
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json)
Hash identifier: XF3qLfEY/8TE2hrHP/C6dbbLTStn6QTZoWp+AMlxEIY=
Subject key identifier: 2E:5F:25:16:63:8D:5E:EC:6A:B3:16:E5:93:EB:CA:62:3A:B3:0A:80
Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Certificate serial: 0120
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
Manifest number: 011B
Signing time: Wed 23 Sep 2026 05:44:00 +0000
Manifest this update: Wed 23 Sep 2026 05:43:59 +0000
Manifest next update: Wed 30 Sep 2026 05:43:59 +0000
Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: AihyT5FZSas6lv11UyQc1gG3cSukmZbljOpoPin758E=)
2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: yGM7eKq5h+PmwajQSPDe5cv2bwop3r2WJ/lVhjv7Pu8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Validity
Not Before: Sep 23 05:43:59 2026 GMT
Not After : Sep 30 05:43:59 2026 GMT
Subject: CN=6ab36720-c43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e2:d7:bc:24:fe:5a:31:c7:33:67:4e:26:ae:
14:9f:cd:8e:22:2e:ef:d5:a1:d4:f3:d2:b7:d4:c1:
3e:cb:ac:ac:69:88:07:d2:96:a7:15:19:11:75:09:
09:74:d6:09:69:de:c9:ad:d2:87:67:59:56:13:8e:
87:b2:6e:0e:25:2a:56:0d:29:2c:42:9a:c7:75:cf:
fc:13:a0:2d:a4:93:0d:83:49:1b:db:ec:4e:b3:47:
2b:9e:2f:b1:6e:13:a6:14:7d:92:bc:bb:a1:77:36:
a9:32:10:78:2f:6c:a3:fd:07:ab:d2:1a:e1:71:e5:
19:a8:7e:ad:d9:24:22:a4:99:17:49:a6:e0:14:5b:
0d:3a:e6:5d:14:6a:2b:0f:c9:fe:0d:38:37:88:8e:
19:e6:fd:5b:da:7c:47:42:7e:dc:24:e9:28:9c:19:
07:03:d8:67:90:1b:56:72:22:57:35:7d:ff:f4:f4:
2f:48:1f:27:a6:94:18:94:60:6d:1c:c1:59:d4:24:
13:da:0a:e5:05:fe:9f:7b:14:42:af:8e:9f:fe:6d:
19:3f:b0:b0:1b:44:22:33:3a:d4:cb:e6:92:ac:c4:
b2:2c:c8:b3:63:57:58:fa:2f:47:5e:d7:1d:34:01:
d1:56:3a:a2:14:a9:99:c1:02:2a:70:32:f7:a1:50:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5F:25:16:63:8D:5E:EC:6A:B3:16:E5:93:EB:CA:62:3A:B3:0A:80
X509v3 Authority Key Identifier:
keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:87:a7:b2:3f:1b:07:9e:ba:fb:51:a7:8d:9e:45:a0:e2:97:
cd:94:68:f2:17:8d:2b:f8:68:2e:74:60:56:c7:34:2b:51:cf:
38:b9:35:36:f0:cb:da:07:ea:e1:cf:77:d8:1a:8a:e0:10:dc:
2f:60:d5:d7:45:8b:db:29:36:47:70:a0:33:37:b3:c2:29:16:
33:17:4a:da:d1:f6:6d:b0:7a:9b:35:ab:43:53:36:9a:5a:e8:
75:41:13:eb:ba:3c:01:f7:55:68:e2:dc:f4:bb:b7:71:74:cb:
e7:17:a6:03:5a:77:2c:f6:d6:76:13:48:8e:4e:ae:6f:91:64:
3d:35:21:94:f4:4a:56:ac:cf:88:0f:9f:a5:95:e2:65:96:fe:
f6:98:66:c0:ef:a0:0c:85:b8:7e:10:5d:9c:1d:de:bf:13:bf:
62:19:d8:49:78:4c:ce:01:09:ae:f4:43:04:f5:fa:2c:b6:e3:
7c:5e:94:1d:97:4f:94:f1:40:8b:6b:fe:1f:16:64:c1:ba:09:
6e:51:d1:8c:b3:1e:93:a0:55:92:e8:32:b5:14:f9:d1:c3:62:
02:34:ea:4e:d2:96:2e:7e:e2:b7:c4:f5:4b:db:b8:a7:c3:c3:
89:ff:08:04:f3:a2:c9:99:64:b9:34:21:3f:92:02:55:1f:55:
5d:55:97:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJFRkExMTAvBgNVBAUTKDE3M0MyNkEwODZFODVCOEZEQjkxN0FBOEQ5MTFFMUMw
MEFCNkEzQTEwHhcNMjYwOTIzMDU0MzU5WhcNMjYwOTMwMDU0MzU5WjAYMRYwFAYD
VQQDEw02YWIzNjcyMC1jNDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6uLXvCT+WjHHM2dOJq4Un82OIi7v1aHU89K31ME+y6ysaYgH0panFRkRdQkJ
dNYJad7JrdKHZ1lWE46Hsm4OJSpWDSksQprHdc/8E6AtpJMNg0kb2+xOs0crni+x
bhOmFH2SvLuhdzapMhB4L2yj/Qer0hrhceUZqH6t2SQipJkXSabgFFsNOuZdFGor
D8n+DTg3iI4Z5v1b2nxHQn7cJOkonBkHA9hnkBtWciJXNX3/9PQvSB8nppQYlGBt
HMFZ1CQT2grlBf6fexRCr46f/m0ZP7CwG0QiMzrUy+aSrMSyLMizY1dY+i9HXtcd
NAHRVjqiFKmZwQIqcDL3oVDxKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5fJRZj
jV7sarMW5ZPrymI6swqAMB8GA1UdIwQYMBaAFBc8JqCG6FuP25F6qNkR4cAKtqOh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkVGQS8wREE1MDZDQzBC
MzcxMUYwOEMyMzk4NjNDNEY5QUUwMi9Gendtb0lib1c0X2JrWHFvMlJIaHdBcTJv
NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkVGQS8wREE1MDZDQzBCMzcxMUYwOEMyMzk4NjNDNEY5QUUwMi9Gendtb0lib1c0
X2JrWHFvMlJIaHdBcTJvNkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ4ensj8bB566+1GnjZ5FoOKXzZRo8heNK/hoLnRgVsc0K1HPOLk1NvDL2gfq
4c932BqK4BDcL2DV10WL2yk2R3CgMzezwikWMxdK2tH2bbB6mzWrQ1M2mlrodUET
67o8AfdVaOLc9Lu3cXTL5xemA1p3LPbWdhNIjk6ub5FkPTUhlPRKVqzPiA+fpZXi
ZZb+9phmwO+gDIW4fhBdnB3evxO/YhnYSXhMzgEJrvRDBPX6LLbjfF6UHZdPlPFA
i2v+HxZkwboJblHRjLMek6BVkugytRT50cNiAjTqTtKWLn7it8T1S9u4p8PDif8I
BPOiyZlkuTQhP5ICVR9VXVWXNw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:11:14 2026 by rpki-client