
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
File: FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft (raw, json)
Hash identifier: bPto8ElSMhhthQFuJXd0PkRqJP4OtXFrURt7KBrBDW8=
Subject key identifier: BE:8A:6D:A5:78:26:34:16:69:5E:B4:EF:DF:98:53:3D:C1:92:B3:9F
Authority key identifier: 14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
Certificate issuer: /CN=A916E343/serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
Manifest number: 01F4
Signing time: Wed 23 Sep 2026 02:22:32 +0000
Manifest this update: Wed 23 Sep 2026 02:22:32 +0000
Manifest next update: Wed 30 Sep 2026 02:22:32 +0000
Files and hashes: 1: FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl (hash: cRymGtg8HOx5+98ymhFGffKvRPnXwKw0Www+9AnZ7UY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl
rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E343, serialNumber=14E55EC3428E3D2BA4DC71C159E5F6061F163C6D
Validity
Not Before: Sep 23 02:22:32 2026 GMT
Not After : Sep 30 02:22:32 2026 GMT
Subject: CN=6ab337e8-b453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:83:b8:b2:fa:c0:79:e9:48:4c:09:f4:25:
3a:6f:9d:5f:bb:e4:05:a6:84:4a:ea:1e:0c:09:5d:
25:3f:74:ca:6a:ef:20:66:69:51:ce:93:a7:90:53:
05:15:c8:5e:43:a1:ff:0d:ca:54:0f:21:63:06:4d:
ae:f9:66:4c:14:8d:64:d4:b1:39:4f:51:a0:db:8c:
39:ea:38:32:90:ba:04:a9:f9:e7:2d:84:96:e8:16:
85:4c:b1:f5:d1:4b:b1:4d:1b:78:58:77:0a:ac:cf:
26:c9:ae:ca:2c:77:bc:10:51:7c:c3:b9:4f:d3:22:
67:35:1f:94:84:ee:58:9d:32:e0:5b:58:ae:1c:da:
37:88:6e:6d:96:fa:e8:84:7b:2d:0a:bc:8b:19:68:
f9:3f:e0:c3:97:95:83:90:23:01:9e:ca:43:41:f7:
40:1d:d1:41:f3:cb:8d:24:97:fa:4d:38:27:aa:b3:
e3:f5:7f:a5:a2:7c:89:e2:06:c6:fc:84:1c:d6:89:
28:cb:34:f1:f5:bd:ea:91:2f:0b:b0:89:ef:be:3b:
a4:ab:1a:07:9e:66:0d:b4:7d:44:d3:41:77:1c:a7:
6f:d3:e6:00:87:e9:31:eb:c5:af:12:af:dc:31:43:
35:30:d9:62:5a:36:9f:87:04:08:6b:7d:ce:52:79:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8A:6D:A5:78:26:34:16:69:5E:B4:EF:DF:98:53:3D:C1:92:B3:9F
X509v3 Authority Key Identifier:
keyid:14:E5:5E:C3:42:8E:3D:2B:A4:DC:71:C1:59:E5:F6:06:1F:16:3C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FOVew0KOPSuk3HHBWeX2Bh8WPG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E343/3AE739AEB97E11EEB3C22955C4F9AE02/FOVew0KOPSuk3HHBWeX2Bh8WPG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:d1:d2:31:e5:7e:9e:12:19:d0:0c:2e:3d:36:ab:39:64:d8:
93:86:cc:00:c0:de:2b:50:d1:dc:54:80:b7:c3:b5:95:01:d6:
1c:c3:68:2b:98:cd:e6:bd:4b:a8:eb:3c:79:83:cf:96:e4:b3:
a8:9a:12:b3:c0:b4:22:56:c0:08:5d:5a:ea:6d:35:65:de:c8:
10:49:6e:92:bb:61:ed:46:bd:03:cc:c1:69:54:07:58:6c:96:
2a:ca:75:ed:f9:27:08:cc:1b:30:c4:a9:d9:f0:79:ee:81:7d:
e1:59:de:86:99:f2:75:70:64:ed:eb:23:4e:7e:a5:57:a9:0b:
02:a5:79:7f:64:49:78:b1:4f:00:f0:23:f8:a6:99:a7:75:23:
23:7d:00:c8:e0:c5:cb:d9:e6:e6:cc:3b:bd:52:3a:bd:51:13:
ea:b1:67:48:81:32:fc:bc:74:f1:6a:f0:21:85:cc:fd:e8:3d:
59:e5:0e:52:71:7d:c7:85:dd:c1:a4:8a:1b:12:9b:d5:0a:cf:
a9:97:78:85:33:5f:ef:e7:47:1f:6b:9b:83:6f:15:25:39:28:
a1:2a:53:85:99:1c:83:99:ae:51:6d:73:7a:f3:06:b2:74:5e:
4c:9f:09:79:b1:48:b4:24:fd:43:aa:5f:10:dc:58:2c:a7:72:
ef:b5:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:50:45 2026 by rpki-client