
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier: RDuJARNwLLeUH2wmqzqTtXzBHkH6rXs2do+Y9g/CLrI=
Subject key identifier: BA:97:02:6D:28:5E:38:33:7B:4D:29:3D:CC:E4:B8:C9:94:2D:F9:9D
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number: 0258
Signing time: Mon 11 May 2026 02:17:44 +0000
Manifest this update: Mon 11 May 2026 02:17:43 +0000
Manifest next update: Mon 18 May 2026 02:17:43 +0000
Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: yno/ZbOfMXDnjJrdVDw33kJAFhjCnQPghE/dLrCrE8I=)
2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: 6SZegSN1bEm8IpeY56I3OBOVi6qp9uRdOosU1uc4tzc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: May 11 02:17:43 2026 GMT
Not After : May 18 02:17:43 2026 GMT
Subject: CN=6a013c48-96b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:3e:52:6d:af:3e:15:e8:c3:a8:7f:c4:56:
73:64:38:15:c1:7c:21:2a:85:ce:27:65:b6:9b:0e:
4a:25:d8:68:d9:81:3c:05:09:6a:45:4e:51:62:f3:
78:b4:f3:e0:3a:17:99:f1:07:67:8a:16:f9:58:40:
81:d9:8d:82:79:ef:ef:b3:09:7e:27:da:15:80:c9:
9f:3c:1e:d7:0d:ba:10:98:3c:7e:30:3d:36:6c:ed:
9d:b8:9d:ae:45:a5:40:a9:6f:1f:be:23:ff:05:7f:
80:d5:6c:20:1d:ac:42:e2:28:52:4d:6f:a7:dd:b1:
e2:56:87:2f:dd:38:78:6c:9c:2e:af:f4:5d:53:68:
47:61:e4:17:5d:7f:88:45:04:95:b4:3b:60:c3:22:
d0:9b:54:97:ee:ac:f1:75:b5:e0:c0:df:41:ac:a8:
98:78:12:6b:c7:25:7b:20:f0:9d:cb:b6:2e:ed:04:
ab:2a:ed:f7:fa:d7:0b:ed:46:43:c3:74:a6:97:cc:
27:f4:cc:c5:80:7a:17:11:09:b7:e0:44:68:3b:48:
a7:f0:e4:30:48:66:ec:c4:b5:68:96:85:36:03:6b:
91:06:98:0c:a8:24:a4:6c:6f:90:90:66:94:8b:9c:
9c:c8:80:a0:e0:1f:d7:f6:68:1e:37:23:0d:f6:ec:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:02:6D:28:5E:38:33:7B:4D:29:3D:CC:E4:B8:C9:94:2D:F9:9D
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:db:de:c4:9f:a4:0f:f2:aa:6f:5a:28:73:55:9f:4c:5c:46:
11:23:87:bb:af:9f:f1:e3:77:21:3c:c1:0f:53:2e:3e:64:95:
76:9d:91:1c:09:47:79:b3:04:45:57:4b:20:5d:e3:93:81:e6:
66:a0:0b:41:2c:b6:c0:af:b6:bb:64:6e:70:23:db:15:d7:9d:
70:8a:c5:ec:cd:d7:19:17:9b:ef:5e:41:d0:76:6d:15:36:8c:
a0:53:73:e4:50:0b:8c:ce:62:d7:45:88:1a:eb:7e:88:d3:e9:
60:15:e1:72:73:9f:2d:36:6d:76:4f:b7:18:ed:97:1f:a8:0e:
79:36:68:1e:2f:23:9e:eb:57:9d:91:e6:99:78:6f:0a:c3:e9:
58:95:c3:21:f4:bf:a9:1d:2a:74:90:b9:a6:1c:0d:b4:10:35:
1f:67:9c:2b:c8:cf:71:ae:35:77:57:85:f9:fc:3b:99:b2:3c:
40:c2:ca:72:89:69:2b:b4:6d:69:e8:0d:07:fa:a9:10:5e:3e:
9b:d5:74:b1:66:53:aa:a0:2d:0d:8c:98:60:a6:ba:6e:ee:d7:
ad:b5:a9:3e:c1:28:08:cc:e6:dd:42:26:2c:af:7d:6c:8a:12:
a3:d0:40:48:7a:24:ad:6b:54:c3:02:a2:95:74:e5:94:4b:7d:
f9:ed:7c:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI5MkQxMTAvBgNVBAUTKDdERDg1RUM0Mzk3ODZGRDQyRTBCRjdCNzIxMzc3NjVG
MDVEMEU5RkEwHhcNMjYwNTExMDIxNzQzWhcNMjYwNTE4MDIxNzQzWjAYMRYwFAYD
VQQDEw02YTAxM2M0OC05NmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQE+Um2vPhXow6h/xFZzZDgVwXwhKoXOJ2W2mw5KJdho2YE8BQlqRU5RYvN4
tPPgOheZ8Qdnihb5WECB2Y2Cee/vswl+J9oVgMmfPB7XDboQmDx+MD02bO2duJ2u
RaVAqW8fviP/BX+A1WwgHaxC4ihSTW+n3bHiVocv3Th4bJwur/RdU2hHYeQXXX+I
RQSVtDtgwyLQm1SX7qzxdbXgwN9BrKiYeBJrxyV7IPCdy7Yu7QSrKu33+tcL7UZD
w3Sml8wn9MzFgHoXEQm34ERoO0in8OQwSGbsxLVoloU2A2uRBpgMqCSkbG+QkGaU
i5ycyICg4B/X9mgeNyMN9ux/GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqXAm0o
Xjgze00pPczkuMmULfmdMB8GA1UdIwQYMBaAFH3YXsQ5eG/ULgv3tyE3dl8F0On6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjkyRC82QkUyQ0FEMEJE
MzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5UXVDX2UzSVRkMlh3WFE2
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZkaGV4RGw0YjlRdUNfZTNJVGQyWHdYUTZmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjkyRC82QkUyQ0FEMEJEMzIxMUVEODRBODI4MDlDNEY5QUUwMi9mZGhleERsNGI5
UXVDX2UzSVRkMlh3WFE2Zm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp9vexJ+kD/Kqb1ooc1WfTFxGESOHu6+f8eN3ITzBD1MuPmSVdp2RHAlHebME
RVdLIF3jk4HmZqALQSy2wK+2u2RucCPbFdedcIrF7M3XGReb715B0HZtFTaMoFNz
5FALjM5i10WIGut+iNPpYBXhcnOfLTZtdk+3GO2XH6gOeTZoHi8jnutXnZHmmXhv
CsPpWJXDIfS/qR0qdJC5phwNtBA1H2ecK8jPca41d1eF+fw7mbI8QMLKcolpK7Rt
aegNB/qpEF4+m9V0sWZTqqAtDYyYYKa6bu7XrbWpPsEoCMzm3UImLK99bIoSo9BA
SHokrWtUwwKilXTllEt9+e18vg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:09:24 2026 by rpki-client