
$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json)
Hash identifier: bD3BqmqaQD261mnkdWfFejRWsGuU+axxmD3ONGkrrT8=
Subject key identifier: 2C:5C:BE:C6:CE:BF:69:F5:32:9D:9E:20:55:FF:3B:05:93:79:9D:E1
Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Certificate serial: 0B85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
Manifest number: 0B6F
Signing time: Sat 04 Apr 2026 18:59:52 +0000
Manifest this update: Sat 04 Apr 2026 18:59:51 +0000
Manifest next update: Sat 11 Apr 2026 18:59:51 +0000
Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: cNegM1HTfyyOXF57bVD4lkV8BHdy+D3LLfnsv0LXzE4=)
2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: 9P/caarcdfE5fgEntnYZ7v6bJcDbToqOd+JV3OwQEFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 18:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2949 (0xb85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3
Validity
Not Before: Apr 4 18:59:51 2026 GMT
Not After : Apr 11 18:59:51 2026 GMT
Subject: CN=69d15fa8-b00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:c4:f9:4e:ef:e0:09:9b:0a:04:f9:6f:b7:
49:10:98:e1:51:50:99:46:9b:e5:0c:88:e8:1c:41:
f4:c9:79:d0:38:61:cc:ab:90:60:03:4e:d1:58:9e:
54:0b:19:80:ba:47:03:47:dd:d1:b5:59:7a:35:c4:
d1:39:60:f8:de:78:4e:89:43:6e:9f:20:41:56:9f:
86:b4:74:33:f0:1e:ce:06:66:ad:22:cd:72:ac:f7:
5e:1b:c0:7e:a4:53:a5:ca:f8:3f:ed:9b:40:0e:85:
a0:02:e8:b5:b2:41:68:c7:82:29:21:c1:3e:82:47:
cd:5a:73:65:d6:81:77:98:a4:37:64:19:e4:9d:1b:
1f:9a:e0:96:c8:7f:cc:ae:b1:de:d0:0a:bd:74:4f:
48:6b:1a:33:c1:5a:41:7d:ae:00:f5:cd:9e:b4:c4:
d2:d2:35:39:10:3c:ec:f0:a0:67:2b:9f:35:e6:59:
10:24:e2:0b:a8:be:f9:23:43:12:d2:f4:76:c8:cc:
79:fa:45:00:51:ca:1d:0b:de:82:39:51:e9:f1:6d:
d5:96:25:d5:9f:12:8c:c4:23:12:71:c4:5b:8c:4f:
cf:51:11:e7:e6:59:1d:ac:b7:b1:4f:65:60:cb:13:
72:c4:99:4c:c0:6e:5d:1f:fe:70:3f:46:22:15:0c:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5C:BE:C6:CE:BF:69:F5:32:9D:9E:20:55:FF:3B:05:93:79:9D:E1
X509v3 Authority Key Identifier:
keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:9e:9c:db:a4:6e:76:06:98:4e:71:44:2f:ba:4d:3e:e4:
70:cb:5b:6c:34:e8:8a:a3:ff:3e:b2:0f:80:ba:93:95:10:27:
0f:be:60:20:94:11:4c:2e:a2:72:00:b1:6d:c7:3f:2a:d0:8f:
b7:cf:bd:33:f8:65:92:11:7c:9a:b6:6b:e2:ab:7e:48:ce:b4:
40:8d:3f:d2:3d:e1:e7:e3:20:3e:07:7d:0d:40:8c:25:e2:6f:
ff:89:29:27:9f:86:ac:ca:0b:34:b2:be:8f:7d:23:49:ba:4e:
77:75:37:0b:67:75:b5:d9:5c:72:79:f4:58:01:b3:21:b3:b0:
ce:a4:12:98:5e:9f:6d:13:18:be:38:e3:82:48:55:f0:e6:c2:
74:16:84:dc:57:80:9b:69:4a:fb:32:e7:5e:34:36:f3:6a:4e:
b5:eb:66:f5:d2:fc:88:ce:01:b6:3d:73:d3:ad:13:23:a9:54:
41:72:6e:cd:0c:ce:52:61:4e:cb:db:5f:ed:18:6c:33:b0:a2:
98:b6:a9:08:01:aa:00:a7:40:20:a8:69:5d:70:db:5e:6f:19:
dc:ae:5e:50:15:dd:8c:c9:c7:aa:b1:6b:44:af:47:25:65:ec:
b6:aa:0c:63:b3:f9:2d:17:c2:71:b2:19:0f:45:a1:6e:17:89:
7d:8a:2b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:24 2026 by rpki-client