
$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
File: Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft (raw, json)
Hash identifier: OzEAXKz0cAh7PFY8SQ0EzZaGaXEJFstbKVd94ifRvU0=
Subject key identifier: 9F:14:A5:82:99:68:B4:2D:F2:EA:E9:2B:CD:A2:4D:98:74:E9:21:4F
Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
Manifest number: 0209
Signing time: Tue 07 Apr 2026 02:36:04 +0000
Manifest this update: Tue 07 Apr 2026 02:36:04 +0000
Manifest next update: Tue 14 Apr 2026 02:36:04 +0000
Files and hashes: 1: Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl (hash: JylOPE05RMNrMGi3D3v4l4PVCAlv39jCbWY+9oMgWRs=)
2: 35C8F50C218A11EE959B7037C4F9AE02.roa (hash: 1pvzyLV21JPKIBe4+vpM9SsFH5SGt6T5Irf10NoZGcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 02:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718
Validity
Not Before: Apr 7 02:36:04 2026 GMT
Not After : Apr 14 02:36:04 2026 GMT
Subject: CN=69d46d94-7f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:4f:24:a0:0a:48:33:c6:0f:29:ff:01:24:
cf:ad:aa:6b:b8:ad:24:68:14:56:15:5d:2b:71:29:
08:f1:7f:1e:6c:4c:51:8d:27:bc:9a:cb:cf:9e:9b:
cd:2c:9e:ea:61:62:b0:ec:0e:b5:d2:1d:b8:d4:80:
9a:2a:94:da:bb:59:30:a1:e2:d2:64:38:e9:3d:18:
74:d1:2c:bd:fb:6d:a7:6f:96:85:1b:58:35:cc:26:
66:eb:17:f0:bf:fe:71:2d:43:e2:90:73:49:21:40:
84:1a:b9:e0:88:2d:92:42:45:81:24:cf:36:e4:0c:
c0:45:03:2b:8e:a7:c4:df:f0:ea:52:37:01:cf:e7:
12:f4:5e:50:1f:6c:03:03:83:f9:c5:f0:cc:6a:d0:
c1:32:30:ad:4a:c7:dc:db:62:33:e5:de:55:73:a1:
51:63:f7:6c:7a:6d:fe:42:1f:7f:7f:f3:07:d4:2c:
4a:58:40:b5:80:c0:8f:2a:82:50:51:72:e2:af:6b:
90:fe:94:76:f4:b0:b8:d9:f8:bb:ec:51:8e:47:b9:
c1:0b:eb:50:61:92:d6:d3:08:a3:16:28:40:89:bf:
66:61:ca:0e:71:6b:97:c2:41:2a:74:24:96:ed:78:
0b:30:77:69:04:ee:94:33:a2:1a:8a:75:86:e8:94:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:14:A5:82:99:68:B4:2D:F2:EA:E9:2B:CD:A2:4D:98:74:E9:21:4F
X509v3 Authority Key Identifier:
keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:58:78:60:08:75:0d:7b:21:bf:18:ad:e2:e5:c2:54:2f:f6:
fc:cf:41:b7:04:a6:be:cd:a6:2c:c7:da:d0:70:e4:44:df:e7:
d0:e3:93:eb:83:f2:b1:a4:53:a6:72:a8:4d:c6:aa:d9:68:b8:
db:d9:89:2d:f6:1b:0a:ea:cb:2e:2a:9d:cf:cb:2a:4b:1b:dd:
14:06:0e:13:78:ff:34:b9:f3:10:b1:ef:55:d2:68:b0:ef:88:
83:28:92:47:36:52:84:86:b6:54:ed:16:c9:74:4d:47:35:97:
cf:24:a6:b4:15:c4:11:60:01:48:9d:d3:07:79:a3:e4:44:c9:
67:59:04:a2:e5:d8:d1:75:85:e5:ca:b2:f5:18:28:2b:ed:76:
5f:50:71:7d:0c:1c:c1:34:58:c1:b2:de:cb:c3:3d:a1:77:80:
ad:c4:fa:92:5b:14:c4:8d:b7:e2:f6:33:cf:d5:4b:74:29:43:
bf:ac:16:f4:ba:5c:97:dc:57:31:04:58:f1:99:8f:6e:26:9e:
06:f7:13:f2:22:43:f7:72:17:27:84:e3:97:c3:31:a8:35:3a:
52:49:5e:13:05:e9:c4:e6:82:17:3e:0f:02:09:bf:0b:55:d1:
3e:f9:c6:c8:1c:b5:6b:e7:5b:1f:50:ab:68:a7:2b:8f:50:7e:
14:ea:07:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG
NEFENzg3MTgwHhcNMjYwNDA3MDIzNjA0WhcNMjYwNDE0MDIzNjA0WjAYMRYwFAYD
VQQDEw02OWQ0NmQ5NC03ZjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlZPJKAKSDPGDyn/ASTPrapruK0kaBRWFV0rcSkI8X8ebExRjSe8msvPnpvN
LJ7qYWKw7A610h241ICaKpTau1kwoeLSZDjpPRh00Sy9+22nb5aFG1g1zCZm6xfw
v/5xLUPikHNJIUCEGrngiC2SQkWBJM825AzARQMrjqfE3/DqUjcBz+cS9F5QH2wD
A4P5xfDMatDBMjCtSsfc22Iz5d5Vc6FRY/dsem3+Qh9/f/MH1CxKWEC1gMCPKoJQ
UXLir2uQ/pR29LC42fi77FGOR7nBC+tQYZLW0wijFihAib9mYcoOcWuXwkEqdCSW
7XgLMHdpBO6UM6IainWG6JQPXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8UpYKZ
aLQt8urpK82iTZh06SFPMB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx
NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTVCNi9GMDczMEM4ODIxNjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldC
VV9OSUxvM3BSN1gwclhoeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWFh4YAh1DXshvxit4uXCVC/2/M9BtwSmvs2mLMfa0HDkRN/n0OOT64PysaRT
pnKoTcaq2Wi429mJLfYbCurLLiqdz8sqSxvdFAYOE3j/NLnzELHvVdJosO+IgyiS
RzZShIa2VO0WyXRNRzWXzySmtBXEEWABSJ3TB3mj5ETJZ1kEouXY0XWF5cqy9Rgo
K+12X1BxfQwcwTRYwbLey8M9oXeArcT6klsUxI234vYzz9VLdClDv6wW9Lpcl9xX
MQRY8ZmPbiaeBvcT8iJD93IXJ4Tjl8MxqDU6UkleEwXpxOaCFz4PAgm/C1XRPvnG
yBy1a+dbH1CraKcrj1B+FOoH9A==
-----END CERTIFICATE-----
Generated at Tue Apr 7 09:50:34 2026 by rpki-client