
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
File: FEVIn91QqkSsHSo8OhZuBsZir9U.mft (raw, json)
Hash identifier: GlP/wxy9qqUeQVpT9WNylA6GBUqe8us2ndDQLfIVkA8=
Subject key identifier: 10:B0:46:A9:6F:62:7A:38:5A:80:4D:9E:07:23:13:EA:B4:D2:5B:80
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 0657
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
Manifest number: 05FC
Signing time: Tue 10 Mar 2026 22:44:17 +0000
Manifest this update: Tue 10 Mar 2026 22:44:16 +0000
Manifest next update: Tue 17 Mar 2026 22:44:16 +0000
Files and hashes: 1: FEVIn91QqkSsHSo8OhZuBsZir9U.crl (hash: FzM1+TezefyJLq+0YxzCVApXC/XW3nXCstHHSY6BHck=)
2: 4A120466FC5F11EF9B1B9787C4F9AE02.roa (hash: TmnCz4svkXeFZCWbvgUiA1zjjOZv2YaqvM6tFAU7tic=)
3: 9D834ED4E48F11F086089575466F56BC.roa (hash: cawn4yhO8WZa1I2Ob/aWE7RXAnVQqAZfiCinpK+xtsM=)
4: F8769F9AA4B111EF8F61B261C4F9AE02.roa (hash: WWoSAUMqi1pfNdPU0PAFZbhg/xN3/ydn2IO/3Y3q7Xo=)
5: 56E0B60AFC1F11EF8049634BC4F9AE02.roa (hash: +FMd8zZc8YO+7IaM4MnItzvo9Zm598fcDOsfXPW7OgU=)
6: E481FBD6F2A611EF8F8C0C51C4F9AE02.roa (hash: PAkIYZBg3WfFvlSAb1XDNPnjMRPmbNTXA0dJlYGNXu0=)
7: AE11F30C2F2E11F09F70883CC4F9AE02.roa (hash: shThEphg1zT8MwIcS48dEg3GXpZIFIQyqrKxqn7uNhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Mar 10 22:44:16 2026 GMT
Not After : Mar 17 22:44:16 2026 GMT
Subject: CN=69b09ec1-3073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:46:9e:d2:c1:c9:26:9f:d0:4a:91:23:fc:
0e:4b:9a:9e:a5:44:de:10:e1:25:9c:38:25:5f:62:
33:aa:44:5f:9b:25:78:5c:db:3a:b9:6c:86:92:3f:
c6:9f:eb:62:a5:18:1d:7e:9e:b8:b6:9a:e0:9e:59:
94:da:9a:b5:59:ef:7e:84:a0:6b:f8:b1:77:d5:3b:
3b:af:f6:2f:a1:a2:6a:ff:25:f3:80:d1:98:84:ff:
4c:4b:4f:09:33:9a:e9:37:b4:97:8d:a5:89:ee:8a:
ef:aa:fa:5d:5b:66:fe:42:92:95:a8:2f:3d:5a:91:
76:72:85:e0:68:60:fd:50:3d:c8:41:79:16:28:82:
34:c3:d2:72:1a:b9:35:c7:a4:d9:3e:c7:13:27:19:
39:c9:28:94:7d:5e:4a:c9:31:5d:f5:dc:e7:53:f7:
0c:54:53:f0:63:97:ca:26:f0:ed:03:6d:f3:85:a9:
f7:12:9e:b7:36:29:d6:f7:ad:36:df:64:5b:a8:7a:
8b:2f:32:03:1e:d7:d3:2e:3e:d9:4b:fa:7d:b4:44:
dd:42:ab:14:26:4f:53:80:6e:64:29:b0:10:2e:9f:
b9:60:b5:c4:e3:e8:0f:b8:57:f2:e6:26:52:66:20:
be:80:d5:83:8c:4c:d3:c7:c8:c9:53:8d:1e:98:54:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B0:46:A9:6F:62:7A:38:5A:80:4D:9E:07:23:13:EA:B4:D2:5B:80
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:8d:75:69:c2:ea:c3:c7:3d:3a:ed:7a:93:84:32:22:1a:78:
f9:d5:7d:fe:4f:58:0b:72:83:fe:c2:3c:aa:cf:08:f1:46:74:
e2:be:a2:4b:b7:c2:13:38:67:b6:51:bc:27:9b:64:a5:a2:99:
f2:64:03:73:40:f8:63:f4:52:b5:36:04:89:a3:14:1d:7d:9a:
75:b7:1a:78:bd:b0:d4:1d:6c:d4:a2:31:ca:e4:c2:1b:58:5a:
ed:44:2b:bf:dd:fa:a1:cc:d9:07:12:dc:5c:d8:7e:9c:0a:9f:
90:b0:96:34:2e:3d:f8:c3:4c:8d:65:85:f8:85:4e:e7:77:c0:
da:ce:7a:96:b5:57:c4:1c:84:44:84:94:1f:7d:8e:51:cb:7b:
65:74:15:d9:c3:9a:c6:23:04:91:e1:ae:fb:50:ee:8c:ac:05:
01:0f:e6:d0:f7:a8:5f:b1:99:2b:bf:67:11:01:1f:e0:e2:bd:
30:a8:c3:88:b7:2a:4a:6e:4a:14:41:7a:8a:1a:a8:cd:0a:3a:
23:72:53:12:72:0b:44:57:a2:e6:af:94:7a:64:9c:ef:12:7d:
6e:eb:7e:01:e4:77:50:23:37:51:83:e3:90:62:79:d2:e2:e5:
af:84:d0:2e:93:d8:ee:33:28:68:94:53:3a:08:b3:53:4f:8f:
e6:11:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 17:10:22 2026 by rpki-client