
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: MpUu8Err2QQzwMTREbX95tnqDdBNuEctFHGuK2ffxcs=
Subject key identifier: ED:4E:CD:64:F6:A1:EC:0B:79:ED:B5:7D:D8:7C:4F:3D:EA:E3:C9:E6
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 0478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 0465
Signing time: Thu 21 May 2026 00:14:56 +0000
Manifest this update: Thu 21 May 2026 00:14:56 +0000
Manifest next update: Thu 28 May 2026 00:14:56 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: cuFFuXou2783eRTe1j94vrR3sgpOPU6JGekggRFNhBM=)
2: 32F4B5BA3F0411F1BF0D1E0CC9833773.roa (hash: 7D5axyTJpCXlvT4hwQ1+3Thr7ZRX7mL6gQ5Gjrbulvc=)
3: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
4: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
5: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
6: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
7: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: May 21 00:14:56 2026 GMT
Not After : May 28 00:14:56 2026 GMT
Subject: CN=6a0e4e80-2e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:c7:4c:e7:eb:ff:d1:11:48:05:38:5a:6d:
b1:b4:2e:a8:80:8a:93:6b:de:f2:7c:bb:65:3d:d8:
1e:d1:bc:88:8d:27:dc:ed:50:34:6a:dd:a2:7a:4f:
45:22:fb:8e:70:88:bb:5c:1f:d1:d0:9e:37:b8:2e:
23:b2:32:ea:52:ff:c8:79:ec:05:dc:9e:4e:3a:e6:
a8:26:63:1e:c6:61:54:d1:3e:92:d6:01:9a:8d:01:
31:f7:60:f0:58:79:e3:03:c2:68:40:2f:53:00:6e:
c3:ef:0f:b1:8a:ca:8e:99:20:fe:76:0e:04:54:00:
37:79:d8:58:aa:9a:a0:80:2e:77:b3:29:1a:5c:ce:
bf:e9:70:f5:75:dd:fa:74:67:82:94:59:6d:8f:e3:
79:e0:a2:24:98:6b:d1:f0:8e:da:57:7a:81:64:9b:
53:b0:e3:12:4f:61:81:6e:8e:66:f1:8f:8c:8a:27:
d4:b7:31:cc:85:a7:a2:a6:30:58:9d:7e:b0:71:50:
ea:e5:1e:b1:ee:89:e7:63:4d:4e:27:7c:cd:d1:29:
c8:eb:82:f8:1a:d6:7a:24:f6:df:c6:d9:a5:12:04:
02:5c:fd:de:c9:c1:15:cd:e8:1c:db:8a:99:44:ce:
01:d6:2a:ed:a1:f4:17:bd:35:5f:a5:25:34:81:d0:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:CD:64:F6:A1:EC:0B:79:ED:B5:7D:D8:7C:4F:3D:EA:E3:C9:E6
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:3d:82:9c:ae:38:e0:42:ce:d6:82:3b:06:e4:4d:0c:eb:
c5:27:8a:13:b2:3e:af:f0:7a:f0:9b:88:f3:e4:00:04:07:21:
06:b6:d0:e1:ee:ad:5f:e6:7c:a9:df:4b:c8:35:3a:a1:87:1d:
65:de:e5:99:a1:9a:01:81:f3:77:68:ff:40:d1:d6:71:90:09:
4c:43:39:e8:b5:c6:f7:34:67:5a:16:95:67:0a:09:02:d3:1b:
5c:fc:e3:32:18:23:3f:64:fa:51:e1:5f:c5:23:62:62:2a:25:
ba:60:d8:c1:d8:31:7d:68:a9:bf:ad:ac:76:c0:51:78:a5:dd:
d9:54:58:b1:9d:07:cc:f0:fc:00:7d:89:e1:8c:64:24:4d:d2:
b8:87:1d:ff:c1:20:c3:19:19:b1:fe:64:b4:5e:bc:39:50:18:
04:b2:bf:a6:d1:88:59:35:37:a5:60:41:88:52:43:f6:c3:b1:
b7:51:44:7d:74:8e:d8:27:11:c3:77:5c:6f:6f:a9:bb:13:b4:
ea:5d:af:58:fb:3c:d4:e8:91:58:ca:96:d9:38:c8:29:e7:06:
85:99:28:2e:75:ee:c9:8c:d3:84:8b:56:cf:ca:33:6d:6a:0e:
91:18:bf:97:33:f7:72:47:dc:19:7d:c3:07:58:26:43:c9:aa:
6f:ea:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:09 2026 by rpki-client