
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier: fwz2klCOSIcNNuOTRVp136KYM2nzcnMOXEMi5xSBDzY=
Subject key identifier: 8C:63:B3:25:A7:D6:52:40:5F:4A:D5:AD:A2:15:99:49:C2:2A:6E:63
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial: 0D22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number: 0D08
Signing time: Sat 04 Apr 2026 18:02:27 +0000
Manifest this update: Sat 04 Apr 2026 18:02:27 +0000
Manifest next update: Sat 11 Apr 2026 18:02:27 +0000
Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: pT6kR3cMQmUhfxD/iz+gMuoaqEmOX+uifvdD1nqkrn8=)
2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: fNaidmYlOzWHjrBiA/U1bBlqdgJlWr5NlKnTyGVkvtg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Validity
Not Before: Apr 4 18:02:27 2026 GMT
Not After : Apr 11 18:02:27 2026 GMT
Subject: CN=69d15233-0604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:3c:8f:63:8f:7d:1f:95:82:39:45:bf:26:
b7:93:ae:69:a8:51:ec:e9:81:ad:c3:5d:68:59:12:
0c:4a:b6:2a:33:64:11:7b:c8:99:d2:9f:c9:68:97:
74:e4:ca:4e:9a:48:e6:e2:d4:48:07:d5:a2:59:10:
97:16:d3:8b:1d:1e:f3:25:4b:f3:6b:a8:e4:11:47:
59:ca:7b:5d:aa:31:e4:99:35:fe:f2:68:3b:cc:68:
8b:cb:4b:84:3e:74:31:1c:7a:24:6a:33:5f:5c:5c:
5e:49:b0:54:2e:f8:e6:54:39:6d:78:1d:78:09:41:
0f:2e:5f:b5:3f:34:ea:26:8c:e6:e4:5d:dc:a4:fd:
36:73:40:da:1f:92:dd:39:20:a6:ce:bf:18:bb:e4:
62:40:92:b9:c3:99:c4:2b:aa:a3:ba:be:11:87:e6:
fa:77:e5:78:a1:31:9f:2f:2d:1b:80:7f:24:43:c7:
78:48:5e:fb:bf:d9:07:92:9c:da:c3:9e:44:38:85:
70:d7:5e:44:49:40:f9:df:f6:ea:c8:28:b6:b7:ea:
f1:24:c1:cf:93:19:8d:bc:c8:3c:be:08:7d:68:fd:
c4:75:94:2c:3d:4c:66:6c:39:37:fe:fc:78:7e:47:
2a:81:37:82:81:76:75:8a:85:d8:8e:25:73:99:32:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:B3:25:A7:D6:52:40:5F:4A:D5:AD:A2:15:99:49:C2:2A:6E:63
X509v3 Authority Key Identifier:
keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:23:bc:c0:34:e2:a6:3b:63:52:ae:d4:c2:f7:e4:75:e1:34:
64:0e:27:51:aa:2a:dd:e6:57:92:ef:64:86:23:2a:39:9c:93:
be:c4:7c:25:0d:81:ed:4d:39:97:b2:5d:94:82:fd:13:37:8a:
04:aa:80:9b:ac:7c:3d:70:97:d5:3e:86:45:06:4d:c7:0b:01:
7a:91:4a:3a:29:0e:14:55:86:8f:b5:39:e8:5b:d0:99:34:6f:
fb:5c:03:41:38:2a:39:d4:36:91:af:79:02:89:06:e9:4d:20:
a1:05:ad:0f:dd:26:13:bb:4f:17:44:1d:c3:29:2c:52:1f:74:
95:9f:1d:dc:fd:69:dd:9f:9a:88:ee:5b:07:ee:a3:df:6d:28:
0f:f7:89:75:2c:df:0b:ff:1f:86:f1:01:ce:2e:5f:0f:26:2b:
2b:29:f4:8e:aa:93:fb:8c:30:a6:8a:99:1b:59:bc:a0:68:02:
eb:1c:cc:2a:2c:2f:87:19:1e:80:8f:78:36:0f:77:60:aa:1d:
12:b2:b4:22:d5:b7:28:42:4b:2d:a7:77:df:85:43:86:48:46:
61:bc:f5:f7:08:73:e6:f5:e9:96:5c:9a:b0:1a:63:d6:26:93:
ef:03:6e:1a:6c:41:0b:30:75:ea:3d:de:67:cc:23:25:98:3d:
3a:35:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:08:35 2026 by rpki-client