
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json)
Hash identifier: LT6G+sM4aeyj4DuETnVbSdX3PWPbqqIgCjFVgrLL+T4=
Subject key identifier: EB:41:0F:68:F9:33:9D:54:85:53:9C:6A:EF:8A:EF:9B:CB:E5:8A:63
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial: 0CCF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
Manifest number: 0CBB
Signing time: Fri 06 Mar 2026 17:18:27 +0000
Manifest this update: Fri 06 Mar 2026 17:18:27 +0000
Manifest next update: Fri 13 Mar 2026 17:18:27 +0000
Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: VFmKzXe1NQqOf4ryjnEysw/SvI0oTLyrWOaH7OjcIco=)
2: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=)
3: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3279 (0xccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Validity
Not Before: Mar 6 17:18:27 2026 GMT
Not After : Mar 13 17:18:27 2026 GMT
Subject: CN=69ab0c63-27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:09:b0:eb:16:f6:15:7b:a0:a6:fe:51:6c:ec:
c7:6b:ea:e7:3a:c9:f9:f8:aa:16:e7:a8:a9:60:f5:
33:7e:84:d6:ad:bb:49:30:18:c0:a9:00:c8:70:0a:
6a:4c:9c:6d:d5:2f:de:fb:4e:14:a9:68:4a:53:40:
45:ad:1e:da:93:56:d2:00:d6:48:a7:b4:63:fe:ea:
ea:bf:75:12:15:4e:6f:0d:71:3a:4c:7e:b3:74:04:
a1:7e:97:8f:df:08:53:dc:84:0a:14:30:ba:09:db:
75:7b:aa:80:0a:f5:23:85:32:35:bc:89:6b:0c:3e:
e9:06:36:b1:e3:9b:a5:dc:4a:66:1f:50:d9:f8:e9:
a4:41:bc:73:da:71:a5:51:a2:e9:ed:bd:95:21:68:
12:4d:69:76:3d:72:1d:0a:05:e5:4b:ea:d2:c7:08:
e6:4f:43:66:b2:ee:67:c2:7b:7f:0b:77:b8:93:cf:
e3:51:4b:20:ad:13:3d:6b:7f:e5:fb:a9:1a:fe:bf:
bb:bc:3e:a8:bd:44:8b:63:8f:3b:9d:d6:78:ea:53:
16:6a:a7:5f:67:0f:ad:e1:a6:5f:72:f1:1b:2a:d9:
e3:67:e0:e7:8d:12:51:91:c9:53:f0:fe:09:30:64:
a2:dd:db:1b:72:d7:c2:56:d3:cc:4b:39:43:54:72:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:41:0F:68:F9:33:9D:54:85:53:9C:6A:EF:8A:EF:9B:CB:E5:8A:63
X509v3 Authority Key Identifier:
keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:28:41:af:cd:5b:ec:35:a2:cc:e6:3b:49:5b:23:f5:2e:ae:
08:ac:ba:13:d8:d1:9f:fe:f4:bf:4a:e8:d9:90:ee:d2:93:c0:
6d:db:66:04:cb:b6:ea:e8:33:6c:08:a0:06:68:a1:ac:6b:1a:
ba:34:50:40:e2:97:53:1e:be:ca:2b:64:a8:4d:ac:e6:b0:d0:
59:97:f0:15:5c:18:09:c4:02:e1:1b:86:46:61:c6:5a:e3:8c:
c9:8f:2b:7b:f8:32:f9:67:3c:cb:fb:fb:63:2f:a3:7a:c6:06:
1f:77:d0:48:25:cc:d5:69:4f:97:87:6e:d5:16:58:d3:86:6c:
36:b7:7e:c5:90:84:6d:cd:a6:d3:f1:a7:c3:b6:79:b7:ee:94:
65:f7:f8:5c:4a:30:b2:26:89:4c:32:b9:08:9c:26:42:75:41:
e3:68:da:2c:b5:41:51:0b:b5:5e:d7:39:47:fb:a8:69:3e:a9:
3b:bc:5d:b6:f5:9f:74:03:8f:21:87:2b:5c:c0:6b:f3:28:81:
1d:30:b0:74:4d:c7:41:7c:eb:07:4c:62:62:e0:e6:08:62:b3:
4a:fc:11:ce:70:65:c6:27:1d:94:66:5e:0b:f0:b0:6c:52:6c:
b1:51:53:f3:0c:be:f7:e1:f3:cb:d7:a9:06:2c:f2:35:f4:c3:
82:85:f2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:38:15 2026 by rpki-client