
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier: tR83jDEi/fJjy+2ubCm5dZzqJP8Y/PweK5kQTCvkaVk=
Subject key identifier: F2:F9:74:0B:A2:3F:18:4D:FA:99:60:3E:25:FF:6E:7B:13:DF:E5:95
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial: 3583
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number: 357E
Signing time: Tue 22 Sep 2026 15:03:38 +0000
Manifest this update: Tue 22 Sep 2026 15:03:37 +0000
Manifest next update: Tue 29 Sep 2026 15:03:37 +0000
Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: F5GLLAIRXPHiH35Wc47c35rjQ/amF5CgMqtVhZ6T5U8=)
2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: Md4TX499kG6Z3N25ExlcNJXGAzV59nM+xoDsohYAAQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Validity
Not Before: Sep 22 15:03:37 2026 GMT
Not After : Sep 29 15:03:37 2026 GMT
Subject: CN=6ab298ca-85d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:f2:1d:59:26:83:e0:35:cf:f8:0e:f6:2d:
d8:d8:2a:c2:83:61:ae:0c:1d:5a:27:35:5b:42:7b:
b2:c7:49:8d:0e:63:db:29:cc:83:4e:09:aa:59:62:
d7:92:a2:41:c4:5b:aa:de:7a:01:0c:f2:92:23:d1:
97:b1:6f:67:9b:17:16:4a:fb:75:dc:e6:d0:32:82:
30:18:42:2b:aa:6b:19:f2:53:4c:e7:12:ef:ab:8a:
b3:2b:77:36:7e:3a:04:58:9f:f0:f4:ec:6e:b7:bc:
43:a5:a9:e5:0d:4f:26:f2:98:1a:a3:54:ca:30:34:
86:1a:6e:d8:13:b6:18:0f:5b:4c:04:cd:fd:4c:a1:
54:54:33:b0:2f:d3:de:27:3a:77:28:22:00:83:2d:
f2:1c:0f:39:46:13:64:8c:f8:67:0f:59:09:ab:f5:
da:e7:4d:40:8d:f8:22:45:87:f9:fc:0e:a7:9e:0d:
91:51:9f:0d:68:82:3e:83:b1:fb:b9:73:8c:2b:1a:
bd:45:2c:8f:f2:4c:58:bf:ce:50:bf:03:5c:68:e8:
79:6d:bb:ec:31:46:a9:67:5d:31:00:25:fb:70:e9:
3e:79:11:f7:d7:88:9c:7e:34:a4:8f:63:5a:b2:1f:
0a:03:5a:c5:a7:07:ca:32:b6:9c:e4:35:03:9c:24:
01:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:74:0B:A2:3F:18:4D:FA:99:60:3E:25:FF:6E:7B:13:DF:E5:95
X509v3 Authority Key Identifier:
keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e6:42:2c:c4:b0:cc:83:fa:26:2a:22:4b:26:fc:bc:ba:45:
f3:04:e1:fa:42:a4:57:ba:4f:f0:f0:0e:fa:74:20:32:f9:2e:
11:76:a2:9d:6e:f1:dc:55:fd:32:74:21:2d:3c:ef:24:e2:13:
15:02:7d:24:0a:e6:f5:36:75:06:9f:59:2f:f0:c4:25:0a:7e:
22:d8:17:87:7e:fe:81:ff:cf:30:ea:a6:d0:6f:d5:35:f9:e0:
9a:f0:b9:53:b4:47:42:01:4a:0b:04:7a:c7:3a:46:da:54:d7:
9c:b9:c4:78:ee:79:10:03:7f:fc:fa:fe:fc:44:f7:a3:f2:1b:
a8:6f:c3:d3:8f:4f:a6:9b:49:a8:3f:06:bf:dd:d6:ab:65:ff:
51:4d:6f:5d:6a:b6:0d:9d:0b:59:45:f2:ab:57:db:31:a7:bd:
34:9d:ae:c5:15:e6:4c:5e:31:01:00:cd:d2:8a:e1:66:26:18:
1d:ba:5e:75:11:55:4f:2c:ed:5e:75:f1:83:a4:7e:39:5e:57:
27:63:39:c6:9a:e3:04:4c:ae:0a:93:31:b1:cb:4f:06:b2:4c:
62:55:f3:43:2d:20:f3:f4:ce:04:3f:bc:e9:50:13:37:75:78:
13:1f:98:24:0e:3f:03:12:41:87:a7:27:d5:ae:cc:d4:ba:fa:
4f:73:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:52:43 2026 by rpki-client