
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
File: FeAstOfcuwrM4igRnP-ANDhil78.mft (raw, json)
Hash identifier: 2BFpnMLX+CTMU958bgjZB/WE4NTRLWOm9FAcCBaHbZY=
Subject key identifier: 76:FB:20:20:91:48:4A:9D:0C:C8:88:C4:5C:33:D5:A2:74:0D:B0:7B
Authority key identifier: 15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
Certificate issuer: /CN=A91BC15C/serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Certificate serial: 352C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
Manifest number: 3527
Signing time: Sat 04 Apr 2026 15:04:00 +0000
Manifest this update: Sat 04 Apr 2026 15:04:00 +0000
Manifest next update: Sat 11 Apr 2026 15:04:00 +0000
Files and hashes: 1: FeAstOfcuwrM4igRnP-ANDhil78.crl (hash: SjCXrYNspTF893Hqw1Yecj7DSmtgrU2SnDoCYsha61w=)
2: A88B0898EC9911EE9627923CC4F9AE02.roa (hash: Md4TX499kG6Z3N25ExlcNJXGAzV59nM+xoDsohYAAQI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13612 (0x352c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC15C, serialNumber=15E02CB4E7DCBB0ACCE228119CFF8034386297BF
Validity
Not Before: Apr 4 15:04:00 2026 GMT
Not After : Apr 11 15:04:00 2026 GMT
Subject: CN=69d12860-0a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:c2:cb:36:65:25:61:16:ac:c0:00:c5:6e:
e0:48:5c:8c:e2:ba:90:ad:dc:c0:c8:a2:d1:1e:7c:
b8:9a:d1:09:a7:2b:d3:90:6b:76:a2:83:e7:ca:ab:
6f:ac:cf:94:b0:6d:dd:8c:e1:bd:6b:56:d4:6e:2c:
27:bd:1e:dc:03:2b:c5:8d:38:4c:55:93:70:e5:c9:
a6:b5:8b:45:72:7b:05:bd:2d:73:f6:ae:ee:a4:77:
04:f9:2a:da:ac:94:d7:6b:77:f1:8d:64:ff:22:96:
ba:51:5b:97:f7:2c:91:ed:67:b4:a5:f5:33:26:39:
96:30:09:43:d5:10:cd:8a:76:19:6d:f5:2d:a0:49:
5f:99:ae:61:0a:ae:05:e6:f8:6e:fb:b5:bd:36:52:
a9:16:f8:d5:d3:a4:d9:8a:a8:7c:84:da:96:37:ab:
05:8a:96:41:7f:d9:1f:0f:aa:c8:cc:a1:f3:8b:d8:
31:40:97:31:be:97:6b:7d:a3:17:24:d1:04:2f:f8:
69:43:1a:39:30:4a:a2:18:fb:bb:cc:90:33:08:90:
60:b7:16:ec:4c:ef:f8:53:4c:08:c1:2d:28:34:d0:
cb:89:c9:c7:ee:b0:f4:fe:9b:f3:57:99:cc:e9:38:
9b:f3:97:79:2e:68:96:fe:c3:5c:8b:db:da:2c:b1:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FB:20:20:91:48:4A:9D:0C:C8:88:C4:5C:33:D5:A2:74:0D:B0:7B
X509v3 Authority Key Identifier:
keyid:15:E0:2C:B4:E7:DC:BB:0A:CC:E2:28:11:9C:FF:80:34:38:62:97:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeAstOfcuwrM4igRnP-ANDhil78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC15C/6BA359301DA211E2B4B6449508B02CD2/FeAstOfcuwrM4igRnP-ANDhil78.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:88:8a:92:37:f8:6a:e8:d8:5e:98:e4:75:11:2d:7e:b9:ff:
ff:ef:02:45:41:d1:91:ca:d2:50:a2:ae:b7:13:09:96:bf:e3:
6a:c7:2b:db:e4:82:2c:ae:a2:ec:9d:ae:15:30:25:db:03:17:
c6:9a:e2:58:b0:56:74:31:5b:ec:8e:a9:a8:e7:7e:49:e9:d6:
53:5c:8b:80:f1:fb:b5:20:57:ab:61:8a:4d:6c:d0:e5:e1:1d:
5a:7e:05:cb:86:30:b9:be:47:d4:8b:4e:ab:b5:f3:1a:a0:b7:
e7:90:b2:45:fb:f2:f6:32:5f:cd:7f:48:ed:eb:39:5a:c1:8d:
3b:f9:63:99:b3:e2:25:db:be:77:be:c0:04:5b:56:03:8b:fb:
83:16:57:13:86:59:1e:ae:e6:26:82:06:59:21:5e:2e:8c:92:
68:28:ea:2c:74:3c:b4:f0:c8:72:00:d4:96:41:7c:51:12:15:
5b:7e:84:44:f2:c3:9c:d9:63:b9:bd:f7:10:c7:0b:bc:62:df:
5c:5b:1c:36:89:34:75:0f:ed:5a:33:70:fa:28:d0:8b:71:75:
45:6e:23:0a:02:18:58:4e:ee:16:87:29:e6:47:d8:38:29:df:
e6:85:5c:a8:d9:ff:78:85:a8:07:1b:ff:8e:a7:05:eb:13:eb:
23:69:f6:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMxNUMxMTAvBgNVBAUTKDE1RTAyQ0I0RTdEQ0JCMEFDQ0UyMjgxMTlDRkY4MDM0
Mzg2Mjk3QkYwHhcNMjYwNDA0MTUwNDAwWhcNMjYwNDExMTUwNDAwWjAYMRYwFAYD
VQQDEw02OWQxMjg2MC0wYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgrCyzZlJWEWrMAAxW7gSFyM4rqQrdzAyKLRHny4mtEJpyvTkGt2ooPnyqtv
rM+UsG3djOG9a1bUbiwnvR7cAyvFjThMVZNw5cmmtYtFcnsFvS1z9q7upHcE+Sra
rJTXa3fxjWT/Ipa6UVuX9yyR7We0pfUzJjmWMAlD1RDNinYZbfUtoElfma5hCq4F
5vhu+7W9NlKpFvjV06TZiqh8hNqWN6sFipZBf9kfD6rIzKHzi9gxQJcxvpdrfaMX
JNEEL/hpQxo5MEqiGPu7zJAzCJBgtxbsTO/4U0wIwS0oNNDLicnH7rD0/pvzV5nM
6Tib85d5LmiW/sNci9vaLLF3WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHb7ICCR
SEqdDMiIxFwz1aJ0DbB7MB8GA1UdIwQYMBaAFBXgLLTn3LsKzOIoEZz/gDQ4Ype/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzE1Qy82QkEzNTkzMDFE
QTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3ck00aWdSblAtQU5EaGls
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZlQXN0T2ZjdXdyTTRpZ1JuUC1BTkRoaWw3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzE1Qy82QkEzNTkzMDFEQTIxMUUyQjRCNjQ0OTUwOEIwMkNEMi9GZUFzdE9mY3V3
ck00aWdSblAtQU5EaGlsNzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmIiKkjf4aujYXpjkdREtfrn//+8CRUHRkcrSUKKutxMJlr/jascr2+SCLK6i
7J2uFTAl2wMXxpriWLBWdDFb7I6pqOd+SenWU1yLgPH7tSBXq2GKTWzQ5eEdWn4F
y4Ywub5H1ItOq7XzGqC355CyRfvy9jJfzX9I7es5WsGNO/ljmbPiJdu+d77ABFtW
A4v7gxZXE4ZZHq7mJoIGWSFeLoySaCjqLHQ8tPDIcgDUlkF8URIVW36ERPLDnNlj
ub33EMcLvGLfXFscNok0dQ/tWjNw+ijQi3F1RW4jCgIYWE7uFocp5kfYOCnf5oVc
qNn/eIWoBxv/jqcF6xPrI2n2cg==
-----END CERTIFICATE-----
Generated at Sun Apr 5 23:50:57 2026 by rpki-client