
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json)
Hash identifier: EkCcZz1UqsW8LM2I5GlZdb6Ce1svDSOy0P+76gKvmUw=
Subject key identifier: ED:F2:E9:4C:22:E4:1C:DE:2C:69:5C:1C:F4:D5:7E:29:CC:4A:9F:78
Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
Manifest number: 8E
Signing time: Fri 13 Mar 2026 06:31:11 +0000
Manifest this update: Fri 13 Mar 2026 06:31:10 +0000
Manifest next update: Fri 20 Mar 2026 06:31:10 +0000
Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: OLRE9mxfcVV8JZJCw734qp4Z3jbZpIKEyW54KcnkrkA=)
2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 8TFnySzYjqGkLlYHhhpYGf9ApF8MAtmix4sZ0+hIQmI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 06:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34
Validity
Not Before: Mar 13 06:31:10 2026 GMT
Not After : Mar 20 06:31:10 2026 GMT
Subject: CN=69b3af2e-b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:fe:c2:d3:62:07:dc:48:f2:ea:bb:e5:9f:
06:b5:9c:c2:9a:c4:f1:da:03:a9:e3:b5:21:d7:0e:
25:47:aa:71:34:16:0a:86:51:37:f2:35:60:df:10:
a9:87:a8:a5:55:ca:e2:0c:62:4f:e7:34:9e:26:78:
aa:f5:ef:20:15:83:37:b2:20:74:0d:19:58:72:a9:
9b:53:d5:7d:c3:27:44:5a:07:12:d4:0e:54:88:ef:
c2:8a:4f:af:bc:0f:55:1a:10:34:f9:bc:c1:a9:d6:
38:93:ac:e4:43:1d:3e:1b:4d:07:08:6e:7c:66:5a:
09:ef:30:bd:db:1d:1f:26:75:37:e2:80:c8:df:78:
91:40:a4:6a:d8:f1:ce:29:35:df:20:d9:99:b3:28:
f9:33:c8:5d:cf:d6:3c:28:d3:c3:7c:a8:46:da:e3:
42:1a:bd:df:6b:38:22:c1:14:c9:af:34:5e:d7:75:
20:c9:de:72:73:6b:31:59:da:22:9f:e0:9e:45:6a:
cb:c4:49:eb:e3:f0:3b:89:c3:1e:bb:b6:ec:a6:84:
0f:c0:35:3c:eb:e9:ed:a5:fe:8b:f0:4c:cf:92:50:
44:4f:44:98:bd:14:d5:62:19:82:c3:a3:c0:62:5f:
b7:2c:6e:20:42:68:9b:fa:b6:62:a0:f1:d8:74:19:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F2:E9:4C:22:E4:1C:DE:2C:69:5C:1C:F4:D5:7E:29:CC:4A:9F:78
X509v3 Authority Key Identifier:
keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:c9:3e:19:04:f6:ff:7b:c1:67:4a:a6:c1:16:e0:7b:4a:
d7:92:f5:15:42:fe:38:66:a6:d0:c9:70:fe:19:e4:1d:ab:89:
5c:f9:33:b5:14:9d:3b:95:61:d6:f9:a3:7f:a6:28:ad:a5:c0:
e6:07:8b:e1:63:f3:e7:7b:8d:b7:3e:67:b3:ee:f8:cf:55:f2:
95:c1:ed:29:b4:24:61:21:cd:6f:cc:bc:20:f7:92:34:1d:d8:
36:71:1b:c5:ef:54:59:b9:c2:c2:79:4f:94:dc:d7:03:10:33:
3a:0c:07:a0:09:0a:8f:64:51:70:a3:36:57:33:c1:2f:46:72:
f5:1e:af:fb:1c:27:7d:9b:1a:cb:7f:10:7e:b3:83:2b:89:89:
63:5c:06:7c:ba:29:62:73:b6:d3:d8:b3:20:61:3a:43:5d:c3:
5d:67:0e:87:ce:5f:e5:29:af:3e:fb:65:80:35:af:7b:96:ea:
1c:98:85:ae:82:3d:8f:51:94:c3:47:0d:9a:a2:df:43:2c:65:
2f:84:db:d0:3d:5f:07:bc:db:81:37:56:ee:d4:7f:e1:69:6e:
a9:f0:cd:39:f1:54:51:15:50:f4:a2:81:fd:b5:db:4f:ea:92:
fe:ba:32:b7:ca:0e:76:35:20:d7:f8:3c:cb:14:55:4a:f4:2e:
8a:a3:97:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:50:56 2026 by rpki-client