
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: s/n3iYUuUYKYWLQN1bfOY+b2sOO6E6FSiU2OflaU7bQ=
Subject key identifier: B8:FE:54:78:C7:22:59:C3:64:01:17:67:E5:7C:F7:0D:97:09:B9:84
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 045F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 044D
Signing time: Sun 05 Apr 2026 00:01:09 +0000
Manifest this update: Sun 05 Apr 2026 00:01:09 +0000
Manifest next update: Sun 12 Apr 2026 00:01:09 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: tXYKsrmtvAfrY1FIie+60miBmLw80Y3UZjloT/ZyjSQ=)
2: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
3: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
4: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
5: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
6: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119 (0x45f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Apr 5 00:01:09 2026 GMT
Not After : Apr 12 00:01:09 2026 GMT
Subject: CN=69d1a645-1234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:dd:f5:b9:01:1e:34:e4:94:1e:d7:af:b8:
ff:1c:29:50:6d:3f:89:26:aa:10:fc:6c:93:3f:8d:
da:4d:32:9d:85:89:61:f9:3a:97:68:d9:6d:c9:be:
75:32:e8:e6:ab:b8:90:fc:70:c2:35:a3:fa:ca:aa:
3d:be:aa:4b:5a:c8:55:fd:11:cc:5d:25:35:17:68:
12:e9:db:e1:2c:81:ca:50:0b:4f:9e:f1:1d:20:17:
52:a5:ed:b7:5f:a6:b9:81:35:ef:de:96:b9:1e:1a:
17:8f:47:8a:60:02:b0:08:bd:2e:a9:0e:8c:ba:2b:
72:7e:4e:2f:f1:e7:0b:17:aa:cb:0e:70:65:05:77:
f8:ff:dc:c9:ee:d2:e0:fd:86:53:3f:5d:16:bf:6a:
65:a2:d3:e7:2d:c4:41:85:e5:3b:b0:17:ec:3e:b1:
df:23:76:ed:13:a9:39:13:ac:bc:49:3e:38:fb:68:
f6:0b:c5:b7:71:56:d1:2b:10:b9:83:98:51:26:4d:
c8:bb:c3:8f:df:9f:88:22:30:6d:bf:b4:45:50:1d:
44:33:0d:a5:6a:ac:25:f1:ea:6c:e5:ff:c6:0c:e7:
99:90:e9:ad:b2:ed:0d:71:96:a6:4c:06:eb:7b:66:
9b:6e:03:19:d2:d8:7a:f0:58:5f:57:5e:a4:ef:88:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FE:54:78:C7:22:59:C3:64:01:17:67:E5:7C:F7:0D:97:09:B9:84
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4a:e1:49:3b:28:dd:29:12:6f:3e:f0:e1:6e:fd:02:18:c6:
b9:6b:7b:2e:fb:8d:38:45:67:6a:b0:8f:9b:f5:53:66:6f:df:
43:2a:f0:f1:bc:5e:1b:92:61:cf:7d:40:64:b6:4d:ce:5b:9c:
77:0f:da:bb:a1:2e:63:f3:a0:7d:c9:c0:91:31:dd:b4:cd:c6:
52:7a:e0:ab:0c:57:b8:de:75:78:91:20:67:8b:55:59:fa:20:
b2:bc:cd:81:bd:bd:16:60:42:92:a6:1f:53:ab:6f:e8:a4:5c:
7e:83:98:e3:9a:36:e0:4b:1d:44:58:32:03:fb:00:8f:bc:7d:
dc:75:a4:bb:8f:ca:ed:ea:83:2b:9a:ef:80:29:f8:a3:e4:bb:
ff:67:21:89:85:5d:6f:6a:a5:36:9a:b5:4b:c6:f5:14:a9:7d:
fc:4a:cf:20:25:09:48:92:be:e8:3b:41:f5:d2:82:52:17:61:
67:f5:91:eb:ef:77:3e:7e:bf:95:1a:23:25:37:92:91:4b:44:
87:d2:cb:88:79:b3:e4:24:1f:61:21:4f:93:04:e6:d9:66:65:
4a:c0:50:7d:d0:ee:38:33:b0:2f:b6:f2:f4:1a:08:f1:77:16:
97:f3:9a:76:30:02:54:56:b2:fc:4f:bb:c0:05:24:b5:d0:ef:
95:e8:37:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:21 2026 by rpki-client