
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier: UfXAAy3hks1o+6hmvc6HHH4AgR1teDLyqPECfYUq5Jk=
Subject key identifier: 7C:4C:28:65:28:41:7D:2C:9B:E0:58:B5:EE:98:56:75:3B:EA:0B:5A
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial: 353A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number: 3A26
Signing time: Tue 12 May 2026 14:37:36 +0000
Manifest this update: Tue 12 May 2026 14:37:36 +0000
Manifest next update: Tue 19 May 2026 14:37:36 +0000
Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: L5rU+PnVXjqPM2+oUqpkhJv1G7gGktZrUbKOVTun7cQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:37:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13626 (0x353a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Validity
Not Before: May 12 14:37:36 2026 GMT
Not After : May 19 14:37:36 2026 GMT
Subject: CN=6a033b30-2cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:85:c3:46:4c:0c:b4:ed:8d:f6:0e:c9:ca:
1a:a6:3a:b5:cb:e0:a9:25:0a:87:ce:78:d6:23:ae:
79:f5:2e:84:33:df:68:d1:6e:21:74:68:fc:bf:6a:
ff:f8:2a:1e:68:52:b4:b3:6b:48:aa:b9:e6:34:de:
0c:71:bb:6e:30:ab:d7:bc:5d:cc:0f:28:73:33:a7:
68:69:9d:71:cf:12:92:6f:65:56:48:f0:ad:77:82:
4e:12:45:f1:e4:15:37:2b:76:d0:3e:3f:bb:4d:3b:
1b:d1:a4:52:57:60:85:78:3e:56:a8:d8:d5:7c:af:
25:00:1b:33:2a:ab:84:87:49:d3:27:71:b6:d0:c9:
1b:8d:33:a7:8f:a4:03:17:d7:96:24:e4:dd:af:d6:
19:a9:8a:fa:55:c4:21:56:c9:4e:a2:0a:7a:ef:ea:
c1:be:ff:a8:08:29:13:dc:33:30:aa:b9:2b:c7:5b:
cc:ee:03:15:ef:e4:18:c4:ac:2f:6a:08:3d:20:1e:
13:e5:ab:fd:da:dc:f2:fa:c8:df:25:b2:9a:1a:cb:
23:f7:dd:1b:77:a8:f4:cf:49:9a:e2:1c:3b:94:3f:
9d:76:d7:2f:11:d0:82:3f:86:0b:ff:e8:40:37:8c:
8e:fc:18:04:3d:be:f7:4b:5b:6d:0d:1d:d8:cf:49:
8a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:28:65:28:41:7D:2C:9B:E0:58:B5:EE:98:56:75:3B:EA:0B:5A
X509v3 Authority Key Identifier:
keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:2f:05:4e:f7:36:70:df:ff:53:c9:1b:98:f2:e6:dd:0a:
2f:81:38:e1:07:6e:fb:d6:0a:2f:da:94:d5:3e:2e:03:7d:3d:
35:d3:4a:ed:c7:0e:b6:a3:34:19:1f:29:dc:c2:bb:26:c6:c7:
86:e3:a6:48:b7:e3:c3:33:ff:4c:41:17:b6:ae:23:f2:2c:49:
ed:da:f9:7a:a7:10:b9:59:54:b3:fd:ab:48:dd:0c:7b:f2:f6:
c6:0b:55:ef:ba:99:a1:c9:0e:1b:56:d4:ce:7e:3f:69:a4:6a:
60:83:82:39:06:3b:66:55:9e:78:8d:5f:6b:e4:1b:ac:d1:75:
15:e1:8b:be:91:14:59:ca:45:34:71:8f:a6:18:fa:b9:44:2f:
72:32:d2:74:d1:00:60:53:1f:0d:d9:4c:81:f4:95:08:60:45:
65:fc:e1:53:ef:f0:43:e2:48:b7:4d:02:90:78:31:8c:83:a1:
d4:6c:a9:4c:b5:4d:30:ae:11:01:e0:f5:88:ff:3c:1b:ac:9b:
be:f2:3b:f5:ab:4e:e5:fd:bb:45:5e:22:f9:a2:fc:c2:4c:5c:
7f:b6:6a:88:1c:da:74:55:14:44:b9:91:7a:9d:2b:a3:4e:5f:
de:c6:ad:99:dd:12:23:30:bd:5a:09:ad:7e:4d:72:48:68:e0:
41:76:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:24 2026 by rpki-client