
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json)
Hash identifier: CC9qzalqd4roZ8MEqV/FlyM6aJBf1k1gW/BNJbi0ROc=
Subject key identifier: 3A:F2:A3:92:B1:40:89:FF:34:81:05:14:54:2A:3F:40:D2:05:1D:D7
Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
Manifest number: B2
Signing time: Tue 03 Mar 2026 06:44:44 +0000
Manifest this update: Tue 03 Mar 2026 06:44:44 +0000
Manifest next update: Tue 10 Mar 2026 06:44:44 +0000
Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: PahuhN4Cfz0pFBjHl35zkk+5YPd5R26HiGb3lbtIr4o=)
2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: lzWcthtY3PcIvfMfNwdv6B2jmx18XmALZD2LUr/GF+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:44:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Validity
Not Before: Mar 3 06:44:44 2026 GMT
Not After : Mar 10 06:44:44 2026 GMT
Subject: CN=69a6835c-d551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:a3:b7:9d:9e:f1:4f:0c:ef:04:b4:ea:d5:
15:2c:08:23:de:db:ea:8d:b6:ab:b1:99:9b:0b:1a:
38:33:78:62:32:57:7e:a4:81:fe:15:cc:1f:4f:e1:
f6:75:b6:b0:16:8b:33:79:d8:78:a7:79:83:ae:04:
78:74:c4:cf:02:2a:b4:95:ba:37:26:29:a4:65:d4:
f3:0c:35:2f:a4:83:ad:c1:16:b8:13:1c:d6:6d:76:
47:94:2c:e6:a7:d3:c5:b6:de:7f:84:b4:b7:4b:f2:
52:73:0c:bd:5b:a3:d5:db:4e:fe:43:4a:9b:92:19:
c3:0a:d9:66:71:17:20:7a:35:e3:20:3f:d6:c3:0e:
e4:6e:c9:ce:53:20:b0:a5:57:70:59:0c:0b:a9:18:
d6:ff:40:60:30:c3:f6:06:e3:70:dc:4a:df:b7:69:
5b:20:d1:26:64:eb:f7:5f:75:02:48:88:3d:f6:06:
fe:9a:cf:c1:06:1b:26:d7:64:0b:7e:03:ac:c1:8f:
e3:fa:1d:9c:cb:49:6d:7a:dd:1d:c5:a2:fb:82:7b:
e8:c5:ef:b9:8d:48:84:7d:5e:e5:98:70:4a:38:8c:
bb:69:e9:3f:01:e1:b5:21:43:48:90:11:16:6b:b8:
14:3b:f1:ce:9f:4e:05:4c:9f:01:f9:9e:16:04:83:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:A3:92:B1:40:89:FF:34:81:05:14:54:2A:3F:40:D2:05:1D:D7
X509v3 Authority Key Identifier:
keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:a7:49:b4:df:23:52:27:46:91:cb:10:56:e2:3a:93:07:55:
b9:1f:5c:17:98:5b:74:22:d1:fc:21:11:82:64:b1:db:a8:31:
d6:01:db:30:55:e8:02:fe:68:f8:7c:7d:65:17:a0:32:68:d6:
f2:3b:d0:04:00:ff:f6:18:59:6c:df:d4:57:20:f1:9c:51:50:
4e:3e:61:8c:42:10:19:b4:15:94:fd:d8:55:3e:17:10:11:17:
40:5a:85:05:8e:83:53:74:1e:fb:f7:d5:6e:90:c9:4e:97:9e:
4a:94:b4:77:be:5f:ee:35:16:40:bc:b5:b1:a9:ee:87:7e:a2:
2f:21:f6:86:d8:20:48:95:dc:ae:16:ec:76:b2:71:4a:99:a8:
60:ac:50:23:b7:74:5b:0c:20:c4:23:12:ce:12:fa:65:cf:b1:
3a:2a:15:04:a2:ee:3a:18:42:b7:03:e7:9d:b1:be:0f:75:8a:
ad:56:ba:0c:c9:13:86:68:fb:df:f7:e8:c8:b5:dd:6d:bc:15:
12:3e:04:2d:0a:56:17:fc:61:28:94:48:72:61:73:da:54:ba:
ef:f7:86:bc:a0:b6:ee:6f:44:54:09:2a:9e:a2:f6:e4:48:61:
bf:29:a3:dd:49:03:39:35:40:98:08:25:98:ff:c6:cb:48:4b:
1f:c9:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:41 2026 by rpki-client