
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json)
Hash identifier: ovV2peCletQ3ZgZyYGcDfcwsT4aRCCC3Ad90q2g9gQQ=
Subject key identifier: 6E:EF:0A:A0:CD:C6:10:06:36:CC:24:84:92:35:44:BC:26:A8:58:72
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
Manifest number: 0123
Signing time: Tue 03 Mar 2026 05:16:38 +0000
Manifest this update: Tue 03 Mar 2026 05:16:38 +0000
Manifest next update: Tue 10 Mar 2026 05:16:38 +0000
Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: BEAWwiF5SUlc0ps6SpUpAleYVZBv1tAmJDf1rUI8Vu4=)
2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: xjdj17TdvEDkLf9+p3eEDDKwL+UFS4OGM0bjJjQEXIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:16:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Validity
Not Before: Mar 3 05:16:38 2026 GMT
Not After : Mar 10 05:16:38 2026 GMT
Subject: CN=69a66eb6-5059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:f9:77:c1:20:4b:fb:15:ee:85:ae:8a:21:
8f:34:22:3e:24:85:e0:fb:ed:1d:02:88:8e:7c:72:
6b:71:f8:7b:c9:b1:9e:0e:0a:ea:bd:ad:93:1d:9b:
f0:ce:a0:4a:28:0c:21:3e:1d:ad:b2:2e:97:99:38:
69:24:08:d7:e8:86:5e:e6:3a:fb:95:ac:a8:2c:4f:
e0:a2:d2:f4:c8:94:72:ff:4b:9e:86:bc:ba:b7:4d:
a5:cb:00:55:f9:fe:f8:ff:4e:d4:d3:93:47:ab:12:
7f:4d:48:49:b9:2a:4d:e5:2d:e5:ef:5e:af:61:b5:
28:39:7d:fa:d9:36:57:31:5b:ec:66:c7:16:e0:72:
f1:d8:d3:8e:fb:fe:d7:81:69:eb:e7:d8:f9:6b:3e:
81:65:c0:89:c2:ba:75:7e:09:f4:a5:e2:69:03:3f:
2a:17:3c:3d:77:0b:f3:0a:79:c4:25:a7:bc:ad:76:
09:60:2b:b7:4e:40:78:1c:6c:88:f9:b0:c8:53:5c:
25:b2:ae:2e:a1:25:00:07:85:a0:ee:81:70:7a:74:
ae:5e:1b:28:ef:e5:25:92:a1:98:f6:db:62:16:ff:
ab:52:0a:f3:0d:59:d8:79:38:e8:5d:5e:ba:f6:6a:
b0:e6:08:74:fe:03:2f:68:a8:fc:90:03:34:42:a9:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:0A:A0:CD:C6:10:06:36:CC:24:84:92:35:44:BC:26:A8:58:72
X509v3 Authority Key Identifier:
keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ac:f8:5e:0a:e4:bc:32:bb:14:18:c0:50:f5:32:48:2a:d3:
ec:e8:29:d1:d7:69:74:f0:ab:67:db:a8:19:6f:9b:97:a8:65:
d1:2a:47:4c:a5:46:a8:64:3a:a5:b5:b4:e3:87:35:25:10:bf:
72:a7:00:59:e3:57:f9:59:ab:00:0d:de:15:2d:74:95:50:d4:
66:96:90:8c:fd:78:72:65:4e:7b:d9:59:fc:1d:be:b8:12:dc:
4d:70:8b:ae:46:1d:90:59:07:3d:01:48:fe:d9:ef:b6:5a:fd:
f5:45:8a:86:27:2f:3e:1f:18:36:f2:c0:65:c0:c4:1c:62:22:
7d:ee:60:47:34:5c:01:3b:db:83:bc:46:2d:32:b1:ec:68:56:
7e:86:00:2e:f2:22:37:b9:35:f9:96:da:47:0e:6b:d9:f8:d6:
c2:2c:40:86:71:09:06:aa:b5:0c:f4:d4:a1:60:bb:36:0d:6d:
9f:7c:ee:e8:49:b2:f2:50:a6:ad:a4:7e:9b:4f:64:ce:e3:c0:
f2:c7:1f:ea:f6:4c:17:9f:ed:23:93:5d:0b:b9:d1:c3:36:42:
9f:e9:73:37:78:5f:fd:55:69:4e:56:7e:a2:fe:f2:54:47:14:
c7:37:31:7d:47:0a:f4:19:79:91:49:18:ce:9b:6e:7e:a7:74:
29:76:65:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF
MDlDRkUzNUMwHhcNMjYwMzAzMDUxNjM4WhcNMjYwMzEwMDUxNjM4WjAYMRYwFAYD
VQQDEw02OWE2NmViNi01MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQj5d8EgS/sV7oWuiiGPNCI+JIXg++0dAoiOfHJrcfh7ybGeDgrqva2THZvw
zqBKKAwhPh2tsi6XmThpJAjX6IZe5jr7layoLE/gotL0yJRy/0uehry6t02lywBV
+f74/07U05NHqxJ/TUhJuSpN5S3l716vYbUoOX362TZXMVvsZscW4HLx2NOO+/7X
gWnr59j5az6BZcCJwrp1fgn0peJpAz8qFzw9dwvzCnnEJae8rXYJYCu3TkB4HGyI
+bDIU1wlsq4uoSUAB4Wg7oFwenSuXhso7+UlkqGY9ttiFv+rUgrzDVnYeTjoXV66
9mqw5gh0/gMvaKj8kAM0QqlU/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG7vCqDN
xhAGNswkhJI1RLwmqFhyMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE
RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT
OGFianM1WXoxSUxnblA0MXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADKz4XgrkvDK7FBjAUPUySCrT7Ogp0ddpdPCrZ9uoGW+bl6hl0SpHTKVGqGQ6
pbW044c1JRC/cqcAWeNX+VmrAA3eFS10lVDUZpaQjP14cmVOe9lZ/B2+uBLcTXCL
rkYdkFkHPQFI/tnvtlr99UWKhicvPh8YNvLAZcDEHGIife5gRzRcATvbg7xGLTKx
7GhWfoYALvIiN7k1+ZbaRw5r2fjWwixAhnEJBqq1DPTUoWC7Ng1tn3zu6Emy8lCm
raR+m09kzuPA8scf6vZMF5/tI5NdC7nRwzZCn+lzN3hf/VVpTlZ+ov7yVEcUxzcx
fUcK9Bl5kUkYzptufqd0KXZl4Q==
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:50:11 2026 by rpki-client