
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json)
Hash identifier: seVdw955uljccmv7wNDXcYp0EoCfwXW6zDCGXkeHCxE=
Subject key identifier: DA:40:79:A3:1D:68:2B:9D:AF:60:DF:49:A2:B8:AA:26:F3:72:B7:90
Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
Manifest number: 0235
Signing time: Fri 17 Apr 2026 02:25:36 +0000
Manifest this update: Fri 17 Apr 2026 02:25:35 +0000
Manifest next update: Fri 24 Apr 2026 02:25:35 +0000
Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: sdu/pbjQpNXriNdD0aymdtQpLCdlUAIgu1r0vhGAGGg=)
2: 5D1FFF4EB31211F0AE01876AC4F9AE02.roa (hash: nHOywUEE2O+go0GB3s88VZZ3jUUczn2VrLu3MKZSJQg=)
3: E24E0BA8B31111F098769D68C4F9AE02.roa (hash: /E7HUdrD9nUEK9AISsO07B+OClT3i22yXr5a1OL4hjU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl
rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9
Validity
Not Before: Apr 17 02:25:35 2026 GMT
Not After : Apr 24 02:25:35 2026 GMT
Subject: CN=69e19a1f-6f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:18:0b:d7:3f:a8:5a:59:28:d5:c7:46:f7:
09:a9:80:87:cc:6e:a0:b7:c8:94:a8:7e:0f:ff:f3:
91:8a:44:41:79:60:b4:c7:21:2e:68:0a:f6:74:75:
7c:bb:c0:1a:33:dc:ee:0d:d0:b6:91:75:c1:ae:fa:
3f:60:74:4b:d3:6f:d1:a3:9a:5f:2d:80:f7:76:bd:
06:b8:0a:4e:dc:31:c6:3f:45:d4:d9:42:c6:5c:6e:
c4:74:98:61:31:ea:6c:bf:29:76:91:3a:a8:0f:0a:
2a:80:2c:41:99:9b:6d:2a:e8:b1:b3:6e:1a:8d:40:
9a:14:81:4d:eb:19:40:fe:6c:9b:fb:9f:88:76:d2:
e1:ba:c5:97:e1:b6:99:27:00:fc:c9:2c:aa:af:65:
d7:d9:ca:02:d0:d1:24:67:98:a6:11:b7:ff:c7:c9:
0e:0c:18:05:bd:4f:65:37:5a:f3:8e:df:3b:3e:05:
a7:fd:73:a3:20:68:69:44:09:60:a8:df:0d:2d:f9:
29:52:d6:4d:d0:1c:23:11:87:d4:4d:cc:e1:72:52:
52:4b:49:4f:ae:12:97:92:5b:d5:87:0d:3f:14:7d:
81:4f:ed:0f:8e:89:c9:35:35:49:32:98:81:3e:3c:
0f:91:57:9b:51:95:a6:69:ae:d1:c0:50:89:a6:a5:
1a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:79:A3:1D:68:2B:9D:AF:60:DF:49:A2:B8:AA:26:F3:72:B7:90
X509v3 Authority Key Identifier:
keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:9d:2b:3d:9b:77:04:6e:28:5d:cd:35:3a:18:0c:c6:7d:
40:17:b5:7a:8d:8f:c0:97:02:d2:e1:32:86:06:85:a8:c1:45:
19:55:ca:51:97:5c:d6:cc:9d:9a:3c:01:d8:d5:09:7a:32:e8:
60:bd:0b:00:4d:34:1d:a8:cd:2d:e3:50:c7:09:b7:7c:6d:4a:
bc:97:47:0f:44:6c:e3:07:e7:51:15:71:4c:52:6d:57:68:ff:
44:11:e6:fb:9b:07:3b:ca:a1:b1:bd:6e:ea:91:37:1d:83:17:
57:65:1a:20:08:b5:46:b2:24:9e:37:6a:24:44:76:0a:df:dd:
39:9b:e6:88:cb:03:c5:db:b9:34:2b:b0:1d:c2:70:15:4c:16:
ab:fe:b0:a5:34:5b:6c:cb:7e:f8:e9:c7:63:17:7c:0d:99:1b:
52:07:07:c7:a6:47:8d:bd:bd:c6:bf:3e:31:a0:6a:21:1f:21:
9e:ed:2c:30:d5:5b:6d:ab:26:6e:15:b2:8c:50:71:25:20:40:
81:2e:b1:95:bd:4a:09:7f:b5:4c:46:11:d2:98:a4:4e:e3:ef:
30:5b:bc:da:33:06:35:dc:1e:ad:c3:cc:d5:ff:8e:1c:ca:de:
6b:0e:9c:73:d2:3a:4c:ce:ee:35:97:b3:df:5f:78:5a:10:bb:
2c:a2:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:38 2026 by rpki-client