
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier: MArVi9j/HbjnxLR+mZBPIEkw5fVryuZibVv3HcmeBgM=
Subject key identifier: A8:DA:08:71:0E:7A:F2:7E:F5:88:57:AD:D2:C6:71:65:43:A3:B1:3D
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial: 03F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number: 03E5
Signing time: Thu 21 May 2026 00:38:39 +0000
Manifest this update: Thu 21 May 2026 00:38:39 +0000
Manifest next update: Thu 28 May 2026 00:38:39 +0000
Files and hashes: 1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: qkuljBmVp4wwcbCf6PLswyNd6b2PieO6IyQ04hHWKe0=)
2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: 5qVS8yAP9geafMCui47y2bneVvGFNSs25MQvHFvL3Q0=)
3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: gLOFNsHejik+yQKsEBrjAw7cANoRp3jJQV4pA0a+JR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 00:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1015 (0x3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Validity
Not Before: May 21 00:38:39 2026 GMT
Not After : May 28 00:38:39 2026 GMT
Subject: CN=6a0e540f-1152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:27:96:4d:13:6c:f0:bf:bb:cc:e8:5c:ad:
6e:e1:78:13:da:ea:b3:5c:ed:6c:e1:ea:33:41:9f:
d6:13:64:33:fa:c4:f2:af:2e:3a:41:09:c7:35:b1:
2b:db:f7:28:a0:a8:68:13:6d:a0:5d:04:ef:ec:59:
a8:1c:5e:06:da:45:2e:8c:8f:e6:56:f8:d9:6a:32:
62:47:a8:47:57:03:84:a8:38:d3:df:a9:0b:5f:d4:
b4:d9:96:ea:fd:cf:af:1c:1e:a6:08:7a:a9:3d:4b:
63:74:ef:be:15:e7:b2:6c:ec:80:d2:96:39:89:29:
bb:0d:e0:a9:b6:f2:f0:0e:c7:7d:65:2b:1b:a3:41:
f9:59:a9:8a:19:07:8a:88:7c:69:57:2d:58:79:1c:
90:25:72:1b:fc:9e:70:d0:41:40:36:1f:a9:b2:62:
8b:89:07:9a:34:83:d8:1b:10:0b:77:f3:98:a6:be:
df:53:97:3c:e3:31:cd:96:0c:dd:a2:56:9b:9e:15:
3f:41:ab:19:54:94:ac:71:c2:0e:11:34:ff:56:9c:
5f:1a:35:1f:a2:18:25:ee:1b:e0:5e:ff:da:92:cf:
c1:a5:f7:1e:6e:43:e9:6c:3d:f9:04:8f:57:7e:06:
37:3f:24:82:ab:2b:5a:1c:a0:1d:3f:4e:54:8a:cf:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DA:08:71:0E:7A:F2:7E:F5:88:57:AD:D2:C6:71:65:43:A3:B1:3D
X509v3 Authority Key Identifier:
keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:49:23:ed:38:c7:97:a8:04:23:b1:d8:16:37:ad:f8:b7:b2:
f0:69:1e:2d:fe:94:7b:0c:7a:54:2b:ad:8a:33:83:33:8a:b7:
d6:35:80:c2:d4:de:34:e3:f1:6a:59:18:18:51:01:f1:14:a5:
d1:67:b5:c9:ab:e4:fa:00:48:46:8e:ce:5d:bc:2e:fe:67:e0:
4c:3a:7e:88:b4:14:4b:2e:8c:86:70:53:91:09:9d:1d:95:ae:
ff:5f:03:7d:b6:38:df:00:62:0f:e3:b2:04:c0:40:88:5e:d0:
94:6f:d4:ba:d3:6d:9f:15:df:d3:83:6f:e1:13:a1:17:1b:bd:
79:f4:37:72:90:05:7c:8b:e4:d0:0d:3c:9b:97:01:ba:1a:d5:
2f:ef:3e:69:32:e1:34:c5:e3:f7:b7:65:d6:a4:2d:a9:b7:a8:
c5:9a:f7:91:bf:db:56:41:54:44:fe:ec:dd:4c:03:eb:13:a8:
ba:e5:22:78:49:2f:f5:af:b8:f3:34:e0:02:80:dc:c1:5e:c7:
3b:16:a8:c0:27:41:b9:11:75:41:9a:1f:7b:e0:ae:38:16:e5:
50:57:d0:5f:e5:62:6b:c5:b5:26:85:7e:58:36:1c:00:56:82:
a3:5e:88:51:9c:bf:aa:6d:5e:73:bb:17:46:df:a1:78:44:fc:
99:25:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:03 2026 by rpki-client