
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
File: FizOhuKjaX6Ri3y11W2goALHk3E.mft (raw, json)
Hash identifier: ZkDpUL2B0BWjs6VE9PuGdAhbXKnCIC+ebszW5w5eJnQ=
Subject key identifier: 40:55:D9:CB:87:30:15:07:4F:9B:8C:71:CB:4E:ED:D8:29:CE:79:6A
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Certificate issuer: /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
Manifest number: B4
Signing time: Sun 05 Apr 2026 06:27:33 +0000
Manifest this update: Sun 05 Apr 2026 06:27:32 +0000
Manifest next update: Sun 12 Apr 2026 06:27:32 +0000
Files and hashes: 1: FizOhuKjaX6Ri3y11W2goALHk3E.crl (hash: H4ZjHFxwAfWQh97GnUO0aAkbUfr+UiNxiZSNWTLSNnU=)
2: BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (hash: VcrcI1T64xcQTIX2sf42tBKpj/RfLPTrglEhS/U0jDM=)
3: AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (hash: PTHb8KOhzoM5eTge4HROU2y+Kqm/UI2CnopwB3CICmY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Validity
Not Before: Apr 5 06:27:32 2026 GMT
Not After : Apr 12 06:27:32 2026 GMT
Subject: CN=69d200d5-1a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:0c:0a:ad:d2:fb:e8:fd:25:66:c8:49:14:
78:ee:e1:94:89:74:5a:53:87:dd:41:0a:d7:be:ae:
84:e5:eb:6f:b0:ed:65:43:70:3f:c6:3b:44:ea:90:
78:59:ec:84:2a:56:8d:74:44:10:c4:48:63:16:1f:
0b:b9:40:42:7e:19:f9:5e:8f:86:34:88:7f:0b:53:
88:a1:32:50:8e:f0:19:2d:10:07:4b:52:5a:64:9b:
32:ec:02:94:06:b8:4b:76:c0:a4:77:5d:97:7d:e6:
15:9c:8d:d5:1d:a9:e6:0d:bc:8d:bd:2d:34:79:94:
9e:d2:67:1c:66:2b:e4:78:82:06:e6:d3:5e:3f:7a:
2c:81:87:46:f8:4f:69:e5:5f:e0:1d:5c:e0:aa:2e:
1b:95:bd:30:50:c9:e3:56:55:97:35:c7:06:df:0a:
b8:bf:08:7d:a9:72:c0:60:26:df:f0:f5:38:e0:d7:
82:fd:76:99:55:73:22:06:73:df:eb:74:de:e1:f7:
66:c5:ab:9c:df:36:2a:fd:28:bf:8c:23:88:0b:f0:
ca:fd:55:a3:cd:cf:0e:bd:9d:82:b0:ed:0c:f3:a9:
42:5f:da:77:5c:fc:ec:e4:61:41:a5:af:e1:01:e2:
26:f4:62:9f:51:b6:ab:78:56:21:e5:be:9e:d2:09:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:D9:CB:87:30:15:07:4F:9B:8C:71:CB:4E:ED:D8:29:CE:79:6A
X509v3 Authority Key Identifier:
keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f0:e5:d6:e0:c5:a7:3c:38:ea:d5:ee:43:66:10:3d:4e:b1:6b:
4e:fc:9c:f4:6d:3f:57:10:2d:29:93:07:7d:75:06:08:d1:18:
29:5a:23:97:be:2c:1b:cb:98:4f:e6:a7:45:50:76:de:2c:cd:
3b:0d:33:fc:dd:39:66:55:96:e3:0a:3c:41:d4:d0:65:f7:46:
f3:f5:cc:ca:b4:84:b8:7d:e7:11:d9:36:55:d5:2c:11:90:69:
6d:cd:b8:b8:06:fa:76:48:29:cd:11:2d:5d:36:bc:68:bf:87:
85:d5:52:be:09:84:da:86:f8:8b:dd:c6:de:fe:14:99:fe:29:
db:37:e4:61:55:53:0d:89:19:b2:d2:90:e8:4c:1b:ba:6b:a0:
c1:64:66:c7:7a:dc:09:14:45:4b:ee:d5:a6:ef:e8:cd:1a:8d:
0b:a4:04:40:74:39:0d:b5:05:60:bc:21:ab:73:99:27:86:f5:
6d:63:56:30:6f:46:00:0d:37:26:fe:81:a3:82:8a:64:12:5c:
9f:94:8c:4c:b7:94:ed:dd:03:7f:d0:14:4f:30:dc:e3:be:dc:
93:57:44:72:87:d2:5d:0c:10:b0:31:d3:11:a3:7f:45:a6:b2:
07:ed:e7:53:30:98:cd:d6:49:90:ba:30:7c:b3:07:af:e7:29:
78:69:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:15 2026 by rpki-client