
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json)
Hash identifier: dUKB823uOMcrv0Xf2wWt2oCTYc2+T0lmkQgACmg4+bU=
Subject key identifier: A4:D3:96:9A:0D:A1:F6:90:71:A1:2A:69:B9:A6:87:D6:50:22:51:5B
Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Certificate serial: 0CB1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
Manifest number: 0C9F
Signing time: Wed 22 Jul 2026 18:50:58 +0000
Manifest this update: Wed 22 Jul 2026 18:50:57 +0000
Manifest next update: Wed 29 Jul 2026 18:50:57 +0000
Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: fKpe5b7jsp6Pnr1mH3i9sbWHq5NFAloGbgLOCibz0Yc=)
2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: aBLu12X/KjBQz6+vTYYYPJq2RB5e32VzOLCjoKt8rHA=)
3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: OyMpzW+KeT1/VlF8h4v55nU9WTVj14mDgJ/Hy/mEDTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410
Validity
Not Before: Jul 22 18:50:57 2026 GMT
Not After : Jul 29 18:50:57 2026 GMT
Subject: CN=6a611112-ee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:71:be:00:51:b2:d4:ad:1b:a1:dd:0c:69:36:
9c:20:e1:a3:9a:29:18:18:af:b0:a6:43:17:ee:f4:
09:76:00:e0:cb:6d:9b:af:25:6b:a6:c3:85:11:17:
b1:71:91:64:d2:96:51:c3:08:e6:20:8e:59:7f:e8:
29:77:d8:9d:b9:8f:94:04:78:aa:22:45:d0:6b:be:
9e:68:3d:83:9b:ae:77:41:b5:21:bc:9f:4b:82:cf:
da:2c:f5:f1:ee:b2:13:f0:d4:db:fe:86:48:82:20:
33:a6:fd:d1:08:17:f0:7f:3d:06:b3:0b:23:1d:fb:
4c:fa:18:e0:76:a4:38:2d:2b:a2:87:8b:6b:67:17:
bc:78:2b:7e:98:c8:16:cd:40:e9:a9:08:b3:55:13:
3e:8c:9e:a1:72:c1:38:21:0b:67:a0:2d:81:01:f2:
7c:80:14:c5:7d:64:e9:8b:8f:db:ab:37:f6:2f:0b:
3f:4f:f7:c8:48:f9:2f:2a:2e:85:9c:81:f6:09:a2:
11:2a:9f:66:b1:33:96:9a:6b:65:9c:73:cd:fa:1e:
46:37:8f:34:55:e5:42:e6:c3:70:0e:74:7a:11:9a:
7a:f8:dd:e9:98:43:2a:cc:dc:09:f1:99:e3:6e:3a:
fe:08:ea:fe:39:14:ae:46:d2:d8:e5:c3:da:8a:8f:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D3:96:9A:0D:A1:F6:90:71:A1:2A:69:B9:A6:87:D6:50:22:51:5B
X509v3 Authority Key Identifier:
keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b5:01:4f:b7:28:ac:70:56:47:b0:bd:0a:2b:60:34:23:cf:
61:86:a2:08:87:9a:9c:66:d0:11:e3:ed:70:24:56:a2:b8:aa:
3a:b1:fb:27:d0:12:81:cc:34:25:50:55:d6:fd:75:e4:12:d1:
3a:81:4f:8d:4f:4f:34:da:5d:7e:5a:27:0e:b2:36:f8:64:e3:
e8:2d:bc:e0:fd:39:f5:b1:f9:d6:a0:61:2b:97:69:f1:84:cf:
ed:63:63:11:5d:21:ae:c7:29:87:bd:df:21:7c:50:83:2e:ae:
bd:6e:3c:6b:02:69:55:ae:ae:00:59:73:4c:19:79:ef:a0:e5:
73:f9:1e:06:cb:89:95:de:2b:ff:03:f2:3c:0f:7b:51:6e:7b:
76:48:08:a1:eb:02:ef:7b:a9:5e:cf:41:21:b3:47:a3:f0:be:
e2:54:2a:09:45:2d:71:fe:c8:93:00:1f:69:0d:02:98:dd:58:
fa:d0:c6:cf:b4:3d:f9:86:fc:b4:66:50:57:40:b1:b8:79:05:
a3:34:e6:90:87:c5:6b:1f:2a:e2:3b:18:c1:d0:bb:5f:88:97:
d4:1e:16:83:66:8f:27:c3:cc:89:5c:9a:6a:ae:90:15:57:98:
67:ae:47:8e:d9:10:a3:fe:fe:3a:17:0d:cd:ee:b5:08:a8:e8:
d7:76:c6:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD
QTkwQTA0MTAwHhcNMjYwNzIyMTg1MDU3WhcNMjYwNzI5MTg1MDU3WjAYMRYwFAYD
VQQDEw02YTYxMTExMi1lZTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6HG+AFGy1K0bod0MaTacIOGjmikYGK+wpkMX7vQJdgDgy22bryVrpsOFERex
cZFk0pZRwwjmII5Zf+gpd9iduY+UBHiqIkXQa76eaD2Dm653QbUhvJ9Lgs/aLPXx
7rIT8NTb/oZIgiAzpv3RCBfwfz0GswsjHftM+hjgdqQ4LSuih4trZxe8eCt+mMgW
zUDpqQizVRM+jJ6hcsE4IQtnoC2BAfJ8gBTFfWTpi4/bqzf2Lws/T/fISPkvKi6F
nIH2CaIRKp9msTOWmmtlnHPN+h5GN480VeVC5sNwDnR6EZp6+N3pmEMqzNwJ8Znj
bjr+COr+ORSuRtLY5cPaio8ERwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTTlpoN
ofaQcaEqabmmh9ZQIlFbMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD
ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS
THVkWW5VbXpGbURLa0tCQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU7UBT7corHBWR7C9CitgNCPPYYaiCIeanGbQEePtcCRWoriqOrH7J9ASgcw0
JVBV1v115BLROoFPjU9PNNpdflonDrI2+GTj6C284P059bH51qBhK5dp8YTP7WNj
EV0hrscph73fIXxQgy6uvW48awJpVa6uAFlzTBl576Dlc/keBsuJld4r/wPyPA97
UW57dkgIoesC73upXs9BIbNHo/C+4lQqCUUtcf7IkwAfaQ0CmN1Y+tDGz7Q9+Yb8
tGZQV0CxuHkFozTmkIfFax8q4jsYwdC7X4iX1B4Wg2aPJ8PMiVyaaq6QFVeYZ65H
jtkQo/7+OhcNze61CKjo13bGYQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:16 2026 by rpki-client