000
Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: Dp5cWR/wcygrgfCJU+JaOnNLruT9U8WoHNftG27kUr4=)
2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: 5pvNOF23o2dVE23cjfW7jTVGCNwz3VBA/OSl53p3le0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Validity
Not Before: Sep 23 00:35:50 2026 GMT
Not After : Sep 30 00:35:50 2026 GMT
Subject: CN=6ab31ee6-e19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:cb:1a:23:9b:26:bb:2b:d2:aa:ae:e6:f9:
9a:67:6d:db:ea:0c:bb:b5:95:b0:81:34:a8:2d:e1:
35:26:cc:c8:6f:8d:c6:cf:09:df:aa:44:ec:0b:74:
8e:5d:d7:91:91:76:9f:8c:4d:51:94:bb:4e:bb:4c:
a3:77:f1:88:88:79:25:76:5f:b8:4f:b8:bc:65:a5:
9a:30:9b:fe:58:a7:d8:c2:45:12:4b:50:ae:dd:24:
8c:2f:83:4f:f3:bc:21:1d:27:a9:4f:b0:e3:aa:d8:
47:e3:d0:c2:c8:a2:1a:c6:d0:da:39:39:a6:5d:3e:
ea:9d:7e:c2:bc:d7:e8:37:73:6e:0f:85:fc:b7:98:
ab:09:50:10:7b:67:a5:fe:95:00:cd:73:c1:46:67:
ef:1e:1c:de:e0:33:89:2a:d3:3b:b4:64:84:7c:6b:
8f:10:69:bb:3f:bc:84:12:2c:23:a5:52:d4:0c:23:
b2:13:9b:9b:66:08:65:b1:65:7c:a2:47:62:1a:21:
71:76:f8:4c:07:0c:8c:6e:7d:ee:a0:7a:a3:b8:f0:
bc:13:14:25:5f:04:3b:83:ff:9b:9c:40:a6:17:38:
00:79:fb:f4:30:4d:27:9e:39:f0:60:fa:e5:94:cd:
19:6b:ee:1d:de:5b:72:19:11:8c:6e:51:48:63:f7:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:C6:70:D1:11:44:07:D6:4D:3C:D6:4B:6C:20:E4:43:A4:FC:8B
X509v3 Authority Key Identifier:
keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:24:93:fa:89:31:60:4a:35:6b:64:cc:ed:c0:0a:54:4a:
d2:67:99:c5:05:eb:22:bf:c1:56:7c:4f:a3:db:a3:44:10:8a:
36:c2:c4:7d:83:63:d7:89:04:d7:d9:93:c0:36:71:fc:7c:55:
9d:52:5e:27:fd:33:24:4f:4a:28:9d:ab:04:fb:26:c3:11:c8:
1f:6d:04:e0:db:f0:fe:c0:d0:9a:bb:3e:39:ed:36:11:39:2b:
e5:bc:11:4d:3a:7f:0a:95:b3:15:36:d4:04:ba:f9:1c:74:f9:
f0:2e:aa:21:32:eb:b2:68:dd:65:63:7b:be:ab:2a:f9:ff:4c:
bc:98:ed:d0:76:eb:c4:c7:78:85:12:6e:ea:c1:61:93:5c:44:
0b:cd:06:a8:89:78:9f:dd:19:93:55:98:da:a0:04:ac:70:b3:
c6:ab:2d:8b:46:d9:8b:ba:9b:81:5b:0f:9b:ca:87:c5:f9:e2:
db:c1:37:7b:92:a8:bf:6b:15:8a:41:55:fc:b9:d0:21:ac:db:
13:9f:76:e3:d6:d1:dc:e1:51:95:73:fd:a7:56:12:6d:f1:31:
15:52:3d:fd:25:53:64:89:a0:25:10:f2:43:f6:b7:ff:92:a2:
f4:e2:92:73:d8:fe:d7:5b:72:0f:e6:b2:cb:79:27:8e:81:3c:
bb:02:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:08:00 2026 by rpki-client