
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
File: fBMe4KgLg01I0X1pZVpbx75mi2o.mft (raw, json)
Hash identifier: AlYhwIFMaYXcYliJyKrm7IKNN3KAX27lUmUDRNMtgl4=
Subject key identifier: 2A:0B:E8:39:94:F5:09:CD:9A:21:AA:04:54:98:04:CD:E4:0F:32:59
Authority key identifier: 7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
Certificate issuer: /CN=A91637DD/serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Certificate serial: 050D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
Manifest number: 04FE
Signing time: Wed 20 May 2026 23:50:12 +0000
Manifest this update: Wed 20 May 2026 23:50:11 +0000
Manifest next update: Wed 27 May 2026 23:50:11 +0000
Files and hashes: 1: fBMe4KgLg01I0X1pZVpbx75mi2o.crl (hash: Y+8WDQ0NyLbIgKBqZ0WI+A+JkHuQ6X0Vr8qmazpWWiA=)
2: CA95FB0EA1E611EDABFD7D7FC4F9AE02.roa (hash: HsF8gy96J2wsoICfYmcwznwixkV1OQ/RoRjC/SmAq8g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91637DD, serialNumber=7C131EE0A80B834D48D17D69655A5BC7BE668B6A
Validity
Not Before: May 20 23:50:11 2026 GMT
Not After : May 27 23:50:11 2026 GMT
Subject: CN=6a0e48b3-6466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:07:de:8f:02:03:fa:ef:bc:d7:af:d4:75:
4b:6d:ab:29:fa:a4:7c:ed:2c:c0:90:de:07:97:bf:
59:1f:bd:14:0c:17:e6:22:5a:cb:e0:fe:7f:b9:dc:
8b:af:aa:cc:6f:90:70:cb:c7:30:ba:4b:82:82:2e:
45:94:e4:71:fb:54:a8:96:10:58:c3:88:70:58:6d:
e8:8a:a3:51:40:44:2d:6b:57:9d:4e:ef:c3:b6:80:
eb:18:ab:0e:4b:39:0d:af:3d:47:b3:ae:79:fb:50:
68:f0:3c:fc:29:24:86:d6:1d:86:27:bf:9f:45:a1:
a3:a1:c2:eb:6c:99:08:41:07:b5:92:02:78:e1:2e:
91:2c:e3:15:50:e8:9a:d0:5d:8b:7f:d5:77:8e:70:
5c:5d:ba:c8:71:64:ca:53:2b:4f:2e:3b:4b:33:67:
a7:fb:3a:37:ba:e3:23:1a:53:0d:cc:17:0e:92:7f:
75:40:46:03:2d:de:12:1c:9e:13:97:ff:e9:1a:bc:
09:3a:36:52:31:b4:31:a5:0f:54:2b:02:71:9d:3f:
f3:49:45:c6:7b:55:5b:79:05:3f:26:6c:ad:3a:27:
89:d1:b2:06:65:a6:a5:6b:27:d5:bd:d2:4c:d3:5f:
83:d8:ec:0b:b6:4a:b4:06:8c:04:31:9c:23:16:8a:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0B:E8:39:94:F5:09:CD:9A:21:AA:04:54:98:04:CD:E4:0F:32:59
X509v3 Authority Key Identifier:
keyid:7C:13:1E:E0:A8:0B:83:4D:48:D1:7D:69:65:5A:5B:C7:BE:66:8B:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBMe4KgLg01I0X1pZVpbx75mi2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637DD/DE59F6025E7311EC8BE4CC4EC4F9AE02/fBMe4KgLg01I0X1pZVpbx75mi2o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:18:da:1a:8b:5d:8f:56:28:5c:97:23:ec:a6:48:c8:17:78:
cb:ce:b0:a4:df:06:c8:5a:f3:d2:16:3b:35:19:d7:c9:5a:1d:
6d:06:60:2b:17:c8:0e:de:99:d8:8c:cb:8e:52:7c:25:fd:51:
b0:52:ef:04:fd:8d:74:a5:c0:c1:1c:99:6d:aa:8a:9c:df:61:
d9:56:09:82:20:8b:8e:2d:38:b4:19:17:0f:a7:c6:24:a6:2a:
33:e2:78:68:44:83:9c:df:af:8a:72:98:fa:07:b6:18:61:85:
6e:e8:a0:b7:7b:58:0f:76:1a:84:e7:5f:0d:7e:17:9c:81:5d:
b4:35:a4:42:58:8a:b2:4b:70:86:b2:ca:b4:46:96:0f:12:ad:
9c:c0:83:33:d0:92:61:3e:31:a7:5e:67:69:e4:1a:b0:4f:86:
74:78:1e:b0:32:f3:bb:c2:96:22:8d:32:7a:43:34:cf:6f:d0:
eb:0e:1d:ed:f9:b0:6c:45:0d:14:3c:4d:6e:4f:24:da:87:cf:
6d:df:fb:4a:bc:7a:d3:e8:5d:c1:6a:37:2e:a2:5d:85:bb:1d:
1d:d5:cb:3b:73:e6:a8:6e:d3:d0:4f:5f:1e:41:29:e3:1b:28:
a8:50:d9:7f:06:6e:5e:0f:4c:4b:31:cd:4a:fd:ac:3c:49:44:
fc:91:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:38 2026 by rpki-client