
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft
File: Fkl8IIYtsywfe60cEQzGsoBSRXU.mft (raw, json)
Hash identifier: QSilCbNenLM0vi0o5afo1ta1h3kXvm42vYOU88Xi4vo=
Subject key identifier: E8:68:CA:CA:CD:E3:49:B7:40:AF:79:0B:94:9F:A1:94:69:9A:9E:77
Authority key identifier: 16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75
Certificate issuer: /CN=A91BA3E7/serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft
Manifest number: 21
Signing time: Wed 23 Sep 2026 08:37:12 +0000
Manifest this update: Wed 23 Sep 2026 08:37:11 +0000
Manifest next update: Wed 30 Sep 2026 08:37:11 +0000
Files and hashes: 1: Fkl8IIYtsywfe60cEQzGsoBSRXU.crl (hash: UJDfoPibetxm/qWJuSGJ7Vz30MEERaIjw4b79GVcpjE=)
2: 2C58A8288A3C11F18F5718FE3111F970.roa (hash: SONSYy4tIc7OLfGgQbiSXlMj9cIg5ZBgBiRgNLwC7Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl
rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA3E7, serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575
Validity
Not Before: Sep 23 08:37:11 2026 GMT
Not After : Sep 30 08:37:11 2026 GMT
Subject: CN=6ab38fb8-f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:b8:66:f2:bb:c8:1a:ad:ec:a3:26:fc:e5:
fe:0d:c6:64:ec:94:71:f3:1a:45:5f:43:eb:16:56:
72:30:d3:bf:41:62:46:33:d9:13:ba:ab:88:e7:08:
67:7e:77:d8:6e:b0:17:3a:0f:fd:29:bd:ee:b9:1a:
b1:35:ae:47:2c:44:59:b3:13:cc:5a:2f:83:43:78:
8d:44:66:37:1c:cb:6a:9f:64:32:b4:bd:7e:5a:e0:
b8:05:55:49:09:7d:4e:46:a1:10:f0:6e:c8:17:44:
75:bd:07:b0:2e:bf:f0:b6:14:38:f0:3d:3f:5c:68:
fd:77:1a:87:78:49:3a:93:04:b3:ec:3c:43:10:42:
67:65:18:e6:bc:15:f2:21:19:4a:7b:46:87:f6:fd:
fc:b6:31:ce:a2:f1:91:4b:b8:08:b3:9b:e6:5c:35:
4c:7f:90:6b:12:f7:43:e8:ad:ef:d5:c9:3c:90:72:
f2:0d:78:20:37:57:ab:a9:73:2d:04:a2:49:5c:d1:
c2:62:78:a8:b8:b5:fd:d9:c1:2f:e5:9d:1c:8b:a1:
8d:1f:00:8a:65:2c:58:ad:8c:2c:89:36:f1:0f:23:
ed:61:44:9c:c8:21:70:67:2b:0b:b0:ca:b6:9e:48:
62:91:8a:89:7c:8c:bd:1a:45:43:6e:36:42:97:fe:
84:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:CA:CA:CD:E3:49:B7:40:AF:79:0B:94:9F:A1:94:69:9A:9E:77
X509v3 Authority Key Identifier:
keyid:16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:64:0f:ef:12:f5:0f:fc:24:bb:1b:06:ae:65:e9:f6:ec:cd:
ae:f9:f7:d1:7f:a5:91:28:83:ce:cc:2c:84:39:e0:ac:5a:a1:
74:79:ae:1d:28:7e:34:80:bf:6d:bc:14:eb:34:fb:66:2f:ac:
2d:bb:6d:59:48:55:53:19:e5:b0:d5:ba:3a:47:62:c1:03:b8:
79:b5:cb:73:54:26:05:93:7c:89:d2:0f:80:8d:d5:9e:8b:c9:
b6:6f:ca:1d:9b:1b:e6:b2:36:f3:70:a5:4d:14:8b:2d:08:cd:
fe:2f:3c:8e:39:1f:c0:8a:52:63:d5:fe:04:f8:68:73:d1:f9:
df:16:94:f0:af:84:6a:c2:79:e6:bc:5b:4d:d0:5a:84:e4:04:
5b:aa:e1:3a:b7:62:4b:e3:58:5c:88:08:56:3c:9e:4b:e7:3c:
6d:9e:0d:3f:1f:14:65:27:ae:c7:2f:9b:a4:c5:57:d9:59:5d:
40:79:90:c2:69:b9:7c:b0:e6:df:25:7c:48:9d:1f:b5:27:a2:
35:46:e3:62:68:91:3e:98:e0:24:3a:ec:c8:b6:09:3c:ad:bb:
26:c1:6e:c7:fa:c2:0e:f1:9e:a9:be:ee:35:f8:b3:bd:88:bd:
9e:64:9e:8a:bc:06:7e:c6:80:1c:42:21:e7:80:8d:55:27:f0:
cd:ff:14:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:47:33 2026 by rpki-client