
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json)
Hash identifier: zy+906Tm2DCkdJij1mC7J/g3AwvgK9na53b9VAkgqeI=
Subject key identifier: 5F:74:78:DF:C7:48:D5:DA:E7:99:76:01:C8:53:57:96:2D:FD:07:99
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
Manifest number: 0190
Signing time: Tue 03 Mar 2026 04:05:25 +0000
Manifest this update: Tue 03 Mar 2026 04:05:24 +0000
Manifest next update: Tue 10 Mar 2026 04:05:24 +0000
Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: YW66bAE1466gKNNRCp7rJyKiiuyLCwSqyaTywxRbM3c=)
2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: oVA7A9xbq/3XzKnToy39T95rB3d7qRIRIGsB5By2kNI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Validity
Not Before: Mar 3 04:05:24 2026 GMT
Not After : Mar 10 04:05:24 2026 GMT
Subject: CN=69a65e04-a5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:8c:8c:99:c4:83:d1:83:9b:aa:e5:79:4e:
49:fb:eb:26:f0:55:15:da:4e:c0:c9:0d:50:3a:c4:
a5:b6:a8:f3:ff:12:a9:7e:4c:28:25:62:d2:41:e6:
ec:30:c6:90:8d:6c:ba:ac:96:1f:2f:ac:7c:e9:91:
12:6c:08:1e:13:a2:f5:ba:ad:4d:d5:c5:05:8b:75:
0a:f4:74:69:3f:c6:62:2a:c8:15:72:8d:1b:11:df:
9f:e4:e4:31:74:c5:48:65:50:37:f1:10:78:08:ef:
26:8c:14:48:fc:c9:18:85:42:61:cf:b1:f3:73:aa:
ba:f3:80:f2:54:42:dc:05:c8:88:28:93:53:4c:bf:
6d:63:02:8c:91:9c:6d:bc:91:ec:a4:77:7f:bc:3e:
b7:f6:63:ca:1d:7a:7c:31:13:04:e4:d1:37:13:c7:
15:a3:2f:f8:d0:3f:58:57:cb:e5:47:53:8b:27:43:
87:a8:82:59:20:ad:50:f1:8f:c0:18:32:bf:ee:07:
25:77:9d:d7:6c:f6:b8:39:b3:dc:9e:bc:9e:3b:4e:
44:a7:f7:ca:96:6f:77:0f:f4:94:42:d2:b4:f4:d4:
ad:f3:da:a8:e2:b1:08:d6:4f:cf:01:63:b2:28:71:
6d:7d:9a:d3:6c:28:c4:11:c5:b2:63:3f:94:45:69:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:74:78:DF:C7:48:D5:DA:E7:99:76:01:C8:53:57:96:2D:FD:07:99
X509v3 Authority Key Identifier:
keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ce:1e:54:48:c0:6b:6e:ed:e2:45:d2:8c:ec:ef:20:f4:90:
74:91:d3:65:ba:58:0a:16:25:79:f6:f5:ad:19:0c:37:4a:8b:
b9:30:97:2f:5b:75:93:c5:06:e8:da:7b:0c:50:b5:c1:d9:78:
89:71:44:35:42:1e:8f:65:20:0b:45:54:db:1a:a2:55:c7:00:
4a:5b:6e:f2:ef:9e:a2:94:b5:a0:a5:9c:0f:8d:33:ee:b6:da:
7f:74:02:4e:15:8f:3c:33:a5:d1:d4:4a:fd:34:11:62:9e:ae:
50:3a:70:63:c2:27:d1:56:93:ed:95:13:c2:c1:b3:8d:07:75:
45:1f:94:09:0d:99:ca:94:33:3f:97:9b:0e:b7:a5:70:5b:38:
18:8a:24:2d:63:c2:80:41:0b:af:f7:1f:69:77:0a:63:9a:01:
36:5d:7a:b7:36:7a:ba:f4:35:41:5c:17:51:6d:fc:cc:2f:15:
59:5a:cb:a1:5b:3a:7d:0c:d3:58:88:23:57:9e:11:f2:8b:28:
41:92:74:e8:3e:25:d1:7f:d2:36:03:e2:df:22:52:54:87:fc:
e1:3a:e6:8e:10:f1:9e:db:01:3f:74:09:ab:44:f4:f2:52:a2:
5d:d7:96:dc:2a:4f:80:3e:db:98:bb:8f:9e:64:e2:4d:51:2e:
3d:25:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:31:14 2026 by rpki-client