
$ rpki-client -vvf rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
File: FiENxlKhYN7k5AFbvLQJ-odyRkA.mft (raw, json)
Hash identifier: NgLt2XYFbgu/H0fnw1FETvXjABgY7+y4iTcUj8/y5UQ=
Subject key identifier: BE:2A:39:1E:25:FF:65:D9:35:C5:F9:CD:96:03:6E:7D:BB:96:F9:16
Authority key identifier: 16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
Certificate issuer: /CN=A91983BD/serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Certificate serial: 3527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
Manifest number: 3A00
Signing time: Sat 04 Apr 2026 14:36:55 +0000
Manifest this update: Sat 04 Apr 2026 14:36:54 +0000
Manifest next update: Sat 11 Apr 2026 14:36:54 +0000
Files and hashes: 1: FiENxlKhYN7k5AFbvLQJ-odyRkA.crl (hash: skX5MThl/8UkRm4rZrTljyEcdSe3OZszaVWarpx0c9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13607 (0x3527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91983BD, serialNumber=16210DC652A160DEE4E4015BBCB409FA87724640
Validity
Not Before: Apr 4 14:36:54 2026 GMT
Not After : Apr 11 14:36:54 2026 GMT
Subject: CN=69d12206-b142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:44:96:a4:73:17:73:e3:f3:72:3f:58:be:
1a:4b:35:e1:9e:d7:2a:b9:8c:44:b8:53:fa:8e:0d:
63:11:86:58:15:7b:0c:cb:65:52:0b:da:d1:51:a8:
14:f9:de:d6:d0:ab:a3:ad:88:2e:05:fe:f0:74:f5:
18:89:d0:70:9b:2a:9b:1c:e0:5d:06:e4:16:6e:03:
41:de:41:fd:87:5d:ed:45:5b:17:7b:60:28:4d:85:
59:cf:06:23:31:2f:50:65:f9:82:fb:89:d7:c4:ce:
1f:99:da:80:7d:18:26:cc:f3:22:65:8f:fd:5e:25:
0b:c5:07:17:d9:e2:f7:3f:90:2b:48:6a:57:6f:dc:
12:9c:c9:b7:29:eb:21:84:01:e3:50:2d:80:e8:f8:
af:ab:3a:10:59:c8:21:b6:64:aa:84:20:9a:5e:fe:
06:8e:d1:14:fd:25:0f:3f:32:2d:3f:c4:6c:fe:0b:
6b:95:21:25:bf:2a:fe:ea:11:44:55:8f:2b:dc:b0:
d4:52:e2:e5:d1:b5:6b:74:cf:2b:ce:ab:17:cc:1e:
2c:ba:47:a9:39:ff:be:21:08:f5:f9:6f:61:c2:23:
78:52:66:f1:3b:31:96:f9:a4:68:8b:d0:cb:d0:c4:
1a:38:78:0e:72:7d:2b:f4:33:2a:0d:72:46:38:8a:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:39:1E:25:FF:65:D9:35:C5:F9:CD:96:03:6E:7D:BB:96:F9:16
X509v3 Authority Key Identifier:
keyid:16:21:0D:C6:52:A1:60:DE:E4:E4:01:5B:BC:B4:09:FA:87:72:46:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FiENxlKhYN7k5AFbvLQJ-odyRkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983BD/BE7CD02A1D8C11E2AEF045E808B02CD2/FiENxlKhYN7k5AFbvLQJ-odyRkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:90:00:1d:2f:9f:7d:4a:74:9a:be:55:69:a4:07:38:f7:b4:
8c:3a:cd:bd:ad:49:8c:86:49:2e:71:f5:8f:95:83:bd:3f:47:
ed:73:60:80:67:f3:9e:5d:e7:7a:d6:bc:9c:c3:74:03:b1:00:
36:11:59:70:15:49:37:e4:37:64:77:f5:36:7a:f0:6d:8a:91:
8c:5a:b2:e2:cb:4e:91:e6:37:26:d5:8b:7c:f8:61:43:85:9d:
7f:76:bc:1f:6e:8e:65:d1:fc:d2:51:dd:34:42:b4:56:07:dd:
34:bd:47:78:75:d7:6f:c7:40:df:18:38:e6:07:13:e9:25:88:
8e:e7:87:4f:9c:ac:0d:0d:1b:b2:b0:70:4a:18:5e:26:a0:73:
84:a7:fe:ef:0f:2b:67:95:8c:ac:f8:fe:07:6a:12:4e:55:21:
03:73:3c:81:a7:ef:60:08:c6:63:58:ed:b6:f4:5d:c3:d3:4f:
e5:9d:c1:46:de:fb:dc:52:12:3c:7a:94:b2:5b:e9:48:49:9a:
8c:4b:f3:a9:28:e1:9b:be:3e:f9:eb:ad:c0:44:45:d0:06:e4:
d5:ed:52:0e:f9:b4:75:30:7c:e5:41:6f:85:19:93:b9:25:d7:
12:93:d4:c5:35:73:dc:07:27:0c:7c:85:44:00:39:33:18:5a:
3d:4e:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:26:08 2026 by rpki-client