
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json)
Hash identifier: +eduIgHR9NqS+SHFHpdsdbX7fBGKnM8+PEBJr1Mfpp0=
Subject key identifier: 9E:8F:47:79:5C:EF:2D:AA:C0:DC:6A:B9:E5:8A:A5:85:F6:47:F2:DC
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial: 018A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
Manifest number: 0186
Signing time: Sun 05 Apr 2026 03:56:23 +0000
Manifest this update: Sun 05 Apr 2026 03:56:22 +0000
Manifest next update: Sun 12 Apr 2026 03:56:22 +0000
Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: IiMvhOI9UXYyVOXI63y8UgTqdd8CmG8N8GghT8ssZZ0=)
2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: dYDuZ7M5yMWQRcBPSr0VcCiPxqS8dzHnJCBLX4BfiW4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Validity
Not Before: Apr 5 03:56:22 2026 GMT
Not After : Apr 12 03:56:22 2026 GMT
Subject: CN=69d1dd66-53a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:98:ee:81:c9:d0:81:cf:d3:86:02:62:49:
13:42:a5:21:55:25:50:be:6b:30:02:8d:38:c2:bb:
e9:90:2c:7d:26:25:40:18:1e:37:11:b4:90:ad:0c:
9b:79:d0:fc:a0:55:70:93:b4:f0:f4:13:16:a3:ef:
ad:e9:94:61:6a:cf:d5:90:02:e1:ca:27:52:93:30:
31:bf:0f:4f:9d:b5:6b:2b:78:bc:b8:06:88:df:d9:
f0:c1:bb:08:c3:34:7d:11:20:7d:c6:ec:db:e2:32:
4e:cf:0f:83:e6:36:d8:52:26:4c:55:78:73:ae:5d:
22:be:b3:63:1c:b4:7b:ba:64:5d:66:cd:55:63:a7:
19:83:18:b3:53:66:be:da:b6:7c:ae:49:ca:50:a0:
93:e5:39:e2:9d:33:49:1e:a0:e5:b7:a3:49:8b:63:
4f:50:65:c7:32:09:e2:99:1f:62:f7:a5:6d:3d:4c:
b8:ce:56:6f:95:30:cf:fd:bb:fb:40:0c:2f:69:bf:
e9:d0:ff:f3:5d:83:0d:fc:81:25:f1:77:60:f9:af:
a9:94:1f:da:f5:67:8a:26:31:c8:75:48:2b:fc:32:
0a:0c:59:da:17:0d:ef:ce:a6:02:60:38:7d:d9:bd:
76:09:df:69:f6:86:6b:16:4a:17:a1:54:1d:be:7c:
14:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:47:79:5C:EF:2D:AA:C0:DC:6A:B9:E5:8A:A5:85:F6:47:F2:DC
X509v3 Authority Key Identifier:
keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:61:3d:9e:cd:94:22:d7:c4:bc:2c:27:c6:76:4f:02:30:e3:
b8:60:8c:55:6e:26:3f:21:76:ea:50:bb:a3:a9:3d:10:db:c2:
5c:c0:03:88:1b:07:ed:a8:53:c3:9e:5c:b0:0f:05:c2:99:0a:
96:6d:ee:cf:ea:d5:52:13:c1:e4:b2:54:d4:e0:53:64:8e:8b:
d8:ad:38:a0:06:7f:b5:f4:be:e8:29:53:49:b1:40:6f:ab:5a:
1e:29:8d:55:0a:89:47:e2:27:55:0a:04:a5:25:0f:b9:6a:02:
ef:c6:86:9c:ce:03:99:de:6d:f6:fe:4d:8b:af:77:c3:00:f7:
0f:bd:83:66:15:5e:2b:55:f1:22:1e:16:30:95:23:f5:47:6b:
b7:97:51:d8:05:c1:f9:8b:47:14:8c:9a:e8:61:1c:4f:a2:23:
b9:7b:6b:09:e3:28:63:f8:b7:0e:51:d8:75:cf:2f:c0:32:b4:
00:66:78:8c:90:54:3c:65:53:52:01:d2:06:58:27:ff:40:e6:
53:79:e5:dc:69:cf:a6:6d:5f:36:d7:dc:be:47:76:c0:46:4a:
8e:37:40:87:0f:62:52:e2:87:61:e9:5f:6c:86:d5:87:10:41:
b1:94:bc:57:d1:1a:21:f2:5c:d3:2d:37:52:c6:60:e7:48:65:
22:c7:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:39 2026 by rpki-client