
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier: +jxsm+ku0R5DE9pxD1fx8hS1si4OWwkNfaBRhZS0RJs=
Subject key identifier: 59:55:CB:C5:81:32:CD:CB:25:01:5D:0A:F2:88:67:C9:5E:8B:0A:C9
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 0737
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number: 0722
Signing time: Sat 04 Apr 2026 21:39:19 +0000
Manifest this update: Sat 04 Apr 2026 21:39:19 +0000
Manifest next update: Sat 11 Apr 2026 21:39:19 +0000
Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: eMeNgbg8opS+puM0aFxVxS2GEstwjNkoTd/H6KjOU20=)
2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 21:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1847 (0x737)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Apr 4 21:39:19 2026 GMT
Not After : Apr 11 21:39:19 2026 GMT
Subject: CN=69d18507-defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:8a:4b:d5:a2:1a:7d:88:ca:ba:92:ea:a6:
e6:98:5a:1e:cc:b9:07:3c:93:93:a7:44:d5:1a:4f:
69:a7:44:35:c1:35:77:a0:d1:43:8d:15:54:7c:74:
a2:a0:9c:c0:22:4d:a3:14:7e:97:3c:d2:4c:47:dd:
b8:68:8e:59:af:f9:bf:96:7f:62:62:a2:ba:53:8c:
77:3d:f5:1c:aa:89:ce:78:76:31:79:2b:d5:28:79:
60:29:66:dd:24:c5:f0:d8:e3:e0:a0:0f:bf:a4:22:
8d:14:2c:06:02:31:f5:f6:3e:5e:05:ec:28:3a:6b:
6f:ff:0c:98:ff:66:a2:fb:02:4a:c5:40:8c:84:8e:
f9:9e:46:5f:03:27:e3:e2:bd:00:66:d6:04:01:0f:
cb:f2:b8:df:09:69:04:55:c8:04:21:7d:54:a1:5d:
c5:c3:10:d2:e2:5f:c0:ab:7a:58:d3:35:bd:fb:31:
14:9e:c2:21:b5:36:74:c5:a6:4e:41:b0:8a:53:e3:
82:a8:f1:2e:00:91:97:15:f6:a5:d0:ef:c4:fb:c7:
15:1b:5e:c8:f3:ce:8c:40:0c:d4:62:ab:0d:2f:91:
2e:2a:46:48:36:16:d6:3d:3d:1d:8f:32:02:08:02:
c5:5e:aa:74:f0:5a:0d:2d:a6:97:0e:b0:18:13:8a:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:CB:C5:81:32:CD:CB:25:01:5D:0A:F2:88:67:C9:5E:8B:0A:C9
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:36:10:8a:84:8f:27:36:38:b3:f4:88:8c:58:b6:22:d5:c7:
2d:f4:a3:b7:02:2a:f5:98:f3:12:ab:60:09:37:04:b6:ff:8c:
f5:a6:aa:c7:c2:09:36:da:9d:a0:79:6f:86:4f:f8:85:8f:1d:
6c:ba:57:d2:8d:97:af:c3:9c:af:d1:df:48:ca:da:09:66:f3:
0b:af:7a:1f:42:2c:24:b5:d2:d9:82:79:53:a6:7c:22:96:84:
37:44:51:c6:03:90:ee:c2:57:a1:78:58:5b:e4:78:5a:fa:1b:
56:a6:91:1f:c3:fb:3d:f2:35:7c:52:ee:68:9d:7e:2b:3f:3c:
4c:95:9b:9d:fc:0d:8d:0d:39:2d:a4:a4:78:27:13:26:04:98:
8a:a4:60:bb:64:2d:02:f1:ea:dc:67:1d:94:8f:26:41:99:ea:
45:96:01:14:68:11:dd:7c:d2:46:65:cb:32:38:67:24:92:c4:
15:14:aa:b0:70:99:cb:b3:29:73:72:89:40:7c:25:89:85:60:
83:01:d1:21:4a:43:d5:97:03:96:0b:4a:10:f7:a8:a3:6f:3f:
be:b2:34:47:e8:0a:b3:d6:f8:d0:ca:d3:cc:54:a7:bb:1f:2a:
8c:c6:01:49:2b:9e:fd:71:f9:19:df:57:c3:78:94:87:c0:c8:
39:40:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:22 2026 by rpki-client