
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json)
Hash identifier: svguCivBpB6+bX+Phj0/mWEm6sYudmSARa6sDcoTM1U=
Subject key identifier: CE:AA:06:63:3D:0A:C9:DA:18:22:D9:92:1B:32:5E:F3:E5:A5:AE:77
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial: 015D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
Manifest number: 0154
Signing time: Sun 05 Apr 2026 04:29:17 +0000
Manifest this update: Sun 05 Apr 2026 04:29:16 +0000
Manifest next update: Sun 12 Apr 2026 04:29:16 +0000
Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: PO940rjKu5kjuu/ODoldj+SW4Az5CpqoZjfSu8IuO8k=)
2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: jwNqpqTZXno1DyXY2sIyAh2YiWEDOdSFaYY50G2wOTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 04:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Validity
Not Before: Apr 5 04:29:16 2026 GMT
Not After : Apr 12 04:29:16 2026 GMT
Subject: CN=69d1e51d-752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:16:67:5d:c6:77:c9:ed:0d:f6:bc:21:4b:
49:f9:a4:73:47:13:92:a3:26:1f:72:21:8d:1a:41:
6a:b9:0f:15:ef:01:58:59:a4:45:90:b7:82:4b:04:
a2:8d:78:b2:89:e5:f9:da:58:88:f6:39:a6:04:62:
47:00:92:47:23:70:29:4f:78:8c:cc:e4:aa:eb:db:
c4:b5:e5:71:4d:14:e0:43:d0:64:63:19:44:60:4e:
cb:59:9e:9f:59:1f:dc:30:0c:07:2a:65:65:08:c8:
8b:b5:8b:bb:a5:e3:78:c4:5d:ff:f2:5e:d4:fa:09:
3b:bf:90:a1:ad:1b:f9:0f:e0:bf:4e:3c:0e:cf:c6:
b2:ac:97:2f:1c:8f:01:65:e2:9a:74:6e:30:01:23:
89:35:dc:dc:8c:39:91:62:32:d3:1b:a5:2d:59:95:
91:0a:67:40:2e:08:d4:6a:19:c7:dc:a6:26:30:8c:
cb:86:3c:0d:04:ad:d3:dd:c9:96:fc:98:4f:52:32:
34:7b:1a:0b:83:22:50:e7:96:a6:97:99:9d:9c:2e:
6c:bc:6d:56:58:a5:47:eb:7b:be:b5:39:03:82:12:
56:60:bb:2a:a7:97:d6:36:8b:c3:88:57:f4:91:88:
18:b1:39:2b:5b:ac:b6:3a:39:77:4a:29:4b:a0:be:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:06:63:3D:0A:C9:DA:18:22:D9:92:1B:32:5E:F3:E5:A5:AE:77
X509v3 Authority Key Identifier:
keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:31:cf:28:cb:dc:71:2f:cb:13:a9:ca:83:05:29:b8:62:bd:
a0:74:31:01:96:6c:96:fb:d2:83:9b:df:1d:08:c5:87:f8:c8:
d5:ca:89:c0:f7:d5:cc:c1:b9:68:4f:03:f8:b9:14:81:06:63:
cb:b5:5f:b1:ca:6e:f9:b0:5d:91:ad:bf:de:61:19:b2:af:f7:
6c:bc:18:09:6e:80:16:eb:9f:29:bd:4a:99:42:53:18:ee:68:
63:ab:23:37:a6:ef:e7:83:c9:31:62:93:46:8a:e3:a8:bb:bf:
21:b6:82:82:52:bf:fe:33:e6:55:4f:c3:71:92:f2:2a:8d:95:
39:a5:93:b0:9b:82:30:85:cf:8e:9e:3b:bc:b9:e2:5e:c7:9f:
3b:58:4b:95:12:e0:26:70:a2:1b:61:03:8e:6b:ba:b5:ef:27:
a0:e9:1a:e6:3b:c6:65:b6:14:17:0b:4e:1b:d0:ab:e6:87:32:
b6:c1:99:14:5c:7e:36:51:64:be:3a:e3:e2:04:e1:cb:cb:43:
f2:50:f5:1e:35:7b:1c:f8:78:c2:b9:a6:4e:71:fa:b0:d3:8f:
7d:87:fa:41:3c:2b:e3:65:8d:1e:cd:84:f7:44:44:a4:40:46:
4e:82:bc:5f:4e:21:df:0e:57:c9:83:49:dc:23:8e:9e:36:f4:
5f:f3:98:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx
MDEyODA3ODgwHhcNMjYwNDA1MDQyOTE2WhcNMjYwNDEyMDQyOTE2WjAYMRYwFAYD
VQQDEw02OWQxZTUxZC03NTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkEIWZ13Gd8ntDfa8IUtJ+aRzRxOSoyYfciGNGkFquQ8V7wFYWaRFkLeCSwSi
jXiyieX52liI9jmmBGJHAJJHI3ApT3iMzOSq69vEteVxTRTgQ9BkYxlEYE7LWZ6f
WR/cMAwHKmVlCMiLtYu7peN4xF3/8l7U+gk7v5ChrRv5D+C/TjwOz8ayrJcvHI8B
ZeKadG4wASOJNdzcjDmRYjLTG6UtWZWRCmdALgjUahnH3KYmMIzLhjwNBK3T3cmW
/JhPUjI0exoLgyJQ55aml5mdnC5svG1WWKVH63u+tTkDghJWYLsqp5fWNovDiFf0
kYgYsTkrW6y2Ojl3SilLoL7UPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6qBmM9
CsnaGCLZkhsyXvPlpa53MB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD
NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5
dExQelo5YWZxaVVRRW9CNGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAezHPKMvccS/LE6nKgwUpuGK9oHQxAZZslvvSg5vfHQjFh/jI1cqJwPfVzMG5
aE8D+LkUgQZjy7Vfscpu+bBdka2/3mEZsq/3bLwYCW6AFuufKb1KmUJTGO5oY6sj
N6bv54PJMWKTRorjqLu/IbaCglK//jPmVU/DcZLyKo2VOaWTsJuCMIXPjp47vLni
XsefO1hLlRLgJnCiG2EDjmu6te8noOka5jvGZbYUFwtOG9Cr5ocytsGZFFx+NlFk
vjrj4gThy8tD8lD1HjV7HPh4wrmmTnH6sNOPfYf6QTwr42WNHs2E90REpEBGToK8
X04h3w5XyYNJ3COOnjb0X/OYgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:25 2026 by rpki-client