
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json)
Hash identifier: glhLnLkvDqU0VO/Ay7Nn+EVAZV40cEGlWSDnuqSaMjQ=
Subject key identifier: 68:F6:42:1F:D6:25:82:9D:1C:A6:03:3B:8B:B2:2D:AC:E2:EE:30:E4
Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Certificate serial: 088E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
Manifest number: 0886
Signing time: Sat 26 Sep 2026 20:51:46 +0000
Manifest this update: Sat 26 Sep 2026 20:51:46 +0000
Manifest next update: Sat 03 Oct 2026 20:51:46 +0000
Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: aT5t4nV0fjx75NIKjTobsamcpWOFL5FG3IU71jWWNgo=)
2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: HLXn0y5saMGZHdBI1Bh2ImWIk/Xfj9Kl57imAxrALWw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8
Validity
Not Before: Sep 26 20:51:46 2026 GMT
Not After : Oct 3 20:51:46 2026 GMT
Subject: CN=6ab83062-2645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:55:58:67:d2:dc:ef:96:27:88:b0:ca:f3:
15:13:37:0c:fe:2c:f8:32:8c:2e:03:85:22:48:30:
a3:06:80:1e:db:c4:7a:84:71:20:18:71:32:cf:51:
52:f1:25:27:e9:d6:d7:cf:41:6a:18:12:73:92:53:
81:d5:fd:c4:a9:b7:d8:96:67:69:97:3a:7a:96:e2:
a0:8f:d3:00:75:52:1f:20:f6:18:12:20:d5:b4:bb:
54:c9:c0:fd:71:e7:05:c0:a0:e1:60:60:cb:39:58:
f1:59:cf:07:4d:ee:5f:c1:9b:0f:8f:43:e6:c2:62:
5c:b2:28:11:15:3a:23:4d:a8:9c:2a:3d:f9:10:73:
06:72:45:30:2e:af:00:25:88:23:5a:d7:e2:59:c5:
46:1e:89:1e:75:0a:25:f4:00:6b:02:f2:5e:d9:cc:
5a:22:48:3c:16:89:87:f3:f4:f7:af:2c:2b:28:0c:
17:00:e0:b0:20:f6:02:3e:df:48:66:d4:f3:17:8d:
8d:8a:72:e9:36:d0:72:98:0a:ba:27:d6:b7:4f:45:
81:04:79:0e:f5:6c:8b:09:bc:77:63:54:5e:78:96:
a3:18:c4:e6:3f:23:10:f6:09:1e:9d:2a:00:e0:c7:
26:44:0d:2d:97:72:04:29:7c:8f:bc:ee:5a:e8:41:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F6:42:1F:D6:25:82:9D:1C:A6:03:3B:8B:B2:2D:AC:E2:EE:30:E4
X509v3 Authority Key Identifier:
keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:1c:54:87:57:5a:9b:17:8c:a9:0f:13:35:c5:dd:eb:a2:5c:
1b:d8:1b:92:09:21:a8:0c:44:aa:92:da:7d:f7:e8:d2:c8:e6:
57:fd:ce:d1:48:19:89:dd:8c:fe:ad:cb:f7:e1:e8:de:1a:b7:
fe:cb:6a:16:2b:b0:a4:3e:28:40:e4:4d:2d:39:c9:6b:82:0b:
7b:68:e5:0c:f9:8c:4a:e3:48:82:51:55:e7:7b:5e:22:d4:87:
87:e0:59:1b:6d:f6:61:88:6f:15:d3:3f:a1:a6:52:b3:5c:1a:
4c:1b:80:8b:77:41:d9:72:49:7c:08:b2:5c:ef:e2:bb:83:05:
33:ec:5e:dc:90:e3:65:71:d8:b4:1c:06:bc:76:ed:d8:13:98:
15:17:16:d6:2d:a1:e3:fd:d1:fb:13:c5:18:26:5f:78:c0:d7:
03:a0:c0:60:a9:26:31:dd:84:bd:f2:9c:40:2f:92:60:8c:52:
32:06:96:e5:01:49:be:78:fe:64:7c:30:f3:e2:ab:ab:94:c7:
de:c7:ef:9e:1e:6c:63:2e:b0:e9:51:58:ec:95:8c:50:66:a4:
7c:08:54:ce:df:1a:95:ef:00:52:b8:90:39:f0:f6:0d:b2:ef:
ee:45:b3:ef:8b:4d:b9:01:08:b3:e6:4c:18:69:62:8d:3f:d3:
67:71:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:55:58 2026 by rpki-client