
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
File: FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json)
Hash identifier: TngIKC/z8ElY0fF/iZN6e89QPawbngG6W0zAdYUqFZs=
Subject key identifier: 36:F5:F6:45:ED:27:2F:D7:3B:41:09:34:BA:3A:51:AA:B7:90:E7:83
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
Manifest number: 04D8
Signing time: Tue 22 Sep 2026 23:26:47 +0000
Manifest this update: Tue 22 Sep 2026 23:26:47 +0000
Manifest next update: Tue 29 Sep 2026 23:26:47 +0000
Files and hashes: 1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: l1BXVD5pYurFg6/KXwaFEZuj9WWGPSfzB6OWx5UPVD8=)
2: FF9D74D8735F11F093707251C4F9AE02.roa (hash: giiA+gbjaObpoGPhZNDd/Pz8GB9dBt3ThgFxVbT5y50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Validity
Not Before: Sep 22 23:26:47 2026 GMT
Not After : Sep 29 23:26:47 2026 GMT
Subject: CN=6ab30eb7-8cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:e7:dd:4a:7b:9f:91:83:89:e5:b7:d9:36:
2b:ac:ce:11:27:86:1e:0c:45:b5:c4:ac:02:52:c9:
c5:af:3e:75:63:9a:9b:7b:84:97:fa:6c:69:c3:b0:
aa:cc:8c:73:68:1d:f4:a1:a8:85:f9:aa:51:ea:ef:
fb:be:05:36:37:00:ff:72:b5:46:c3:2a:0a:6c:cb:
82:f0:56:ad:d9:b1:9c:81:fb:41:55:52:db:c7:35:
c7:e1:90:a7:2d:94:20:8f:5f:ef:b1:cd:57:db:23:
0d:a2:76:c6:87:76:81:0e:e2:73:9b:7c:b4:7c:d8:
53:7f:37:49:f3:e9:dc:69:18:89:4c:c2:bd:6e:ab:
81:21:6f:79:29:b9:2d:2c:fa:45:50:a9:d4:60:5d:
b9:34:49:14:c1:02:77:6d:4b:1b:19:90:6f:94:06:
1d:53:b6:0e:00:ef:74:62:4e:9b:c0:d0:69:49:a8:
c1:56:47:cb:92:8e:40:f6:a0:96:11:74:12:de:7f:
0d:c4:f0:7a:d5:d7:ba:87:b9:0d:da:55:b2:e0:bf:
42:dc:b6:d7:17:da:8f:d7:77:4b:2d:c0:73:38:cf:
38:a2:e8:30:b7:b1:8f:b0:89:a6:58:21:fb:5d:1b:
68:cd:1a:e1:e6:0a:c2:46:80:3b:11:46:25:6e:50:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:F6:45:ED:27:2F:D7:3B:41:09:34:BA:3A:51:AA:B7:90:E7:83
X509v3 Authority Key Identifier:
keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:bf:51:20:de:1f:77:18:f1:75:be:9c:2f:4b:32:f4:1e:
7b:18:9e:79:b8:5a:ac:78:cd:fa:7c:67:68:45:3f:e4:ba:57:
b2:44:89:0e:7b:a2:50:a5:4a:7e:10:5a:cd:27:3f:1b:d9:72:
b9:07:7a:c3:c6:26:e1:b7:97:83:cd:7d:a3:60:3b:2d:6c:6a:
a6:49:2b:1b:48:9f:2b:27:28:2b:82:e6:88:c6:45:b9:68:91:
7d:e9:ff:b4:e1:5d:9e:02:b6:fe:10:1c:8b:94:9e:8f:96:6e:
a1:07:17:46:c0:30:73:67:5f:22:43:7f:6b:fe:da:44:ee:f8:
8f:bc:02:e9:16:3f:cf:8e:62:0a:48:e8:7e:40:1a:34:c0:dc:
7f:af:2b:a0:34:bf:57:fc:01:2e:3d:2c:c9:8d:60:95:7f:67:
55:23:62:2d:7d:9c:cc:37:74:92:8e:7a:9a:9d:e2:ae:d4:a8:
8f:23:ca:7d:0f:ac:84:87:ef:6c:ef:80:b9:16:dd:5c:46:bc:
d0:40:a0:b1:ff:5d:d6:eb:79:50:b0:80:c4:9c:ae:0a:8c:17:
f0:b0:39:8d:5b:23:41:6e:cc:e4:d6:17:34:48:da:d0:c6:3b:
55:d9:a2:85:23:22:db:17:ff:59:52:fc:df:34:42:60:b9:2f:
10:cc:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:54:06 2026 by rpki-client