
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json)
Hash identifier: zcmdrUsKstlKghqIeFuftwsZyk1O4uBDDYdTi8N/bTg=
Subject key identifier: F4:9D:11:5C:4A:63:0F:BE:2B:AD:AE:1B:21:1E:04:9B:0A:CF:8C:9B
Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
Certificate serial: 08A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
Manifest number: 0897
Signing time: Sat 04 Apr 2026 20:20:13 +0000
Manifest this update: Sat 04 Apr 2026 20:20:12 +0000
Manifest next update: Sat 11 Apr 2026 20:20:12 +0000
Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: zvfhvksC929u3bklJItzQghJN2SnBtDspQN5kH4Wu1E=)
2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: QNcFW8jETPGZaiZI02ZkhuoyJg75vptFUOTMezljxJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl
rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701
Validity
Not Before: Apr 4 20:20:12 2026 GMT
Not After : Apr 11 20:20:12 2026 GMT
Subject: CN=69d1727c-9b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:3d:7c:aa:48:bc:f1:13:80:8f:28:1f:9c:
cc:43:3e:d6:de:b8:e3:bc:59:7d:9a:b8:79:ff:3e:
44:94:9f:58:7c:2f:85:cc:f4:7e:ee:a9:04:64:3f:
63:12:92:06:b0:7a:78:ff:bd:c5:af:0e:32:db:76:
07:9b:cf:3e:37:65:1a:9a:b4:4a:d3:db:2e:83:35:
c1:7b:6d:da:61:cf:2e:90:7d:ae:7b:eb:e5:ba:3c:
2a:76:02:20:d5:86:92:1c:70:dc:1b:9f:3a:d2:1e:
3f:e1:49:5f:f8:99:ef:ac:d8:f5:0d:e9:5a:1a:2a:
b7:86:06:e2:31:b6:d6:fc:21:d2:8b:a2:b6:64:da:
8e:bd:05:1a:3f:10:38:d1:09:0c:65:f2:03:f7:a8:
2e:4c:7d:b0:f4:73:2e:b7:c6:90:ce:6d:9f:e1:48:
df:fd:07:49:58:cc:8a:ac:29:45:3d:be:08:83:d8:
61:7c:c1:49:5d:e6:a6:0a:50:23:bc:9f:87:fb:04:
c8:50:68:d8:09:21:a8:d5:d1:82:c1:07:6f:14:02:
24:2b:d7:59:b1:89:cd:f9:51:0c:2d:97:00:f5:a4:
0a:18:3d:41:30:41:07:45:87:5a:e2:72:cf:e4:fe:
81:49:a0:11:22:e7:ea:ab:82:91:82:8e:92:69:e5:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9D:11:5C:4A:63:0F:BE:2B:AD:AE:1B:21:1E:04:9B:0A:CF:8C:9B
X509v3 Authority Key Identifier:
keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:b7:f3:63:f8:75:87:d8:d4:71:57:c6:ff:1a:4b:f2:7d:bc:
a3:94:da:44:94:a1:2a:73:84:a7:5f:a4:3a:d1:e5:36:73:04:
8c:1a:a7:64:f7:dc:7e:a7:f9:f9:85:ff:0e:fc:21:59:82:22:
8f:14:97:ce:f6:2f:f5:19:48:6e:ac:54:87:09:d3:b9:af:70:
8b:4b:e0:dd:54:4a:e7:ee:27:bf:29:2d:d5:1d:b5:a3:7d:04:
68:38:80:9f:55:ef:dc:02:df:2d:a3:1f:f0:27:52:8e:2b:77:
f5:75:2e:ed:f6:18:87:f9:ce:33:c5:7b:b4:a8:ee:56:d2:93:
52:56:b8:12:92:3b:10:4b:52:e0:53:a0:e8:ad:53:50:d1:85:
86:bb:6a:2e:84:c9:89:82:77:e9:2a:a8:04:fd:4c:28:48:f7:
86:21:f7:b3:43:74:4a:0e:29:3b:ac:c2:7e:ed:f2:50:89:44:
99:b1:f7:43:af:0e:8b:64:d5:81:79:9f:1b:3d:79:42:47:b9:
6e:c7:7b:6d:f8:d4:6f:39:ea:85:94:6f:da:d8:db:cb:b3:7c:
7f:2a:af:1b:5e:7c:5c:86:6e:fa:2d:59:90:35:fe:bb:b5:79:
f8:25:7d:5e:17:c3:48:b6:7a:5d:fc:8e:96:43:3c:ff:b8:08:
7b:75:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:09 2026 by rpki-client