
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json)
Hash identifier: 0pqkm7Ojj2C/5ZxEcZ+9Zve4ybroC1LsOQ/DdO/AWao=
Subject key identifier: A0:FD:BD:01:BE:33:8C:21:30:1B:17:86:D7:24:4F:3A:CC:6F:38:AB
Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Certificate serial: 02EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
Manifest number: 02D4
Signing time: Wed 11 Mar 2026 00:50:28 +0000
Manifest this update: Wed 11 Mar 2026 00:50:28 +0000
Manifest next update: Wed 18 Mar 2026 00:50:28 +0000
Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: f8SRcmicSswCxGSXoxzM3Wk0quqWyUZamLQ7YtEVXwM=)
2: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: 0jvUIwjPXHeEslVKiYpH5B76uWFLmFaAvSZKdVMyJic=)
3: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: p7P2A7jSsNB3VPnyfQ7N/c66d6K3p3AzM6sgD1LCs58=)
4: 3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa (hash: sA27TPUCedPlOitvDRWScwdbJdQ4zgWqGa+bOCJouiQ=)
5: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: /usqs9ZfkCP+Vt3Y0LGieWhcUSa0ur1qEg+V2Bst5hw=)
6: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: YZ95zLAZ9RgE3ArJgZyq41uo4zFDNyVSmDttc4IYSCE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 00:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE
Validity
Not Before: Mar 11 00:50:28 2026 GMT
Not After : Mar 18 00:50:28 2026 GMT
Subject: CN=69b0bc54-3c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:22:4f:02:50:ea:c2:8e:24:60:21:a1:36:
dc:7c:6d:bd:3a:0c:54:c5:6f:af:7a:30:16:61:66:
12:2e:0c:cf:6f:d9:c3:b2:1c:80:44:33:7d:e5:0f:
01:72:40:a7:ae:63:f2:63:dd:53:b7:86:4f:96:6a:
04:34:13:ac:98:88:fc:6e:89:0a:c3:87:8e:d6:68:
19:ac:e9:7f:46:83:19:4e:cf:6b:94:7b:25:5e:18:
39:40:33:1a:a4:c1:ec:78:eb:32:af:c0:6a:d5:49:
4f:50:7f:ca:a0:5f:1e:80:7e:4e:ab:7a:61:8e:21:
33:a1:cb:72:28:16:03:30:04:ff:74:47:f5:f1:4c:
1e:44:be:9a:33:b4:eb:0f:e9:82:cf:16:2e:23:39:
5b:96:f6:67:3b:e2:dc:91:2a:bf:52:95:01:10:c9:
b1:7a:2c:e3:49:74:93:69:6e:1d:00:06:75:f8:12:
d6:68:37:30:e1:db:11:cc:ae:f0:0c:f2:5e:cf:38:
08:81:56:dc:44:95:1e:6e:8f:2d:55:ac:61:e6:99:
7f:36:f3:bd:4a:09:6a:37:8e:bd:f5:34:94:46:0d:
15:d1:83:dc:d6:ed:5e:c9:af:d4:cd:e1:90:e7:e8:
c7:8c:e7:44:f6:f7:ff:9d:7a:d6:bc:91:d5:5e:c3:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:BD:01:BE:33:8C:21:30:1B:17:86:D7:24:4F:3A:CC:6F:38:AB
X509v3 Authority Key Identifier:
keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:16:73:95:d0:19:24:58:80:54:c5:60:02:86:fc:80:8a:28:
bb:6a:c5:6f:cb:61:26:55:05:8f:6a:ee:b7:89:e5:49:9d:5c:
6a:70:43:36:48:79:15:c1:fc:e4:72:ce:17:f8:78:6c:22:29:
58:bd:df:9e:8c:db:f8:c3:fb:e0:89:cc:53:80:34:27:62:bd:
be:f9:f2:9e:f2:6c:be:2c:0c:ef:44:b2:5d:e5:c6:ca:30:74:
01:3a:f9:9e:01:16:c1:74:a1:98:3e:ca:d8:ba:97:71:36:2f:
59:26:1d:f8:3e:44:64:c1:d4:77:b8:23:3b:2d:63:16:d1:5a:
de:a3:63:86:34:93:54:aa:9e:53:7c:9e:61:ed:41:54:0f:36:
96:c0:69:7d:2e:3e:f3:2f:fd:66:b4:ad:34:f7:e5:17:4a:dd:
58:76:2b:e2:20:85:98:41:1f:8c:58:8a:a1:ca:7e:43:c8:ab:
71:47:9b:da:66:89:5c:38:36:db:fb:ba:a8:21:5b:44:64:1e:
74:5c:b3:d0:d2:98:1e:16:24:9c:7f:ab:b1:a3:6e:40:80:36:
ec:a1:d2:a8:9c:69:0c:ac:cf:e8:db:25:49:cc:77:5b:7b:d0:
85:91:2a:c8:bf:40:59:11:a4:b7:2a:64:4b:d1:29:52:17:72:
8a:9b:47:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5
QTNFRDVERkUwHhcNMjYwMzExMDA1MDI4WhcNMjYwMzE4MDA1MDI4WjAYMRYwFAYD
VQQDEw02OWIwYmM1NC0zYzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApociTwJQ6sKOJGAhoTbcfG29OgxUxW+vejAWYWYSLgzPb9nDshyARDN95Q8B
ckCnrmPyY91Tt4ZPlmoENBOsmIj8bokKw4eO1mgZrOl/RoMZTs9rlHslXhg5QDMa
pMHseOsyr8Bq1UlPUH/KoF8egH5Oq3phjiEzoctyKBYDMAT/dEf18UweRL6aM7Tr
D+mCzxYuIzlblvZnO+LckSq/UpUBEMmxeizjSXSTaW4dAAZ1+BLWaDcw4dsRzK7w
DPJezzgIgVbcRJUebo8tVaxh5pl/NvO9SglqN4699TSURg0V0YPc1u1eya/UzeGQ
5+jHjOdE9vf/nXrWvJHVXsOYXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKD9vQG+
M4whMBsXhtckTzrMbzirMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3
N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P
eWV5bVJHb1lTaldhUHRYZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmhZzldAZJFiAVMVgAob8gIoou2rFb8thJlUFj2rut4nlSZ1canBDNkh5FcH8
5HLOF/h4bCIpWL3fnozb+MP74InMU4A0J2K9vvnynvJsviwM70SyXeXGyjB0ATr5
ngEWwXShmD7K2LqXcTYvWSYd+D5EZMHUd7gjOy1jFtFa3qNjhjSTVKqeU3yeYe1B
VA82lsBpfS4+8y/9ZrStNPflF0rdWHYr4iCFmEEfjFiKocp+Q8ircUeb2maJXDg2
2/u6qCFbRGQedFyz0NKYHhYknH+rsaNuQIA27KHSqJxpDKzP6NslScx3W3vQhZEq
yL9AWRGktypkS9EpUhdyiptHNg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 15:22:44 2026 by rpki-client