
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
File: FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json)
Hash identifier: vwpuDzVzu1Mlikq0c8ESD1ZDsSlb1XclBN8f+oSrb9I=
Subject key identifier: 5A:FB:9D:88:19:32:2E:55:F3:C1:06:BE:A3:43:A1:76:F8:7F:DC:F8
Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07
Certificate issuer: /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
Manifest number: 9E
Signing time: Mon 11 May 2026 07:30:40 +0000
Manifest this update: Mon 11 May 2026 07:30:39 +0000
Manifest next update: Mon 18 May 2026 07:30:39 +0000
Files and hashes: 1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: XhcT+jVSYwzMA0U+3CE6ATqX2SoKJGONWX8EZLozvgQ=)
2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: GzEU2vPIPXvKY5i0weDDpP3E/LtJoH+OnTw04IroV1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl
rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 07:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
Validity
Not Before: May 11 07:30:39 2026 GMT
Not After : May 18 07:30:39 2026 GMT
Subject: CN=6a0185a0-9d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:57:51:6a:d8:35:62:27:eb:91:1e:c8:d9:
6d:d6:50:8e:36:fb:42:39:68:10:d3:15:ed:63:6a:
97:40:7e:56:1b:50:90:f9:c1:7b:3f:60:9e:e9:a1:
84:6d:96:85:9a:45:40:95:14:ab:e1:2b:7f:84:39:
66:52:b9:16:9f:d6:c2:4a:84:ee:92:ac:fc:08:52:
65:6c:4d:1b:3e:82:6b:aa:e5:f9:10:b3:ec:4a:d4:
a3:77:4c:93:44:06:69:06:ee:e1:0a:f3:bd:0d:8c:
cb:b6:ff:b4:07:ee:fb:5d:e6:72:7d:45:7b:88:27:
d4:0d:97:33:d2:95:f9:65:5c:81:0c:2b:80:72:a0:
51:6a:41:d2:06:a9:7b:c7:55:de:7d:e6:92:ee:02:
4c:ce:bf:e4:d9:c3:79:aa:b6:b4:85:11:5b:88:71:
85:c2:dd:f2:0b:11:48:51:9d:77:f5:f9:01:c8:0a:
ee:16:68:7b:c2:ff:ab:0e:a8:92:b8:7b:75:55:7e:
1c:a3:43:21:68:a5:3a:3c:3c:41:bb:c9:ad:44:b8:
76:ac:6b:d9:74:81:52:e0:9e:60:0e:31:84:05:06:
09:2c:a2:ed:7b:01:91:bd:91:1f:40:07:82:a1:84:
a9:d8:64:3d:7c:45:8a:36:fd:61:dd:7a:b1:f7:83:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FB:9D:88:19:32:2E:55:F3:C1:06:BE:A3:43:A1:76:F8:7F:DC:F8
X509v3 Authority Key Identifier:
keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d5:dd:32:5c:57:98:a4:60:dc:18:f9:d1:92:ce:4e:4b:f7:
08:b8:da:1a:28:89:ca:66:d4:e0:24:a3:4b:77:d6:37:50:c0:
42:a0:86:2f:8e:01:c3:45:34:eb:77:bf:f3:f8:d3:f7:a9:c1:
02:0b:60:2e:45:ce:ad:4a:ba:49:63:f6:b7:49:9f:d4:07:92:
eb:ee:e5:2a:fa:92:fc:c7:3c:2b:af:a9:2c:78:e3:29:a9:f2:
b2:8e:56:de:e6:a5:9a:94:8b:79:2a:69:6b:90:b4:10:c8:39:
df:66:12:3c:34:14:6b:3d:e6:0a:da:eb:18:e9:ef:4f:e2:c4:
62:77:ad:e4:8e:84:38:c8:cf:e3:96:d9:a7:ec:de:4a:43:1d:
f1:2c:d7:96:53:e0:3c:58:d7:c0:77:65:64:ce:ce:50:14:20:
2d:32:db:d4:9f:d8:b8:6d:70:7d:0c:87:b7:4b:f1:e7:dd:e1:
0c:2a:2f:e8:46:83:01:e5:60:15:1e:58:27:a4:2e:89:21:d8:
ad:09:1a:d3:7f:f1:ba:cf:92:91:23:bc:6b:a5:1c:6d:bc:f2:
4d:30:a0:9c:15:ff:c2:e5:8b:60:a2:91:55:b2:77:70:f5:05:
2e:79:0e:88:2e:02:15:0b:1e:bd:98:04:d0:b0:88:5c:21:a1:
57:e0:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:43:35 2026 by rpki-client