
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier: JQzHMpajExYpqJ7KZ47+n8YhPKTFbVc1dfYNcBzoKmU=
Subject key identifier: 38:47:49:92:AD:E4:65:AD:58:D8:EF:BB:FA:22:42:E9:8F:C7:89:36
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number: D0
Signing time: Sun 05 Apr 2026 06:09:36 +0000
Manifest this update: Sun 05 Apr 2026 06:09:35 +0000
Manifest next update: Sun 12 Apr 2026 06:09:35 +0000
Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: GU3Avjc0XBDFHCUN3WndGmiJdrtXUVqbq0pPgLnPksc=)
2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: E3Ke3Xy/6Z8DXkSqpxZkye2OZYgZjF6Qzh75z3050z8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Validity
Not Before: Apr 5 06:09:35 2026 GMT
Not After : Apr 12 06:09:35 2026 GMT
Subject: CN=69d1fca0-f7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:96:de:64:01:67:22:04:bf:9c:4e:42:55:
84:5c:24:33:d7:c7:3f:ea:74:05:48:de:ba:3f:db:
a3:f0:04:59:71:94:bb:95:d7:78:04:01:39:15:8f:
ac:0c:b6:22:d1:cc:c3:7f:33:45:67:ef:2b:2c:85:
6d:48:39:f5:c3:19:00:a9:79:f1:8a:19:31:09:2b:
c8:41:01:d0:78:78:36:24:2e:77:fb:1b:a7:3f:f2:
6e:01:2a:c7:0b:6b:df:a3:e1:61:56:13:07:76:a8:
1b:e0:bd:04:19:f7:eb:27:02:49:55:a4:6d:2d:d9:
59:42:34:a5:4c:50:0f:a8:63:11:b7:f1:b5:6b:45:
c4:05:39:74:11:78:2d:9b:c2:0f:b9:9c:80:1e:fe:
7d:f1:62:9b:9b:f7:9e:3f:e6:4c:34:5b:39:03:be:
0e:0e:32:e9:a8:c5:12:c1:ef:b2:13:f9:79:ad:60:
79:e8:39:b9:e5:9c:3d:b2:6f:5d:88:c6:c3:4d:87:
b6:e5:6d:78:31:a0:e1:11:1f:b2:32:1b:bf:c8:f7:
7a:c3:ff:c4:08:a2:fb:a9:93:06:4f:21:cb:84:5c:
6e:fc:b7:8b:cd:f4:01:45:f4:47:99:40:6b:76:e4:
3c:44:5c:f1:27:10:cb:4f:c8:a0:94:92:d7:cc:d9:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:49:92:AD:E4:65:AD:58:D8:EF:BB:FA:22:42:E9:8F:C7:89:36
X509v3 Authority Key Identifier:
keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:85:fa:8e:fe:14:c7:38:fd:d2:e4:f4:00:98:8a:95:d2:59:
3e:d4:b0:6e:81:44:92:de:df:55:2e:13:93:a6:6e:32:de:df:
0f:89:da:b6:77:17:80:48:01:5c:66:11:62:b6:6b:6f:ae:58:
e1:85:66:7d:1b:4a:60:5c:88:ee:e9:46:41:76:b2:ae:7b:88:
86:e7:a6:50:19:24:13:bc:ce:7e:62:96:aa:07:25:59:fd:18:
95:6e:32:cc:85:36:6e:60:d4:1c:9d:2b:a9:11:fc:a7:75:6a:
a8:a5:e1:cc:aa:ca:9b:bf:18:b4:ea:f5:5d:7a:64:f9:88:2d:
53:0f:72:27:24:80:5e:5e:ff:3a:8b:c5:6e:50:b6:1b:8d:c8:
5b:85:91:17:3d:a7:c9:58:c2:e4:78:66:f6:21:54:25:26:9d:
c0:75:7c:59:51:b9:e5:aa:51:b9:75:4f:01:7c:e6:3a:15:61:
12:10:7e:a8:bf:66:7c:45:a1:16:bf:6c:05:4a:ac:ad:c4:fe:
0c:2b:30:b3:9d:97:a2:5b:5b:31:bc:1b:b0:de:34:18:1c:9f:
8d:61:5a:08:37:6b:1b:cc:00:98:56:16:10:2e:3a:c5:d4:0d:
99:b7:aa:ec:78:20:08:7e:e0:86:55:bf:03:6c:46:bb:b2:d8:
f7:11:a6:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRCODYxMTAvBgNVBAUTKDE0RDVBRDI3MjJBQ0E4NkFEMzRGMEY5QTM0NDcyNkNC
NjY5ODA4MzEwHhcNMjYwNDA1MDYwOTM1WhcNMjYwNDEyMDYwOTM1WjAYMRYwFAYD
VQQDEw02OWQxZmNhMC1mN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzeW3mQBZyIEv5xOQlWEXCQz18c/6nQFSN66P9uj8ARZcZS7ldd4BAE5FY+s
DLYi0czDfzNFZ+8rLIVtSDn1wxkAqXnxihkxCSvIQQHQeHg2JC53+xunP/JuASrH
C2vfo+FhVhMHdqgb4L0EGffrJwJJVaRtLdlZQjSlTFAPqGMRt/G1a0XEBTl0EXgt
m8IPuZyAHv598WKbm/eeP+ZMNFs5A74ODjLpqMUSwe+yE/l5rWB56Dm55Zw9sm9d
iMbDTYe25W14MaDhER+yMhu/yPd6w//ECKL7qZMGTyHLhFxu/LeLzfQBRfRHmUBr
duQ8RFzxJxDLT8iglJLXzNmwowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhHSZKt
5GWtWNjvu/oiQumPx4k2MB8GA1UdIwQYMBaAFBTVrScirKhq008PmjRHJstmmAgx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni85MzA2QTJDNEY3
RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FHclRUdy1hTkVjbXkyYVlD
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZOV3RKeUtzcUdyVFR3LWFORWNteTJhWUNERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEI4Ni85MzA2QTJDNEY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9GTld0SnlLc3FH
clRUdy1hTkVjbXkyYVlDREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv4X6jv4Uxzj90uT0AJiKldJZPtSwboFEkt7fVS4Tk6ZuMt7fD4natncXgEgB
XGYRYrZrb65Y4YVmfRtKYFyI7ulGQXayrnuIhuemUBkkE7zOfmKWqgclWf0YlW4y
zIU2bmDUHJ0rqRH8p3VqqKXhzKrKm78YtOr1XXpk+YgtUw9yJySAXl7/OovFblC2
G43IW4WRFz2nyVjC5Hhm9iFUJSadwHV8WVG55apRuXVPAXzmOhVhEhB+qL9mfEWh
Fr9sBUqsrcT+DCsws52XoltbMbwbsN40GByfjWFaCDdrG8wAmFYWEC46xdQNmbeq
7HggCH7ghlW/A2xGu7LY9xGm+g==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:20 2026 by rpki-client