
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File: FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier: zK/gBDua0nuALpFDz8HNcj+asGsH6sRId3uZ4NJ1jAo=
Subject key identifier: 00:7B:1E:51:45:BB:2A:D2:3F:E0:C5:B5:26:EB:34:53:03:0D:45:1A
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer: /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial: 02B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number: 029D
Signing time: Fri 13 Mar 2026 01:03:21 +0000
Manifest this update: Fri 13 Mar 2026 01:03:20 +0000
Manifest next update: Fri 20 Mar 2026 01:03:20 +0000
Files and hashes: 1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: zjQ3tFPf5OuGTbQpBSaJ9+jCYIPsZcXbER0qu6V3Ujo=)
2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: 9JCyRgRs6j+igw+gtUtxDvzUhWBvN1Zyyhk+gm4t+MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Validity
Not Before: Mar 13 01:03:20 2026 GMT
Not After : Mar 20 01:03:20 2026 GMT
Subject: CN=69b36259-468f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:e6:c1:ed:ca:85:e9:d8:95:11:1a:54:fd:
bb:5c:67:a0:f9:57:9b:be:d1:d9:ba:43:e8:ee:2a:
1a:f1:e2:dd:6b:3c:1e:89:a3:f0:51:a1:a0:37:aa:
63:2e:6f:93:6a:b0:40:fa:cc:6b:7f:9f:e6:60:66:
df:8d:98:e7:d0:02:89:cc:ca:ef:d1:bd:7d:6e:93:
2e:61:72:bb:c1:2b:e9:c9:b5:4b:e4:99:57:3a:69:
94:92:86:d1:e4:36:cd:a7:20:49:de:01:a9:c5:76:
02:26:7c:fe:18:f2:b9:c3:29:69:1b:6e:67:67:9a:
5e:ea:8e:1a:d6:bb:6a:16:02:d9:f0:15:6d:ee:ef:
ca:7c:d4:3b:29:3f:80:da:b7:ec:6f:82:8a:54:54:
7f:41:de:ba:79:7f:3c:8e:9b:60:aa:41:e4:20:a8:
96:c3:99:a3:ee:e5:06:42:f9:e9:24:d6:ed:34:e9:
2c:7f:16:ce:0d:26:bd:d1:51:5a:6a:a3:64:d8:1d:
bb:ca:8a:21:79:8d:8f:ef:0d:83:7b:86:23:33:f7:
dc:c3:63:14:75:f6:9c:d0:6e:53:75:61:53:fd:10:
e4:60:de:ff:9e:df:13:01:5b:f3:9a:49:87:fb:92:
6f:31:1b:c6:8c:71:55:f9:ff:f5:ff:06:cc:fd:c4:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7B:1E:51:45:BB:2A:D2:3F:E0:C5:B5:26:EB:34:53:03:0D:45:1A
X509v3 Authority Key Identifier:
keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:81:1d:55:07:36:db:65:91:8a:4e:5f:61:31:8a:9a:88:91:
60:58:01:4e:bf:e5:33:e4:dc:7d:db:c6:04:ce:a5:24:0b:e0:
96:01:32:33:6d:04:7d:23:99:52:19:bb:e2:b7:e7:1c:b0:a6:
fc:de:ae:dc:87:eb:0c:39:e7:ea:10:b2:44:8a:74:14:bd:d3:
c0:32:b4:c8:c8:45:e7:c9:5d:69:65:56:b2:28:f1:7a:64:75:
eb:d3:ae:48:64:f9:9f:21:c0:69:a5:2b:e8:b9:2a:96:8d:42:
98:ee:26:94:2c:ba:44:eb:35:32:6d:ca:26:56:04:f5:36:f6:
6c:72:e7:aa:ab:c8:6b:5c:4f:dd:f4:3e:3b:dd:bf:1d:2e:c3:
50:11:0c:3c:17:56:d8:3a:55:b7:a0:37:a5:05:51:01:fe:06:
c8:1c:20:ce:79:35:01:2e:01:f9:66:e6:cd:e4:82:4a:1c:18:
e0:de:37:68:74:b5:97:a5:41:18:30:65:c9:c5:b6:89:31:59:
6e:02:04:3b:bb:ba:8c:5a:5b:73:96:be:6e:aa:94:90:14:1b:
e9:a5:10:7a:e3:78:f1:96:e8:87:e8:1f:ec:b0:e9:8f:61:9a:
7f:9c:76:c7:fc:5f:69:4d:0b:99:a1:06:90:6a:5c:c4:6d:53:
53:09:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:50:28 2026 by rpki-client