
$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
File: fTWFKD3zPrULnDiNWc14bLudw54.mft (raw, json)
Hash identifier: u3/i3A4tCCG995dr6KLz54ARyQtU/xsbsqxujYWbv0U=
Subject key identifier: ED:B3:2D:55:45:20:95:9F:76:9C:36:11:78:BB:17:1A:50:58:83:46
Authority key identifier: 7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
Certificate issuer: /CN=A91352D1/serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
Manifest number: 3F
Signing time: Tue 03 Mar 2026 08:07:20 +0000
Manifest this update: Tue 03 Mar 2026 08:07:19 +0000
Manifest next update: Tue 10 Mar 2026 08:07:19 +0000
Files and hashes: 1: fTWFKD3zPrULnDiNWc14bLudw54.crl (hash: KLZD/wzgXmDxf+vZKqn9rWNYKAMyJ6trbSzZDrE6H6Q=)
2: F0F521DEC10B11F0B1AC197FC4F9AE02.roa (hash: GOuUl8j+KrJKN/gcw/cqwqcTvAUg8ALJCq8KS5t0JeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91352D1, serialNumber=7D3585283DF33EB50B9C388D59CD786CBB9DC39E
Validity
Not Before: Mar 3 08:07:19 2026 GMT
Not After : Mar 10 08:07:19 2026 GMT
Subject: CN=69a696b7-6e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:87:c0:86:ce:24:fe:70:2b:c6:ba:85:dd:
c2:b9:af:43:82:74:a3:dd:b2:5d:50:e5:12:6a:b6:
fb:54:7b:c0:58:7a:1c:5f:04:d0:15:fd:36:9d:e5:
c9:2b:f6:0e:a4:87:cd:53:f1:89:ad:9e:8e:16:8d:
87:bd:8a:81:db:15:c8:8d:0d:82:01:f3:87:7d:5d:
d3:db:4e:de:db:9e:5f:50:52:1e:98:fa:4a:e4:1b:
4c:df:c7:db:68:fa:c9:95:fb:d7:f2:44:d3:4b:f2:
f9:20:b9:4a:9b:74:76:79:bb:d7:1b:07:82:ab:55:
b5:1c:1e:9b:d9:4b:75:ec:c5:4a:2b:e0:d5:8e:4f:
61:e1:09:d3:57:36:b2:e1:e3:39:50:98:42:cb:b6:
c1:05:15:4a:50:37:bf:74:bb:a5:20:f6:86:58:e8:
5f:f6:1b:41:82:ae:db:fd:4b:53:d8:62:7e:65:0a:
62:66:f6:fe:4e:1c:73:d9:86:86:8e:49:ee:f9:59:
de:4d:f6:83:c5:f9:94:fc:22:4d:c7:23:57:d4:9b:
19:b3:fe:b2:a6:80:58:29:6d:6d:0b:0d:37:1f:9b:
0c:60:71:1d:bb:7c:3f:a0:79:d3:86:b0:1c:1b:e2:
6f:2f:3e:c7:4f:d9:7c:1e:57:f1:ba:d1:36:30:64:
32:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B3:2D:55:45:20:95:9F:76:9C:36:11:78:BB:17:1A:50:58:83:46
X509v3 Authority Key Identifier:
keyid:7D:35:85:28:3D:F3:3E:B5:0B:9C:38:8D:59:CD:78:6C:BB:9D:C3:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fTWFKD3zPrULnDiNWc14bLudw54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/64A5AB84C0EA11F09BA9DB74C4F9AE02/fTWFKD3zPrULnDiNWc14bLudw54.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:95:c9:a9:fe:f3:67:99:6d:06:f5:5b:86:a2:89:85:4f:34:
46:54:47:7c:7c:60:ed:58:a0:de:76:bd:77:45:5c:bd:a4:b5:
6a:1a:88:4c:de:5d:f8:8f:e2:c8:ac:4e:7b:c2:35:d9:fc:f2:
5f:e2:ad:e0:00:d8:78:45:b7:51:6b:43:1b:55:4a:a8:aa:5e:
c0:d8:e1:18:bb:cd:68:c7:a0:11:ad:b6:79:c3:0f:24:86:37:
8a:0c:8c:86:ff:70:0c:96:81:dd:fa:b5:0f:29:f7:1e:ab:2c:
bf:cd:c6:f2:26:a9:1a:91:14:10:aa:ab:8e:6f:28:ed:3c:bb:
ba:f5:4d:c6:28:e5:b7:06:2c:1b:0e:7f:16:01:47:28:50:c8:
91:5e:fc:02:5f:7c:c8:f2:db:4c:75:da:44:c8:be:d5:14:ac:
15:23:3b:90:83:4a:e2:44:b0:f8:2c:7e:97:a5:28:37:cb:81:
24:53:34:75:12:c7:59:37:db:0a:0a:77:80:4a:72:1b:91:05:
75:36:1f:67:58:8e:89:37:15:f3:a1:f3:88:7c:8f:0e:e3:84:
7f:99:7c:37:a4:b1:b1:7a:ef:79:43:95:4c:8c:f8:ab:23:b6:
29:87:3f:22:9b:13:db:1e:b8:33:c4:78:1c:e7:b3:a6:f8:9a:
95:c7:b2:ef
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NTJEMTExMC8GA1UEBRMoN0QzNTg1MjgzREYzM0VCNTBCOUMzODhENTlDRDc4NkNC
QjlEQzM5RTAeFw0yNjAzMDMwODA3MTlaFw0yNjAzMTAwODA3MTlaMBgxFjAUBgNV
BAMTDTY5YTY5NmI3LTZlMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2L4fAhs4k/nArxrqF3cK5r0OCdKPdsl1Q5RJqtvtUe8BYehxfBNAV/Tad5ckr
9g6kh81T8Ymtno4WjYe9ioHbFciNDYIB84d9XdPbTt7bnl9QUh6Y+krkG0zfx9to
+smV+9fyRNNL8vkguUqbdHZ5u9cbB4KrVbUcHpvZS3XsxUor4NWOT2HhCdNXNrLh
4zlQmELLtsEFFUpQN790u6Ug9oZY6F/2G0GCrtv9S1PYYn5lCmJm9v5OHHPZhoaO
Se75Wd5N9oPF+ZT8Ik3HI1fUmxmz/rKmgFgpbW0LDTcfmwxgcR27fD+gedOGsBwb
4m8vPsdP2XweV/G60TYwZDI/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7bMtVUUg
lZ92nDYReLsXGlBYg0YwHwYDVR0jBBgwFoAUfTWFKD3zPrULnDiNWc14bLudw54w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1MkQxLzY0QTVBQjg0QzBF
QTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJVTG5EaU5XYzE0Ykx1ZHc1
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZlRXRktEM3pQclVMbkRpTldjMTRiTHVkdzU0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1
MkQxLzY0QTVBQjg0QzBFQTExRjA5QkE5REI3NEM0RjlBRTAyL2ZUV0ZLRDN6UHJV
TG5EaU5XYzE0Ykx1ZHc1NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCSlcmp/vNnmW0G9VuGoomFTzRGVEd8fGDtWKDedr13RVy9pLVqGohM3l34j+LI
rE57wjXZ/PJf4q3gANh4RbdRa0MbVUqoql7A2OEYu81ox6ARrbZ5ww8khjeKDIyG
/3AMloHd+rUPKfceqyy/zcbyJqkakRQQqquObyjtPLu69U3GKOW3BiwbDn8WAUco
UMiRXvwCX3zI8ttMddpEyL7VFKwVIzuQg0riRLD4LH6XpSg3y4EkUzR1EsdZN9sK
CneASnIbkQV1Nh9nWI6JNxXzofOIfI8O44R/mXw3pLGxeu95Q5VMjPirI7Yphz8i
mxPbHrgzxHgc57Om+JqVx7Lv
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:20:02 2026 by rpki-client