
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
File: fTg2zUKn77NatGSlAOJiVxXVzqM.mft (raw, json)
Hash identifier: S5r/buFHsbxH8fhxC/sHBWyl/kIte1+GUCD6xr4O3RQ=
Subject key identifier: E0:AE:89:B3:44:5C:80:6A:CD:5F:8D:1B:29:75:93:96:5D:98:57:B0
Authority key identifier: 7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
Certificate issuer: /CN=A91F8949/serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
Manifest number: 0C
Signing time: Sun 05 Apr 2026 08:28:29 +0000
Manifest this update: Sun 05 Apr 2026 08:28:29 +0000
Manifest next update: Sun 12 Apr 2026 08:28:29 +0000
Files and hashes: 1: fTg2zUKn77NatGSlAOJiVxXVzqM.crl (hash: 0+JforomI61tr6CdCA6pPx4MZyF6AcjhgiNs+CAXT0M=)
2: 71A9485224D311F1BAC6A199AA833773.roa (hash: YplJkElj+wTMuvLaT6qEqUoRVs6FwFRdfKKxyCyC/nM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 08:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8949, serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Validity
Not Before: Apr 5 08:28:29 2026 GMT
Not After : Apr 12 08:28:29 2026 GMT
Subject: CN=69d21d2d-5594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:81:6a:fe:41:cb:9a:e4:13:a5:ca:0c:80:
f4:50:12:16:c8:59:43:1b:bb:6b:e5:0a:05:61:cf:
a8:52:52:3d:c8:0d:44:61:50:00:e4:9f:33:29:7c:
c7:9a:28:31:47:12:ca:e3:75:40:97:95:88:a2:ea:
9e:c9:37:2b:82:49:23:5f:23:ce:6d:2a:fe:2c:cc:
7c:77:11:d9:e1:d7:4e:5a:95:a9:31:70:7b:1e:49:
4d:d9:c9:59:a0:a8:97:82:a9:6c:c5:6c:d4:4a:1a:
56:e2:3f:a5:0c:45:7b:72:a4:cd:45:99:48:16:2f:
23:ca:15:7c:7c:dc:33:9d:50:b9:70:7c:85:51:a9:
8b:1b:25:84:b0:9c:1b:69:22:bd:ca:1d:4a:08:ff:
49:68:7b:b4:af:08:03:5b:b1:10:f0:94:ed:1f:74:
58:48:67:9e:41:3a:a2:42:98:8b:4b:26:0e:f9:14:
e0:20:0c:c7:be:9d:d1:95:20:b6:bb:f2:5a:20:e7:
06:14:b2:04:a4:d1:47:b4:14:38:66:44:03:0b:0e:
a7:69:6d:0a:43:f0:b3:99:d2:5b:c0:66:c8:95:f8:
1b:1e:e5:e0:94:cf:f4:62:fa:2e:5e:d8:ab:45:20:
a4:39:ff:4c:31:a2:e8:1f:43:4b:0a:d5:86:7e:21:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AE:89:B3:44:5C:80:6A:CD:5F:8D:1B:29:75:93:96:5D:98:57:B0
X509v3 Authority Key Identifier:
keyid:7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:6c:c0:b7:f8:5b:74:8d:a1:cd:ca:89:f2:7c:7c:b4:64:58:
2d:37:1b:85:f8:b2:a8:30:e8:a5:b6:26:58:0f:02:56:8a:58:
ac:7b:28:0d:5c:12:be:e1:8d:12:05:b4:2b:e4:4a:38:3c:e4:
36:4a:59:9d:40:21:c4:28:28:9b:5e:9f:9b:45:fd:7b:f3:d4:
02:f0:be:b3:8a:04:4c:23:56:0e:c4:ad:22:e9:ba:c1:ac:c5:
d3:59:9f:0f:de:04:a9:0b:ce:53:50:dd:65:f9:d5:44:55:2e:
7f:5a:7e:78:50:27:16:4a:11:cd:4f:f9:4d:74:d6:52:41:5e:
82:91:d3:f3:2b:aa:62:d1:f7:6e:5b:fd:59:4b:3c:8f:8a:e8:
bf:43:74:9d:5f:c1:62:53:94:15:71:4a:b5:87:4a:d4:bf:d6:
a0:e4:eb:ad:b1:19:07:98:61:f6:25:45:42:ba:c5:19:48:80:
0b:7e:1e:96:3b:b2:5a:e3:0c:60:06:b3:85:c6:4f:4c:2e:e5:
d2:bb:9f:90:d6:4a:06:f9:70:5b:e5:f6:8f:76:ce:15:6b:f9:
7a:c0:ee:31:1b:69:ee:3e:44:0d:13:79:5c:2b:77:21:12:2f:
70:3f:30:36:b8:6e:47:35:4a:a6:4d:03:72:9c:b1:af:57:19:
db:6a:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:17 2026 by rpki-client