
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier: gTw428S/b8osU6nkoSKwswDJbw9mb7agMOPMH5ZR7MY=
Subject key identifier: E6:C9:A1:22:94:78:9F:C5:D9:50:1F:FF:99:CE:06:C3:4C:7F:4C:22
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: 02A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number: 029C
Signing time: Wed 23 Sep 2026 01:30:53 +0000
Manifest this update: Wed 23 Sep 2026 01:30:52 +0000
Manifest next update: Wed 30 Sep 2026 01:30:52 +0000
Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: jvndecFO+jR3YKRLXHFcwMP/9HZCAN4rJltlMMd1OwE=)
2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: 6SZegSN1bEm8IpeY56I3OBOVi6qp9uRdOosU1uc4tzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: Sep 23 01:30:52 2026 GMT
Not After : Sep 30 01:30:52 2026 GMT
Subject: CN=6ab32bcd-cc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:c4:46:d8:0c:c5:8c:5a:00:63:60:fd:83:
f6:d9:6c:53:13:bc:1b:ed:74:2a:bf:dc:99:81:3d:
af:a4:cb:df:67:c9:1b:d2:45:87:02:15:37:5a:41:
32:ee:f2:00:48:70:3c:05:91:94:b3:b1:6e:3c:0c:
ac:4c:0c:21:93:f4:ea:5d:ce:75:8d:f3:fd:43:1e:
24:12:ac:cf:05:11:5f:f9:bd:91:e2:10:80:7a:8a:
87:8f:5e:f4:c1:e7:e5:ac:e1:b8:fd:a9:38:ae:9d:
88:11:71:a9:2a:94:46:59:ca:8f:d0:ae:14:1d:03:
ca:b4:5b:84:3c:05:df:68:7c:6f:7d:91:88:4c:0c:
8c:b3:9f:44:91:55:ca:ee:8a:d9:61:6d:ce:bc:a3:
26:18:32:29:42:88:6a:0f:2e:5d:48:b8:93:6f:57:
07:aa:7e:d9:54:7b:aa:fd:e9:01:63:d8:54:3f:b5:
da:56:74:02:a6:1e:d5:a1:17:4d:7b:a7:71:dc:82:
b0:13:2a:06:1c:5b:a5:79:85:43:7a:41:c8:5e:20:
ed:d6:50:04:0a:61:37:07:b2:04:60:48:09:1d:3c:
4a:0e:f9:85:19:06:2e:56:cb:61:70:4c:90:dc:9d:
cf:4f:ab:9f:0b:6f:c2:5d:14:eb:64:23:af:c6:fe:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:A1:22:94:78:9F:C5:D9:50:1F:FF:99:CE:06:C3:4C:7F:4C:22
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:ea:be:40:f2:26:2e:8e:0e:d4:6d:2f:6d:91:6c:4a:f7:
dc:cf:38:ce:75:0e:ce:e3:e7:64:0e:d5:76:dc:62:e8:e5:3c:
fc:6a:01:bd:af:33:e9:72:cf:46:58:c2:0b:6a:22:08:71:38:
af:78:7f:97:4a:9f:49:d1:4b:1b:e7:7c:de:ed:99:fa:23:bc:
c1:fc:8b:92:f4:89:ab:a5:9c:e0:7c:13:db:dc:d2:99:1d:c4:
c9:fc:42:b4:f3:ac:33:65:c6:d7:19:58:78:ce:50:36:33:55:
53:ed:a3:1d:55:75:eb:7c:62:03:3a:e3:3a:22:13:73:c6:85:
6c:c6:de:97:39:f8:ae:ab:54:1b:1f:25:97:26:e6:1c:54:14:
d9:85:40:e7:04:d3:6c:fe:4e:28:30:1d:3e:c2:9f:22:9f:c6:
ae:18:f9:1a:c4:0b:81:10:22:7a:4a:7e:cf:e9:38:2d:67:3b:
50:12:54:92:1c:67:12:93:c6:26:47:56:f6:92:88:b5:24:2c:
ea:dd:68:20:7b:76:34:a4:21:5d:1c:f8:c4:b6:9f:59:e5:94:
0f:88:42:d5:07:85:24:36:ac:a1:fb:51:50:54:90:43:05:87:
dd:b2:53:71:e5:eb:21:ac:f5:50:8d:55:bc:e3:de:b9:13:be:
8f:11:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:53:51 2026 by rpki-client