
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json)
Hash identifier: Mr1Iln8yDRVwRYrCAlzRADjezGgrrXMm0kkoSp6DCMg=
Subject key identifier: AF:FB:2C:BC:A9:41:CB:A6:AD:2E:4C:32:58:84:4E:AC:C6:62:12:E0
Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Certificate serial: 04A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
Manifest number: 0487
Signing time: Mon 27 Apr 2026 00:03:54 +0000
Manifest this update: Mon 27 Apr 2026 00:03:54 +0000
Manifest next update: Mon 04 May 2026 00:03:54 +0000
Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: Y74URv9S95dFsDPgCP64+lWD0Bdi9G7GJ90+kK5b9K0=)
2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: /1zPPqOprES64oKSnzNIO7onohzBHekwOoaFlHoU8GU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 00:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B
Validity
Not Before: Apr 27 00:03:54 2026 GMT
Not After : May 4 00:03:54 2026 GMT
Subject: CN=69eea7ea-88f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:ef:7e:ba:65:06:0f:18:c4:2d:bf:9c:e0:
01:7e:86:eb:4b:9a:2b:c7:c7:a9:4c:77:31:d0:1e:
96:b9:40:7d:b8:59:68:ee:70:81:57:79:d4:8c:c2:
a4:16:dc:4e:c1:a3:91:dc:61:05:8b:c2:c1:4a:8b:
6f:af:5b:77:ef:55:88:e3:aa:45:88:20:af:57:26:
e3:db:f1:9a:cb:d5:ae:12:23:f2:95:b7:f1:14:8c:
aa:3f:ab:20:b0:bf:eb:e0:f3:49:42:3f:fb:04:6f:
e2:01:e1:de:35:1a:2f:bc:25:ab:7f:22:dc:e7:f5:
db:41:0b:01:eb:2a:9b:94:82:a4:c9:90:29:97:3c:
7f:bd:52:d0:fe:99:b4:ae:ef:92:c4:4c:bb:10:cf:
6d:e7:c4:fa:0a:7b:6b:1f:08:46:82:1b:da:d0:31:
1b:5b:18:e3:5d:06:2e:5d:48:26:69:65:e5:db:9e:
df:35:28:e1:64:3f:88:9e:fa:4d:b5:14:be:af:57:
1c:99:c1:4c:89:04:9a:43:9d:63:b9:84:aa:f8:8e:
e5:96:7e:06:7c:c4:ab:fe:13:37:15:51:c0:e8:8d:
3e:dd:fc:82:82:49:db:7c:29:88:0b:81:03:3d:eb:
4f:df:ea:75:8a:03:e5:0e:df:4d:d6:1d:e8:ef:5c:
ba:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FB:2C:BC:A9:41:CB:A6:AD:2E:4C:32:58:84:4E:AC:C6:62:12:E0
X509v3 Authority Key Identifier:
keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:99:14:bb:c1:39:47:78:41:29:10:ad:b4:8a:8c:15:79:
74:90:00:78:90:37:c2:cd:37:0a:7b:c6:32:13:b7:09:fd:74:
3d:21:4f:14:76:57:7d:ff:46:50:24:89:5e:af:ce:e0:c6:2f:
9e:e5:6f:bd:1a:5d:90:2f:27:7b:24:aa:52:8b:6b:55:89:77:
57:ff:94:60:ba:ef:8b:80:3b:3a:06:bf:32:5d:2a:f8:7c:81:
25:ff:45:3d:7f:03:7b:b1:0f:d6:ec:9c:6e:72:ca:14:84:a8:
41:45:4b:3e:72:38:41:02:4e:6c:96:48:34:e1:65:e3:2a:7f:
44:a8:6f:82:30:c4:61:09:b5:8a:43:f5:19:d8:85:4a:4b:b7:
0c:22:38:70:87:11:66:05:10:8a:86:ae:71:37:b7:95:f1:72:
a3:0c:63:e4:12:5d:92:08:c8:9b:e0:b5:a2:e1:b4:21:60:98:
bc:6a:57:9c:17:da:70:06:46:19:3b:aa:86:cf:65:93:3a:90:
65:34:44:2e:1f:f8:2a:6c:f2:d4:a0:78:5c:72:d1:0f:bd:97:
7b:e8:49:80:87:ea:ed:ff:bf:3d:46:43:fe:d8:00:7b:b9:54:
ff:fb:bd:7b:10:74:eb:ab:96:3f:1e:65:d6:18:34:7a:ac:a2:
f1:65:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 13:07:40 2026 by rpki-client