
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json)
Hash identifier: piXP+l/X38u9EbwkMapoQ6/CLhHIaCJeNXjZJhmTvJ4=
Subject key identifier: 47:A2:E8:D5:AC:47:12:66:09:F4:25:EE:85:58:0C:C3:C7:76:AB:E3
Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Certificate serial: 04F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
Manifest number: 04E7
Signing time: Sat 04 Apr 2026 23:36:38 +0000
Manifest this update: Sat 04 Apr 2026 23:36:37 +0000
Manifest next update: Sat 11 Apr 2026 23:36:37 +0000
Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: T+ZB1rot0NNQ52XHP/4RlEkFlC1PQa6uz53mQjbqNHY=)
2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: HsF8gy96J2wsoICfYmcwznwixkV1OQ/RoRjC/SmAq8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:36:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Validity
Not Before: Apr 4 23:36:37 2026 GMT
Not After : Apr 11 23:36:37 2026 GMT
Subject: CN=69d1a085-5ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:c7:60:81:91:9e:bc:9f:03:24:5b:4d:c6:
58:ba:c6:8a:1b:cc:5d:05:0d:81:37:02:51:9a:13:
70:c2:c3:0a:ad:9e:9b:9e:b4:1b:c5:42:55:38:f7:
c8:45:a6:d0:17:ce:fd:ab:b5:24:c8:b4:f1:e5:61:
ca:40:cb:a0:a5:c0:b9:4d:fa:b8:11:44:36:52:d1:
74:72:cd:37:74:90:36:dc:c2:17:ac:70:49:60:1f:
be:21:a0:a9:2b:69:b9:8a:dc:93:a6:a2:44:97:98:
d4:76:8c:e2:85:75:6b:7f:72:e5:f6:9b:ab:82:9d:
c9:91:f5:d1:ac:3c:8d:b0:bf:a1:46:14:f5:05:76:
3e:7f:81:37:82:2a:b6:11:cc:9e:4c:31:52:a8:d9:
ff:57:df:31:5d:63:f0:c4:7d:e7:54:c1:14:47:d5:
bd:ba:02:74:dc:df:72:8a:39:c8:c1:60:5c:1d:87:
f2:65:cc:e7:9f:a2:80:aa:dc:ad:0d:4d:72:e5:dd:
c5:ba:31:96:c0:74:a0:6f:0b:81:a4:a2:46:c5:26:
84:b0:fe:55:fb:69:83:40:9f:c5:22:1f:01:b5:65:
b1:ec:59:d2:59:45:6d:8b:91:d3:8e:4e:82:2c:79:
3a:cf:4b:c9:df:34:68:bc:29:b5:a1:ac:03:1f:0b:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:E8:D5:AC:47:12:66:09:F4:25:EE:85:58:0C:C3:C7:76:AB:E3
X509v3 Authority Key Identifier:
keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:40:87:14:49:bd:4a:15:30:db:02:c4:70:18:a9:ee:96:14:
35:be:91:9d:31:d8:11:cf:1f:7c:bf:a3:58:98:e3:07:0f:32:
e8:1c:d0:59:71:e2:bf:c9:eb:33:61:75:5e:f6:15:3c:6c:a4:
19:ce:5c:a0:45:d8:a4:dd:5c:2c:21:6a:87:22:9a:6f:6e:44:
29:df:e8:73:93:82:f1:c7:ab:92:d5:e2:90:c2:79:65:da:4b:
e2:d8:5a:0a:cc:17:bd:c8:ad:6d:24:d1:8e:88:fc:9d:b2:c5:
47:06:e0:86:91:da:0d:68:88:3a:f1:05:e2:06:3d:84:17:b2:
23:36:7b:40:7a:f4:72:63:17:c9:57:8e:e3:a4:3c:ef:32:1c:
13:d2:43:0d:c7:91:8a:99:52:ac:92:c0:28:08:fe:91:5f:95:
84:8f:e7:94:7c:58:e0:3e:c5:29:17:ad:d3:39:4e:ae:5b:53:
f8:89:3f:eb:6e:a3:9e:cd:73:b7:93:6b:ca:b8:12:2f:29:bc:
85:9d:18:fd:a0:b0:2b:c6:4a:3a:ac:92:40:89:c8:4a:77:70:
8e:41:44:8a:81:16:3f:f5:49:4c:3d:b2:19:03:84:c7:25:de:
98:da:c4:63:07:75:c1:82:d5:1f:42:24:44:df:9a:ca:ae:e2:
3c:b2:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:41 2026 by rpki-client