
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft
File: FMswrC0LZ8dw-voAKFaG65_LaN4.mft (raw, json)
Hash identifier: rECgjHwnFW9+Ws5LnanA4CRV+iGJ4hLfm3luCS2qOnY=
Subject key identifier: B0:9E:CF:3B:35:4D:AA:19:8C:DA:C3:AF:F2:E5:82:97:8D:18:DE:4D
Authority key identifier: 14:CB:30:AC:2D:0B:67:C7:70:FA:FA:00:28:56:86:EB:9F:CB:68:DE
Certificate issuer: /CN=A91F6697/serialNumber=14CB30AC2D0B67C770FAFA00285686EB9FCB68DE
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft
Manifest number: 0C
Signing time: Wed 23 Sep 2026 08:55:02 +0000
Manifest this update: Wed 23 Sep 2026 08:55:01 +0000
Manifest next update: Wed 30 Sep 2026 08:55:01 +0000
Files and hashes: 1: FMswrC0LZ8dw-voAKFaG65_LaN4.crl (hash: iWrpMlOREmrqAlNLuw0tMGkJ9WNHO6xkk9kMpNwADak=)
2: A0BCB8C6A7F111F1B0B339166211F970.roa (hash: L+gYNweejjVhVwFE5Shlv50HmWDXdkDIAWER8QTB8wA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.crl
rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6697, serialNumber=14CB30AC2D0B67C770FAFA00285686EB9FCB68DE
Validity
Not Before: Sep 23 08:55:01 2026 GMT
Not After : Sep 30 08:55:01 2026 GMT
Subject: CN=6ab393e5-0247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:07:81:2c:84:7b:bf:58:07:bf:6e:36:2c:
0d:2e:a3:c5:22:b4:64:7f:07:da:c2:62:be:e3:9c:
ce:4c:2d:fd:ed:0a:b5:40:5d:04:a0:7e:a4:a9:4a:
da:0e:80:2f:56:3e:08:21:d9:ec:aa:61:a2:aa:e7:
67:b5:42:59:30:79:f8:87:2b:f0:8e:72:21:76:4f:
36:76:bd:ab:07:6d:4c:5b:44:29:8a:51:57:e9:e2:
f7:af:b6:80:79:12:38:54:f6:dd:f8:e5:36:04:0a:
e1:dc:92:eb:80:8a:95:03:00:72:3f:31:cd:f4:ce:
c6:db:1b:f4:21:39:94:0b:5b:e2:ec:c4:cf:2d:2d:
1c:e3:91:58:bf:b2:97:42:08:47:fd:9a:83:d1:9f:
b0:69:df:3b:8d:8a:1a:06:38:f0:3b:75:34:6c:57:
f4:65:b4:a4:97:a7:01:82:36:e8:4f:bc:bd:cb:29:
4d:7b:86:f6:18:fe:17:0a:b9:b7:26:c8:16:52:ba:
3a:57:0e:2a:5d:f8:49:59:99:f8:7d:9e:29:23:25:
2b:28:ff:d5:ff:8a:d2:58:6d:24:51:b0:26:0a:70:
1a:49:e4:58:20:44:60:72:2e:af:9b:61:f5:4b:71:
f1:68:74:a4:05:11:02:f5:8b:17:72:f7:e0:11:f8:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:CF:3B:35:4D:AA:19:8C:DA:C3:AF:F2:E5:82:97:8D:18:DE:4D
X509v3 Authority Key Identifier:
keyid:14:CB:30:AC:2D:0B:67:C7:70:FA:FA:00:28:56:86:EB:9F:CB:68:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FMswrC0LZ8dw-voAKFaG65_LaN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6697/F229F04EA7F011F1B7A18DD06111F970/FMswrC0LZ8dw-voAKFaG65_LaN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:39:aa:31:17:6a:8d:20:fb:8d:1b:55:d9:78:f9:ec:dc:22:
79:74:83:27:2a:b2:65:d5:6a:3e:73:68:ab:3f:8e:f0:9b:14:
cd:b8:bc:71:9c:8c:b2:7b:d6:3a:b3:fc:5d:cd:f3:67:5a:42:
03:61:3d:04:39:2d:3e:6a:2f:ae:b6:a1:49:d0:ca:3d:6b:7f:
7a:27:d0:bb:f6:7b:d9:48:cf:90:a3:2b:09:04:6d:ed:dc:6d:
c9:4c:11:84:0e:51:49:68:f1:7c:c4:47:25:75:5a:d0:31:b4:
1e:32:e9:f4:d1:dc:7a:fb:44:09:50:dc:93:a0:f6:60:b5:f2:
03:32:e0:c2:96:87:85:c5:ed:27:ff:5d:25:91:2b:c0:a7:cb:
ab:8a:9c:dd:53:09:df:84:94:e2:2c:0f:52:0c:54:d1:4b:9e:
1d:2e:09:09:b4:a4:ad:ba:84:da:18:87:cc:01:f1:cd:4e:b6:
18:1a:ed:89:a1:fe:eb:f0:67:c4:33:c4:86:3b:4f:f8:f6:69:
0d:24:04:53:b8:9a:86:d8:43:08:d6:e9:93:fd:ca:24:55:88:
a7:df:dd:d2:47:11:4a:42:f7:33:4e:b1:50:8a:12:02:b1:ae:
be:0e:cf:c5:23:89:17:57:1b:c5:20:ad:66:1a:bd:2e:27:93:
53:e5:87:a4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NjY5NzExMC8GA1UEBRMoMTRDQjMwQUMyRDBCNjdDNzcwRkFGQTAwMjg1Njg2RUI5
RkNCNjhERTAeFw0yNjA5MjMwODU1MDFaFw0yNjA5MzAwODU1MDFaMBgxFjAUBgNV
BAMTDTZhYjM5M2U1LTAyNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDbJQeBLIR7v1gHv242LA0uo8UitGR/B9rCYr7jnM5MLf3tCrVAXQSgfqSpStoO
gC9WPggh2eyqYaKq52e1QlkwefiHK/COciF2TzZ2vasHbUxbRCmKUVfp4vevtoB5
EjhU9t345TYECuHckuuAipUDAHI/Mc30zsbbG/QhOZQLW+LsxM8tLRzjkVi/spdC
CEf9moPRn7Bp3zuNihoGOPA7dTRsV/RltKSXpwGCNuhPvL3LKU17hvYY/hcKubcm
yBZSujpXDipd+ElZmfh9nikjJSso/9X/itJYbSRRsCYKcBpJ5FggRGByLq+bYfVL
cfFodKQFEQL1ixdy9+AR+Jr9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUsJ7POzVN
qhmM2sOv8uWCl40Y3k0wHwYDVR0jBBgwFoAUFMswrC0LZ8dw+voAKFaG65/LaN4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2Njk3L0YyMjlGMDRFQTdG
MDExRjFCN0ExOEREMDYxMTFGOTcwL0ZNc3dyQzBMWjhkdy12b0FLRmFHNjVfTGFO
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRk1zd3JDMExaOGR3LXZvQUtGYUc2NV9MYU40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2
Njk3L0YyMjlGMDRFQTdGMDExRjFCN0ExOEREMDYxMTFGOTcwL0ZNc3dyQzBMWjhk
dy12b0FLRmFHNjVfTGFONC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQACOaoxF2qNIPuNG1XZePns3CJ5dIMnKrJl1Wo+c2irP47wmxTNuLxxnIyye9Y6
s/xdzfNnWkIDYT0EOS0+ai+utqFJ0Mo9a396J9C79nvZSM+QoysJBG3t3G3JTBGE
DlFJaPF8xEcldVrQMbQeMun00dx6+0QJUNyToPZgtfIDMuDCloeFxe0n/10lkSvA
p8uripzdUwnfhJTiLA9SDFTRS54dLgkJtKStuoTaGIfMAfHNTrYYGu2Jof7r8GfE
M8SGO0/49mkNJARTuJqG2EMI1umT/cokVYin393SRxFKQvczTrFQihICsa6+Ds/F
I4kXVxvFIK1mGr0uJ5NT5Yek
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:29:46 2026 by rpki-client