
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: 3byGioRUeY7s7zK8fO2smaeMyYlX03edljP6jUFxShs=
Subject key identifier: B5:45:A7:B5:AF:E2:D1:C0:89:2B:10:EB:74:44:21:80:50:82:96:B8
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 09B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 0939
Signing time: Wed 22 Jul 2026 20:54:38 +0000
Manifest this update: Wed 22 Jul 2026 20:54:37 +0000
Manifest next update: Wed 29 Jul 2026 20:54:37 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: 6c37Y80cMpsFMXj3vA+Ke/6QRW46dezkTFoA9mX8lfI=)
2: 6500BEB849E611F18B665F22B5833773.roa (hash: oRJVDNNEq9yJM3kRWRLDOu8PzfoDFGvUq7nhvQCa5c4=)
3: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: hipmINl5QhmUdtwVQhhZDP0tnwpiCxBXThMjdcaX9Jc=)
4: 52DC15E02DA611F1B64DB1E8A2833773.roa (hash: AzbPG4+Ay9Py93BezJDBHyNMd2NxBXLctC8P1DC+Z84=)
5: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: 448SaP62zIEeDoT+BKnPnMZxQLrDOlT4PwJtIrUEjGQ=)
6: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: pb+67QUwu5Hw/Dgr2vwKugBBsOlkl0MS1lsM8PjI48o=)
7: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: VEN7PHjgXJ17sdBlfk+R1gfjCu4511OjPAUhn66pLqw=)
8: 78D63F3A49E611F1A18E902DB5833773.roa (hash: 6yed7TU5WsVwocy0PyrBQTwQ0MhVSm9L6l06FSV8VNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Jul 22 20:54:37 2026 GMT
Not After : Jul 29 20:54:37 2026 GMT
Subject: CN=6a612e0e-d352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c4:46:70:b9:f2:48:ae:f6:9a:69:88:77:8e:
6a:12:81:a5:09:56:34:d8:37:22:59:28:05:47:0e:
20:7c:ee:d5:66:b5:76:d9:ea:62:93:8e:df:4f:4b:
a1:72:91:b3:93:a6:32:47:6f:5d:4f:5e:e0:99:d3:
b0:6a:92:ae:c7:0f:2f:c0:54:03:9f:5a:4b:c6:20:
d0:af:a8:56:fb:c8:93:69:f1:df:31:aa:28:b2:37:
0c:a8:4b:a3:0a:78:3d:38:fd:9a:28:bc:5a:ef:33:
6b:9d:b5:68:51:a3:d6:1e:ab:3e:0d:92:b4:36:e6:
2d:26:50:23:6b:c7:f8:e5:b0:a1:5e:20:f5:b7:90:
be:b6:b9:f8:94:58:d4:b2:e3:c6:81:fb:cd:72:1d:
84:16:32:88:a3:00:a2:0e:8c:a6:6f:3e:3d:c0:52:
64:68:8c:63:c2:f6:63:71:93:0e:20:0d:cc:dd:0a:
cf:dd:ce:7d:11:84:4b:3d:78:f0:6b:51:26:37:ab:
5d:44:c7:44:4c:77:d5:3a:2b:5c:7e:e0:4b:be:af:
46:db:88:fd:30:b0:b1:18:a9:82:2b:e0:c0:13:a9:
ab:91:1c:9e:5a:3f:84:b0:24:e9:3d:af:d6:4a:7a:
85:8b:4f:9e:67:5e:6a:d6:6a:30:9c:32:71:e1:d3:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:45:A7:B5:AF:E2:D1:C0:89:2B:10:EB:74:44:21:80:50:82:96:B8
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7c:a6:e3:78:df:03:e5:f4:19:0f:d3:7c:cd:f5:13:40:53:
a1:20:9e:12:51:34:1c:db:21:68:34:6e:f3:14:88:cc:3e:2b:
11:56:e2:40:66:a6:2d:e0:df:85:d6:11:be:96:ad:8b:66:e9:
a1:41:92:0f:f2:83:e0:1c:7e:3a:94:e5:30:71:f2:f8:6e:22:
8d:83:14:23:3f:f9:e6:e5:3c:69:c8:67:84:b6:99:6a:5b:26:
ad:80:98:31:33:c9:19:47:c0:82:7a:c9:a9:f1:69:1e:ce:ab:
32:88:c2:46:95:5b:86:92:04:80:7a:85:f2:82:c3:27:72:33:
d8:b9:83:ee:f6:14:9b:f0:f7:4b:3e:55:98:e2:d1:76:ed:87:
77:54:7e:38:18:f2:e9:ba:f5:10:99:21:69:04:d5:85:f5:01:
37:8f:d8:88:55:bb:e7:af:51:2b:0a:71:59:46:d4:25:e2:e9:
5f:e2:6b:88:3c:2e:7e:4d:55:83:a7:88:12:73:21:2c:bf:04:
ea:83:8f:34:da:6e:14:9c:b4:0c:9b:5c:22:52:7e:01:25:e7:
b2:59:13:db:8b:65:3d:8f:0c:92:60:15:b5:e7:0d:3b:43:ac:
30:74:62:3b:de:a0:fd:97:02:69:14:18:f7:77:8d:90:16:aa:
da:30:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:29 2026 by rpki-client