
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
File: Fm664SGI_4_HXurj7PjTvearJxo.mft (raw, json)
Hash identifier: IK/aSqIFZycDlYpSFoZZLB0e0roy1ICEcbyMYRFY+G0=
Subject key identifier: 52:8A:B8:61:F9:38:D9:F8:CC:05:99:A4:C1:23:39:6F:D0:B3:64:A1
Authority key identifier: 16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
Certificate issuer: /CN=A91C654A/serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
Manifest number: 0AC1
Signing time: Wed 30 Sep 2026 21:26:21 +0000
Manifest this update: Wed 30 Sep 2026 21:26:21 +0000
Manifest next update: Wed 07 Oct 2026 21:26:21 +0000
Files and hashes: 1: Fm664SGI_4_HXurj7PjTvearJxo.crl (hash: NOHUYrlG1l6QXxLudXTLjwksmp1Pi52mYcJnrHWzQ7E=)
2: 43359CD0BC3311F1A8D4508D4511F970.roa (hash: 2aKyuM2V/+o8TfOUHYaYq3Gq1VQ2fOLhJxrqGt3EtLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 21:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C654A, serialNumber=166EBAE12188FF8FC75EEAE3ECF8D3BDE6AB271A
Validity
Not Before: Sep 30 21:26:21 2026 GMT
Not After : Oct 7 21:26:21 2026 GMT
Subject: CN=6abd7e7d-d5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:7a:09:ec:d9:4e:bf:06:be:84:33:0e:e5:
4c:ad:19:85:25:ec:8e:18:4a:c3:f6:dc:37:32:64:
6d:e5:e1:e0:64:5a:39:97:f7:d0:e1:2b:0b:0d:a5:
7f:63:f0:8a:17:d4:61:19:d6:6b:7b:b6:89:24:de:
d2:38:db:36:e7:b7:57:bb:b3:7d:ad:69:cb:f5:48:
51:98:17:45:23:b0:e7:13:e6:e1:9e:0b:2b:90:49:
59:e1:a3:52:9f:32:05:97:ae:0b:49:1e:3e:39:89:
a1:fd:a9:ac:9c:f5:45:81:19:6a:9c:b7:55:04:66:
ad:ce:e6:fa:26:85:c3:4b:d3:84:9b:63:b9:5b:92:
30:f8:06:d7:8e:ae:19:e0:17:4d:e5:66:2e:85:09:
e9:49:45:ba:2b:8c:6d:1f:7b:65:12:30:02:8e:aa:
38:60:9a:6c:14:6f:97:5f:e8:8a:1a:16:9d:cb:05:
bb:22:92:81:87:d2:20:5e:97:f5:58:42:ec:f9:0f:
0a:26:7b:9b:c7:05:8a:f0:57:c7:88:6d:19:03:8a:
33:9d:32:a5:2e:9b:6d:03:f7:e6:bd:99:d0:66:cd:
5a:6e:6a:d0:5b:2a:0c:4d:43:de:f1:d0:18:43:0f:
bb:70:d6:e8:46:83:87:99:1f:66:d3:46:14:9c:f2:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:B8:61:F9:38:D9:F8:CC:05:99:A4:C1:23:39:6F:D0:B3:64:A1
X509v3 Authority Key Identifier:
keyid:16:6E:BA:E1:21:88:FF:8F:C7:5E:EA:E3:EC:F8:D3:BD:E6:AB:27:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fm664SGI_4_HXurj7PjTvearJxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C654A/71FAB0D8352911EBB80F1349C4F9AE02/Fm664SGI_4_HXurj7PjTvearJxo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:15:fe:35:f3:52:04:dd:3b:9d:f1:8d:3e:59:94:80:d0:da:
1f:0a:9e:63:05:c1:25:b1:81:c1:3c:c9:c6:94:3b:d8:ef:8e:
29:5d:21:70:6e:9a:d1:82:b2:9a:ca:47:9c:11:a7:77:30:c0:
ae:db:ba:dc:c3:fc:5c:ca:2a:cd:6f:6f:29:94:e6:f3:bd:04:
0c:d8:4d:b6:ea:29:d5:7e:47:04:86:cf:1c:f7:e0:6a:81:49:
a5:ea:75:70:de:c2:55:d5:64:5d:e3:34:fe:f8:cf:99:04:0d:
8b:f1:1e:8e:aa:44:5b:69:e8:9b:0f:a2:ee:3d:1a:08:bd:a6:
d1:10:36:fd:c6:8c:2d:e2:a1:48:30:57:b5:bf:92:ff:38:6f:
c1:d3:d9:64:48:bb:c0:f7:9c:bb:b9:8e:1c:cc:e0:93:cc:47:
c3:fb:58:66:be:3a:c4:11:ac:68:53:da:b0:82:72:1b:36:7c:
a7:a7:d6:15:07:20:66:83:b3:ce:66:b4:95:e9:c0:3e:70:a8:
ad:58:9c:1a:b6:c4:9f:9e:bd:0d:3b:64:f3:8d:8b:52:a5:d4:
3e:df:92:e0:cb:28:5d:27:47:86:cc:93:b5:21:45:fa:ef:a3:
40:9d:16:1e:2f:69:0f:47:4d:66:93:8e:40:f4:d0:47:fc:8c:
ef:df:88:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NEExMTAvBgNVBAUTKDE2NkVCQUUxMjE4OEZGOEZDNzVFRUFFM0VDRjhEM0JE
RTZBQjI3MUEwHhcNMjYwOTMwMjEyNjIxWhcNMjYxMDA3MjEyNjIxWjAYMRYwFAYD
VQQDEw02YWJkN2U3ZC1kNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVh6CezZTr8GvoQzDuVMrRmFJeyOGErD9tw3MmRt5eHgZFo5l/fQ4SsLDaV/
Y/CKF9RhGdZre7aJJN7SONs257dXu7N9rWnL9UhRmBdFI7DnE+bhngsrkElZ4aNS
nzIFl64LSR4+OYmh/amsnPVFgRlqnLdVBGatzub6JoXDS9OEm2O5W5Iw+AbXjq4Z
4BdN5WYuhQnpSUW6K4xtH3tlEjACjqo4YJpsFG+XX+iKGhadywW7IpKBh9IgXpf1
WELs+Q8KJnubxwWK8FfHiG0ZA4oznTKlLpttA/fmvZnQZs1abmrQWyoMTUPe8dAY
Qw+7cNboRoOHmR9m00YUnPIBnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKKuGH5
ONn4zAWZpMEjOW/Qs2ShMB8GA1UdIwQYMBaAFBZuuuEhiP+Px17q4+z4073mqyca
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU0QS83MUZBQjBEODM1
MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80X0hYdXJqN1BqVHZlYXJK
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZtNjY0U0dJXzRfSFh1cmo3UGpUdmVhckp4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU0QS83MUZBQjBEODM1MjkxMUVCQjgwRjEzNDlDNEY5QUUwMi9GbTY2NFNHSV80
X0hYdXJqN1BqVHZlYXJKeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArhX+NfNSBN07nfGNPlmUgNDaHwqeYwXBJbGBwTzJxpQ72O+OKV0hcG6a0YKy
mspHnBGndzDArtu63MP8XMoqzW9vKZTm870EDNhNtuop1X5HBIbPHPfgaoFJpep1
cN7CVdVkXeM0/vjPmQQNi/EejqpEW2nomw+i7j0aCL2m0RA2/caMLeKhSDBXtb+S
/zhvwdPZZEi7wPecu7mOHMzgk8xHw/tYZr46xBGsaFPasIJyGzZ8p6fWFQcgZoOz
zma0lenAPnCorVicGrbEn569DTtk842LUqXUPt+S4MsoXSdHhsyTtSFF+u+jQJ0W
Hi9pD0dNZpOOQPTQR/yM79+IVw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 14:58:03 2026 by rpki-client