
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: ppJBIA0DjEgrwZxQ7lcjHhc59Y8sOdOuJBSBgzG4RwY=
Subject key identifier: 1F:1F:F2:A6:85:E5:5A:5A:77:56:A7:98:66:95:DD:81:27:09:B9:DC
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 0482
Signing time: Thu 09 Jul 2026 01:16:42 +0000
Manifest this update: Thu 09 Jul 2026 01:16:41 +0000
Manifest next update: Thu 16 Jul 2026 01:16:41 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 8bVxisieKW0v7hguYITIsIwhmb8dHoKC7Z8P0fpiZiA=)
2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
4: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
5: 32F4B5BA3F0411F1BF0D1E0CC9833773.roa (hash: 7D5axyTJpCXlvT4hwQ1+3Thr7ZRX7mL6gQ5Gjrbulvc=)
6: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
7: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 16 Jul 2026 01:11:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Jul 9 01:16:41 2026 GMT
Not After : Jul 16 01:16:41 2026 GMT
Subject: CN=6a4ef67a-ebd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:17:50:bf:ab:be:2a:97:6c:5f:74:2c:51:
eb:6d:cb:48:29:d5:e8:fa:c0:97:f2:ef:19:82:ab:
e5:32:83:96:b8:b9:90:be:6b:ff:f8:61:3c:aa:52:
1a:53:d4:d0:33:89:4c:f8:04:24:b7:c2:c0:ce:ce:
36:c5:92:f6:59:5f:66:39:bb:25:f6:02:17:51:2b:
16:f2:66:6e:9a:b6:d5:7e:bf:12:ff:a4:0b:c8:f0:
db:fb:31:ca:8d:61:a8:1f:13:4b:d6:c6:09:ad:f3:
50:30:4a:c8:62:3a:a8:9a:02:ae:dc:a8:62:6e:6c:
06:cb:b0:66:3d:8b:06:c1:c0:8c:1d:9b:71:d3:cf:
9a:35:28:53:dd:a2:88:c4:01:0b:13:63:80:ec:63:
90:4a:35:77:ee:4f:49:c2:c7:95:aa:c5:eb:8b:62:
98:22:6a:c4:80:15:12:e0:29:dc:ae:24:18:46:a9:
cf:35:ec:93:26:75:62:92:af:39:04:57:5a:23:fe:
30:c4:e9:88:da:93:bb:c4:90:5c:70:c9:a0:3e:28:
e1:8a:90:75:bc:20:95:ed:d5:9f:32:db:d3:e4:d8:
06:6e:7d:9a:6f:a8:cb:09:e1:78:15:db:05:41:52:
c4:ec:35:27:e2:68:9d:83:0b:43:c5:fe:25:c9:32:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:F2:A6:85:E5:5A:5A:77:56:A7:98:66:95:DD:81:27:09:B9:DC
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:52:d4:dc:eb:e7:bd:07:d8:09:c7:a6:8a:62:40:84:2a:00:
92:e9:b5:3e:4b:6b:5a:14:d6:21:00:4b:76:30:f0:ad:5c:4b:
6a:dd:d2:09:05:34:c8:f2:35:41:b0:84:65:40:35:d6:05:14:
55:83:5d:05:7e:00:49:da:ec:12:0b:95:7d:87:2d:13:3a:32:
3f:e1:4d:19:f4:d2:93:d6:80:34:4c:17:16:13:cc:cf:d9:31:
56:1e:f4:b7:bf:25:1d:ef:f8:5d:39:cd:c1:f6:47:9f:8f:33:
19:a2:9f:e5:57:f2:db:07:3e:9a:b0:28:52:ff:dd:10:ca:27:
ba:2f:3e:b4:ca:93:42:80:37:05:d2:c0:2c:2d:61:df:07:13:
52:ed:88:58:96:5d:e7:9d:9b:b0:57:8c:ff:31:33:56:c7:fc:
51:93:9a:c5:f4:14:e2:86:c1:b3:c2:ef:30:70:10:46:39:cd:
cc:d6:58:02:a5:4c:48:d2:8f:69:21:c6:84:5c:d7:15:8e:16:
9b:fb:07:d1:f3:35:97:b7:cf:66:f0:34:6c:55:e3:b8:06:72:
a2:3b:b2:84:08:5f:06:b9:83:d3:7f:6e:d2:5d:e4:91:9c:a9:
ca:d3:57:4d:9a:54:c8:37:54:81:95:38:bb:a7:67:ab:ba:d4:
48:f2:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 03:36:03 2026 by rpki-client