
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: Iw12AmKgJplXzqk1XM6Ei3O+7W9ODT/QlpTAjPSphnI=
Subject key identifier: DD:64:EF:59:EC:B8:5E:CD:A1:3B:7A:2A:90:86:68:D2:98:04:19:AC
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0984
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 0913
Signing time: Tue 12 May 2026 20:34:33 +0000
Manifest this update: Tue 12 May 2026 20:34:32 +0000
Manifest next update: Tue 19 May 2026 20:34:32 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: nQ/HIrrAhgbvFBkv29K93zirBPcjV8Nlf0+ewpVQQU8=)
2: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: z+HwCEnQPM1ZWbTaxIobMQlSkN1lILUyzjqFvMLdIyM=)
3: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: tdhB/LQ2MoAuDsLhkF8HuP8bJ9jFlOIm2EVgF88Nu04=)
4: 6500BEB849E611F18B665F22B5833773.roa (hash: uclpyx76x4OXtpsf2jbdgSqJN6T+ApIb4vTVWWT5b7Q=)
5: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: vakBkNtUUuGs7h4zM7eGY5+Ut3h93Lyy2S4tZhrD+pQ=)
6: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: RfCFLymN4ZhMZVFr84inHmETvl0bVDY8V0QLa8tHpq8=)
7: 78D63F3A49E611F1A18E902DB5833773.roa (hash: W+uFGsPxzsL2drkk4prusa7UME7kIuo89yrjYDiapIE=)
8: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: MLWfrOxjTe3AR9tg1+HLkf7LXjRAcZZbPyx6j5qp/E0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2436 (0x984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: May 12 20:34:32 2026 GMT
Not After : May 19 20:34:32 2026 GMT
Subject: CN=6a038ed9-1775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:02:d8:32:87:f3:f9:0b:74:06:a8:78:c8:
a6:bb:10:69:5d:ac:3f:ba:70:bb:0a:b5:32:7e:40:
0b:f9:bd:9a:d4:96:1b:c1:24:63:47:1f:29:79:be:
35:8e:fd:7e:3d:48:b1:89:57:d9:58:29:1c:3d:93:
6e:e8:66:79:f3:d9:f4:62:99:c0:82:de:13:54:b3:
52:98:bf:6d:ca:f5:72:26:2e:d0:97:a4:4b:f8:0f:
87:04:71:0b:cb:c1:3f:e3:7d:bc:f4:d8:72:03:9d:
18:f4:9b:a5:c3:63:e1:07:22:24:49:50:a4:16:f5:
bf:cd:ee:87:e1:6d:7c:ef:79:21:97:19:03:5e:e0:
84:c6:b0:00:fe:7d:d6:0e:d5:e5:d2:8f:79:62:40:
f8:68:5f:3b:5e:07:24:29:01:c5:f2:0f:1f:03:38:
ed:0f:97:4c:10:fd:19:54:8e:fe:64:f0:40:f4:de:
90:53:cb:f3:9d:d0:f5:40:7b:a0:4d:82:56:fe:b3:
62:c2:9d:78:9d:50:47:fc:f5:6d:fc:27:4f:20:76:
53:47:ed:73:e7:68:f8:61:45:63:41:b8:01:7d:95:
51:90:66:9d:9b:10:25:11:e1:28:21:ef:cd:fa:f5:
1e:dc:2d:13:a9:d8:9a:66:c4:34:eb:23:4f:a0:e9:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:EF:59:EC:B8:5E:CD:A1:3B:7A:2A:90:86:68:D2:98:04:19:AC
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:58:18:f5:e9:d3:22:96:3b:ed:62:15:03:f7:d9:c7:f6:2c:
73:f5:32:fa:39:1e:f9:6a:09:ca:73:d2:d4:a1:de:b5:ad:b2:
c8:da:9a:ae:b0:db:4d:ac:c3:35:94:30:bc:fc:03:53:c5:66:
40:1f:41:67:ae:be:83:0e:db:a7:73:2f:72:5d:e7:ed:70:22:
15:6a:01:16:bd:8f:39:6b:8b:02:81:c0:e2:66:37:12:91:d3:
e8:de:0f:7f:86:92:0c:f4:8d:7d:c6:4d:4f:c4:80:79:a1:81:
0a:f5:d0:94:b9:68:2d:eb:3d:c2:8a:9c:2e:93:9a:ae:d2:3e:
b0:98:a4:e0:e6:55:5f:4d:8e:fc:20:38:28:9d:97:86:f7:d4:
83:8d:16:f3:5d:93:29:dd:4a:88:d0:d7:34:d0:ce:b1:09:fd:
4c:30:67:88:8b:41:15:c9:0a:91:2f:e4:bc:56:d1:1f:13:dd:
f3:1b:b5:72:68:92:57:e4:c4:ca:7a:92:9a:3e:47:66:94:e2:
46:11:3c:c6:9c:c2:34:ab:15:32:e6:5f:41:84:0a:0f:92:2e:
12:4a:83:d3:e0:72:3d:22:01:48:45:c5:2d:09:bf:63:5f:e6:
98:7c:24:24:19:e0:1e:67:fc:d6:7d:6a:70:fd:c5:d2:84:cb:
ec:07:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:04 2026 by rpki-client