
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
File: ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json)
Hash identifier: yL7xpqBZ0b3tqMrLQubg63Niu+rbjkRALsSIzBePfSg=
Subject key identifier: 1B:11:36:08:89:5C:DC:1D:AF:D5:95:EE:56:A1:B6:F7:61:18:95:D0
Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Certificate serial: 0A0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
Manifest number: 09FF
Signing time: Tue 22 Sep 2026 19:38:19 +0000
Manifest this update: Tue 22 Sep 2026 19:38:18 +0000
Manifest next update: Tue 29 Sep 2026 19:38:18 +0000
Files and hashes: 1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: zz/gMC98SjcKpFelI9JmEXUiccFI3VQVOBdWYf7vsUA=)
2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: MxcRCOMDVxWYLuz/1DuRHNURRxOV2Q55QL6ZvvYDCSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 19:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A
Validity
Not Before: Sep 22 19:38:18 2026 GMT
Not After : Sep 29 19:38:18 2026 GMT
Subject: CN=6ab2d92b-77fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:7d:e2:a4:de:58:cb:07:40:11:2d:50:c5:
df:eb:d0:03:a5:9d:70:0b:21:10:a0:35:d1:8a:59:
0a:5c:78:0d:8f:a2:ff:bd:09:a1:a2:dc:d0:bc:46:
d5:dc:78:40:8b:c6:2b:79:22:62:83:79:6a:a2:77:
58:58:2a:ba:07:ea:7e:39:29:81:e2:5f:b2:dc:4b:
51:ec:b2:86:3e:60:ff:05:86:d0:f2:ba:17:58:f4:
72:f5:ce:7f:51:fa:42:72:26:0a:d0:8a:a5:87:6f:
3c:d5:cb:b3:b2:b7:3c:75:42:40:aa:05:3f:6c:0d:
bd:18:da:34:e8:14:8e:42:15:4d:e6:1d:7b:4e:72:
0e:3e:aa:7e:b5:95:fe:34:ab:46:69:47:dc:31:43:
3d:a0:25:38:c0:67:d2:ce:69:2a:ff:d1:1d:1c:66:
70:9e:82:b0:84:51:44:32:f4:81:72:47:9d:f5:d1:
2c:75:f4:bf:3e:09:83:a2:ed:72:3d:c1:14:8a:2f:
ef:6e:05:bb:c9:51:65:ca:88:82:93:31:a2:0a:be:
ab:6f:8b:0f:21:98:11:86:b7:f8:73:b3:2b:3f:60:
d3:2b:1f:d6:16:3a:71:13:b9:7d:1a:39:13:4c:1c:
9c:77:66:3f:3a:28:53:05:17:71:b6:30:55:03:4b:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:11:36:08:89:5C:DC:1D:AF:D5:95:EE:56:A1:B6:F7:61:18:95:D0
X509v3 Authority Key Identifier:
keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e7:ce:37:e6:fb:6c:8f:16:0b:78:04:b6:66:2f:c0:17:d8:
57:07:87:0d:31:d2:e9:71:f9:42:47:75:e0:aa:ea:f0:38:51:
83:36:53:fa:fa:8d:b6:2b:73:31:6d:3b:e8:ef:93:18:87:82:
54:2d:d1:8a:bd:2f:39:84:27:3b:3f:61:62:65:4a:3a:64:e8:
6c:10:b2:3a:d0:33:67:b3:24:38:4b:cb:28:3b:49:af:43:f3:
e9:a8:a2:4a:3e:06:a4:1f:bb:a7:e8:a0:08:9a:a3:3f:30:69:
59:48:6b:a3:e5:d6:24:c7:d4:23:b3:f5:86:6c:29:ea:1b:0b:
d3:c8:27:e2:e9:74:34:66:01:8f:2c:c6:f5:d3:2d:aa:ff:b3:
9f:37:7f:02:09:a4:40:c9:4c:fd:b9:ae:33:e5:29:b4:44:55:
a8:62:3e:32:c0:e4:3e:13:86:79:11:de:d5:60:a4:cd:1d:6a:
ce:5e:c6:a3:f2:eb:b2:67:0e:d0:27:5c:8d:bf:ac:bb:a1:fe:
1a:da:47:0a:57:43:15:7a:b5:21:da:25:8c:af:4c:eb:6d:f6:
bb:12:ca:e2:28:ba:e8:33:ff:69:7d:df:ea:7a:82:47:7c:a2:
31:62:73:f3:5b:37:77:c4:d3:d8:93:72:69:b1:ea:bf:27:57:
e1:7e:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:56:06 2026 by rpki-client