
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json)
Hash identifier: lvH4mfUIubMdekaDouFUtRC2AlxlzntU2eausydJwF4=
Subject key identifier: 74:4D:EC:4E:F8:3A:66:66:B8:97:C2:B9:95:CC:EC:6D:99:ED:35:84
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial: 0FE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
Manifest number: 0FCA
Signing time: Thu 24 Sep 2026 17:26:59 +0000
Manifest this update: Thu 24 Sep 2026 17:26:59 +0000
Manifest next update: Thu 01 Oct 2026 17:26:59 +0000
Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: s8jQKPXSnuswYf8GB8vF1aH7OyFmKmdsYvfcJNbj6Cw=)
2: 64554290C9F611ED9853C583C4F9AE02.roa (hash: Jb42NeKSs3YwFgjroWCzgaWt1KOKTLqIAP8DvayOhdo=)
3: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: vsNlGQ11CWIdF534rGVVHSBQnNLB5S6nlxZqLQOrOlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 17:26:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4070 (0xfe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Validity
Not Before: Sep 24 17:26:59 2026 GMT
Not After : Oct 1 17:26:59 2026 GMT
Subject: CN=6ab55d63-15a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:68:83:0d:51:3d:dd:8d:1d:eb:be:9e:6d:
22:ad:1c:6b:7a:6d:32:b9:bc:ff:18:2d:ac:36:21:
16:7e:cf:e8:80:25:36:fe:89:f8:7c:76:f5:3e:d3:
c0:7b:d0:26:8d:21:7e:e8:84:62:33:76:f1:0f:fc:
38:d9:65:cb:1a:b6:63:b0:96:5b:e9:99:62:00:54:
55:8e:e4:b4:14:be:36:2e:b2:9a:c7:d6:60:c3:b2:
ec:c5:8f:cd:2b:74:21:cc:c9:1e:f2:c7:2b:1d:41:
60:00:b2:57:3f:ad:22:58:9f:87:5a:61:78:61:57:
41:1a:bd:23:8d:13:c5:b2:5b:c1:a1:33:23:9a:2f:
74:54:21:05:6f:fb:64:74:68:0a:1a:ae:cb:ba:81:
1d:b2:f3:cd:e4:9c:e1:41:a6:48:8b:64:5a:36:d9:
34:b4:ac:e5:28:31:2c:0c:43:b0:d3:c3:e4:a3:f5:
da:d9:52:00:c3:a6:fd:ae:f2:b1:da:56:fa:d9:72:
81:bb:f9:33:33:bb:67:50:29:1b:36:01:bc:f9:0a:
af:0d:8f:c6:92:88:fc:84:25:53:35:62:6b:2f:32:
4c:04:86:57:81:d5:fc:c2:28:13:d9:1f:59:13:fe:
68:0e:b4:8c:ef:eb:db:d1:07:ee:63:d7:d3:26:45:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4D:EC:4E:F8:3A:66:66:B8:97:C2:B9:95:CC:EC:6D:99:ED:35:84
X509v3 Authority Key Identifier:
keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6d:55:d7:00:07:93:b5:08:fb:58:79:a8:ee:87:c3:68:b9:
9c:48:23:b3:4c:2d:a9:56:21:1a:dd:66:b9:2c:6b:40:5c:8f:
4d:be:f4:ab:80:99:92:fc:b6:19:39:75:23:43:36:b5:01:8a:
40:45:58:03:93:27:83:77:1c:58:d2:b9:e5:d2:3f:f1:42:a1:
11:18:fd:db:95:20:36:6d:21:2d:90:ea:e3:11:f5:25:59:a4:
c9:c7:f0:4f:f3:7a:09:db:f5:84:11:fc:1d:5f:62:54:29:75:
f5:bb:76:af:ed:44:94:3a:20:c0:15:6a:fd:d1:db:17:86:57:
79:dc:13:09:35:21:49:0c:15:f2:e5:56:a2:b3:1f:5b:e9:ed:
bc:50:e6:bd:8c:38:77:70:1f:58:87:eb:dc:cf:c0:45:65:ce:
e5:8a:66:5d:24:20:94:19:ba:09:cc:1b:44:a2:bb:be:ae:7e:
38:83:bc:31:7c:69:4b:a9:35:85:5d:f8:4a:eb:d8:57:38:73:
7e:12:04:ed:c3:36:0a:f6:82:c5:12:1a:0a:2d:f3:2c:e5:d0:
9b:09:20:6d:51:0d:75:e9:16:4f:07:2a:a2:40:4f:f4:6a:3f:
6d:01:27:86:c3:72:01:0d:1b:5e:fe:67:1f:15:ee:9d:a6:85:
5e:ba:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:43 2026 by rpki-client