
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier: LKJ4C2pKl5Nv7XuTGjWk0kFgBBev7QJlvPcG1JgE5pY=
Subject key identifier: B4:9C:9B:EC:E9:08:A5:FA:32:B6:E3:62:E1:85:69:A6:0E:88:F9:3A
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial: 0137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number: 0133
Signing time: Wed 07 Oct 2026 06:09:53 +0000
Manifest this update: Wed 07 Oct 2026 06:09:53 +0000
Manifest next update: Wed 14 Oct 2026 06:09:53 +0000
Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: XfIrjJ4in51zYj7KFhkHd4+5IVUQSv7B5Pl2otFTDG8=)
2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: u+iVKkkYCJUO0WXOE68Cpj6tOjtVLvy0gYGY2wApXr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Validity
Not Before: Oct 7 06:09:53 2026 GMT
Not After : Oct 14 06:09:53 2026 GMT
Subject: CN=6ac5e231-ff68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:9e:5f:57:dd:5e:a5:77:21:b1:1f:83:4d:
b6:9f:0f:e5:6c:c6:6a:f6:80:8f:ac:f7:d9:71:c4:
5e:f4:01:49:6c:f0:3c:e1:a9:9b:90:38:bc:a2:c6:
e7:62:13:9d:59:48:b9:a6:4e:c3:91:42:e5:34:88:
bc:68:23:ef:60:9a:87:df:8d:b1:ae:a0:ce:73:0d:
53:36:67:3f:8a:a5:a4:ab:47:da:42:d3:df:da:24:
37:c7:cc:c4:d8:cb:ee:41:c1:9c:0f:b0:a4:84:e3:
a4:ec:b7:01:d5:2b:f0:44:1c:3f:f0:11:86:d1:10:
4a:97:30:82:0d:c0:e7:52:43:33:b0:67:89:42:4c:
fa:16:97:35:9e:4d:8f:56:0f:d7:3f:c5:7a:fa:ef:
46:71:43:8e:f9:bf:6e:9b:dd:0a:68:bc:7b:de:74:
dc:be:56:2f:76:16:a9:c5:7c:06:97:e3:d7:2b:61:
4a:e1:4b:1b:42:86:b4:11:f7:c0:34:e2:ee:d9:9e:
3b:91:c7:21:89:cd:e2:6d:ba:1d:ef:28:d9:7d:f0:
12:c7:ef:0d:62:ae:95:e9:42:91:87:55:51:85:f7:
6e:38:87:34:e8:88:1f:50:65:81:cb:c2:da:86:ed:
23:f8:38:a3:c9:14:d7:64:04:51:ee:da:91:bd:e4:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:9B:EC:E9:08:A5:FA:32:B6:E3:62:E1:85:69:A6:0E:88:F9:3A
X509v3 Authority Key Identifier:
keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:de:e3:d4:fb:5b:6a:8f:b7:43:ba:e2:2c:e8:49:52:96:d8:
04:89:0f:ef:72:8f:54:66:0b:cf:43:21:b4:ce:b9:f1:bc:23:
1f:b5:24:a3:94:3f:db:f6:35:a7:f9:f4:2d:11:61:fa:65:f3:
13:80:13:bd:0b:41:f4:61:4d:f4:ad:b2:98:1d:36:92:d6:1e:
a9:1b:ea:57:94:a4:7a:51:40:7f:8d:2e:ad:f4:1c:b2:85:18:
63:46:54:3e:56:8a:92:86:74:da:93:b3:d3:29:72:9c:83:cf:
43:32:02:21:20:c9:af:29:a8:32:d8:63:37:5e:41:ab:f3:42:
3a:2c:55:05:3d:42:63:fd:1c:40:3f:c7:21:0b:f4:8d:9b:25:
90:98:f6:9b:20:ac:2f:6c:07:87:58:f2:56:54:fb:70:5f:f9:
db:55:fb:15:a1:03:74:d7:22:f3:1d:d4:cf:56:e1:16:39:ab:
8b:9b:74:67:99:2c:ec:77:ae:ab:92:36:86:d0:6b:cd:47:62:
4d:5a:e0:f2:ee:d4:6c:87:ff:9b:6e:b4:45:a7:4f:b3:d2:3e:
f0:d3:9d:31:de:8d:3f:ce:90:14:5c:f0:b8:ea:fc:d3:bf:d0:
d6:0a:ab:ae:a5:b1:2b:c7:c6:3d:87:82:3f:19:4b:34:b8:c2:
6e:82:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:07:19 2026 by rpki-client