
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier: eIKYadVEEP1Mo8iEJfgYFkegX0F1NqKDfrBpXJiwCIY=
Subject key identifier: B1:B1:1D:3B:49:D8:58:72:55:80:E9:08:76:EF:B3:AF:A6:9B:BC:10
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial: 025C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number: 0254
Signing time: Fri 13 Mar 2026 01:33:35 +0000
Manifest this update: Fri 13 Mar 2026 01:33:35 +0000
Manifest next update: Fri 20 Mar 2026 01:33:35 +0000
Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: LhsBOx7/r1Jv3maBFe8Sh8k1CJk2nMuFcZQE2uQImrk=)
2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: oaiaqucuuW2GkSf9+4cz6o/y7s/8O/quv+/nOFG+UjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Validity
Not Before: Mar 13 01:33:35 2026 GMT
Not After : Mar 20 01:33:35 2026 GMT
Subject: CN=69b3696f-e2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:b3:c2:99:b8:af:b4:d0:17:3d:98:a9:51:
47:16:4a:e1:3c:7d:f3:ad:b0:a0:c3:07:38:3f:a7:
2e:a9:a4:0f:c6:e0:8b:79:68:36:f0:93:bb:78:20:
8a:ad:c3:cd:d0:7c:ea:3f:65:98:34:2c:f2:db:2b:
69:cb:84:38:5c:45:af:b4:09:88:ea:9f:95:27:7e:
51:c0:c6:63:c9:be:e4:83:5e:4a:50:e8:ae:e9:47:
67:00:3c:04:57:56:fc:7f:08:74:ec:d2:a9:25:29:
2d:56:f8:e9:e5:3d:6c:f2:69:64:d3:92:49:a8:fd:
db:a9:45:40:99:3f:78:38:3a:6e:57:d2:60:76:12:
b2:a7:a0:ad:8d:99:b9:92:45:0c:ff:a8:77:bd:a2:
82:c1:dc:f5:a0:c4:7b:11:57:5a:b5:a2:60:14:67:
48:1d:17:69:c9:46:17:8f:e8:8f:e1:48:4f:77:44:
5d:bc:84:aa:2f:ea:eb:ca:cc:ae:05:42:76:92:9a:
7a:a4:ca:94:59:4b:45:f0:57:36:f5:83:c9:15:8f:
c6:25:0e:65:54:5d:93:63:83:f4:60:11:28:4c:a8:
0f:12:c5:84:a7:d6:27:47:b0:53:b7:b2:2d:61:c9:
91:64:98:11:d0:47:8c:f6:96:c0:78:83:38:2b:bd:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B1:1D:3B:49:D8:58:72:55:80:E9:08:76:EF:B3:AF:A6:9B:BC:10
X509v3 Authority Key Identifier:
keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e7:6d:23:15:c3:3e:be:73:76:ae:e6:38:54:a7:be:f5:c2:
53:ac:ea:f0:9f:03:9a:de:ac:62:a7:5d:6f:70:e2:4a:0f:79:
c2:44:f6:48:7a:6d:cc:56:e5:2e:53:29:92:83:27:55:99:8c:
f5:16:c6:0a:0c:23:fd:ed:5d:31:68:fe:2e:cf:33:70:cd:00:
21:d8:c6:fb:a3:5c:a9:d3:db:1f:17:28:67:3d:49:5d:80:9a:
34:18:a6:6c:fc:93:dd:b0:89:6f:37:71:cf:e8:d5:be:63:fe:
14:12:32:d9:60:5b:25:01:41:55:d9:98:23:83:db:2d:e8:c7:
8c:e2:a9:42:89:8a:af:de:7f:c9:bb:0c:dd:ef:e9:1b:bf:e9:
1e:53:09:09:a0:1e:85:bf:10:67:b8:de:54:e4:1d:09:3d:c7:
e5:a5:a1:72:65:e8:50:26:2f:17:50:14:61:90:35:90:24:72:
2c:ef:dd:75:0a:ae:94:da:a6:24:eb:ac:92:ba:f7:e3:ca:df:
4f:c3:cb:9c:ae:5c:44:38:4b:6d:46:c5:91:54:1e:c2:87:cf:
f3:e2:73:5a:33:57:ee:4c:e5:8d:0a:89:b2:a9:00:6a:26:8d:
60:96:e8:05:ab:81:26:fc:94:ed:b6:89:57:49:62:99:05:f1:
87:97:52:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz
NUE1MUFBOUUwHhcNMjYwMzEzMDEzMzM1WhcNMjYwMzIwMDEzMzM1WjAYMRYwFAYD
VQQDEw02OWIzNjk2Zi1lMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA28+zwpm4r7TQFz2YqVFHFkrhPH3zrbCgwwc4P6cuqaQPxuCLeWg28JO7eCCK
rcPN0HzqP2WYNCzy2ytpy4Q4XEWvtAmI6p+VJ35RwMZjyb7kg15KUOiu6UdnADwE
V1b8fwh07NKpJSktVvjp5T1s8mlk05JJqP3bqUVAmT94ODpuV9JgdhKyp6CtjZm5
kkUM/6h3vaKCwdz1oMR7EVdataJgFGdIHRdpyUYXj+iP4UhPd0RdvISqL+rrysyu
BUJ2kpp6pMqUWUtF8Fc29YPJFY/GJQ5lVF2TY4P0YBEoTKgPEsWEp9YnR7BTt7It
YcmRZJgR0EeM9pbAeIM4K736AQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGxHTtJ
2FhyVYDpCHbvs6+mm7wQMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0
RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO
NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvedtIxXDPr5zdq7mOFSnvvXCU6zq8J8Dmt6sYqddb3DiSg95wkT2SHptzFbl
LlMpkoMnVZmM9RbGCgwj/e1dMWj+Ls8zcM0AIdjG+6NcqdPbHxcoZz1JXYCaNBim
bPyT3bCJbzdxz+jVvmP+FBIy2WBbJQFBVdmYI4PbLejHjOKpQomKr95/ybsM3e/p
G7/pHlMJCaAehb8QZ7jeVOQdCT3H5aWhcmXoUCYvF1AUYZA1kCRyLO/ddQqulNqm
JOuskrr348rfT8PLnK5cRDhLbUbFkVQewofP8+JzWjNX7kzljQqJsqkAaiaNYJbo
BauBJvyU7baJV0limQXxh5dSLA==
-----END CERTIFICATE-----
Generated at Sat Mar 14 21:44:50 2026 by rpki-client