
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier: 2O0JeHGuvEkzTE0C1btBoLL5HhWWSupWDlpYhkxby/U=
Subject key identifier: 2B:A6:29:DE:64:04:96:0C:0A:7D:17:FE:D3:CF:D8:C8:37:2E:F8:63
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial: 0981
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number: 0978
Signing time: Sat 04 Apr 2026 19:51:32 +0000
Manifest this update: Sat 04 Apr 2026 19:51:31 +0000
Manifest next update: Sat 11 Apr 2026 19:51:31 +0000
Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: A3R5grwxP2Eh2l4wCvdV1xZsI3HR7ZDeC4FYSt1463s=)
2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 19:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Validity
Not Before: Apr 4 19:51:31 2026 GMT
Not After : Apr 11 19:51:31 2026 GMT
Subject: CN=69d16bc4-a1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:3c:fe:ea:fe:8a:c8:d0:e0:4d:7e:55:4c:
f4:15:86:7b:8c:f9:5f:4d:73:46:24:0f:10:c3:d1:
70:2b:c0:c4:80:15:e7:b4:8b:b3:37:7f:28:31:81:
0e:39:10:a6:ea:54:3a:3b:b3:15:e8:1c:4e:e0:29:
f0:32:06:e5:79:8d:4f:b0:cb:2b:22:01:4d:41:c4:
83:02:d9:e9:55:cf:d1:24:02:a1:f9:0d:e8:7a:97:
54:d8:b6:a4:4a:32:83:36:66:8c:e3:2e:99:e2:99:
67:cf:b8:17:aa:43:61:6d:77:dc:9b:2f:ab:9f:ea:
2e:e4:cf:48:b6:84:5b:a0:87:f3:85:c4:6b:cb:f9:
1b:ad:84:f3:42:d0:5c:ab:de:2d:68:30:33:09:e6:
dd:b7:a4:c2:e0:66:1f:41:a9:66:d9:d6:ea:ae:71:
2f:3a:b9:44:5a:be:f2:ea:31:0c:8a:48:d4:fc:fa:
a8:12:f0:84:80:61:48:e5:fe:38:d4:31:da:c6:81:
fd:8c:d4:64:13:ca:2a:60:0e:8f:95:a3:d2:8a:49:
5a:a9:87:d0:19:a3:fb:c1:8a:03:5c:1d:0b:6c:2e:
c9:9f:e8:45:c1:be:2f:46:90:c4:e4:23:8d:1a:aa:
b2:55:d7:91:0a:b4:8d:1d:76:de:da:bb:9b:39:02:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:29:DE:64:04:96:0C:0A:7D:17:FE:D3:CF:D8:C8:37:2E:F8:63
X509v3 Authority Key Identifier:
keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:86:a1:8b:68:8e:5f:c1:39:a5:d7:be:82:d3:43:f6:3b:38:
4f:ca:d4:9b:bb:84:a2:b7:71:9b:8a:ac:03:4c:57:b1:16:63:
22:69:a6:bc:6a:df:f9:b0:e6:39:4d:07:fd:8d:f4:a7:f9:26:
cb:d4:a3:89:ea:9e:78:68:71:b5:96:3a:d2:ad:7f:f7:22:72:
c9:ca:a2:86:b6:65:46:7e:44:73:91:21:13:1e:30:27:19:88:
02:ae:26:f4:a9:36:d5:5d:c9:63:e7:06:ca:6f:fd:f0:12:6d:
ce:4e:fd:62:2c:77:86:5e:bd:b2:c4:d9:0d:18:32:5b:db:48:
0f:99:0a:74:62:78:5f:d8:95:69:b2:e3:83:35:8b:34:0a:77:
e2:2b:31:15:3a:08:67:45:6d:42:4a:07:c4:53:6f:86:aa:27:
6d:db:ab:1a:85:d7:2c:85:05:a9:90:b2:c7:a2:5d:d2:cf:54:
f4:c6:ce:37:e9:2e:1c:f9:4d:7e:10:c8:5a:f8:84:25:fc:c6:
81:e4:bf:76:a7:31:83:7c:bf:07:0f:57:0d:91:31:09:7b:41:
03:7f:6b:d3:ea:67:69:8f:0b:98:84:39:e8:28:62:b2:d7:11:
8a:da:f3:d7:b5:40:1f:1d:6d:b8:2e:68:42:03:c1:e9:ac:df:
1d:54:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:58 2026 by rpki-client