
$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: TShJ/qAJqhf0xRyyg49bRfynwBme0XOb3ubRk+jL9/g=
Subject key identifier: 08:D6:96:20:5C:C0:0F:12:9C:00:F7:7F:13:3D:8E:F6:81:39:07:98
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 0465
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 0453
Signing time: Fri 17 Apr 2026 00:07:48 +0000
Manifest this update: Fri 17 Apr 2026 00:07:47 +0000
Manifest next update: Fri 24 Apr 2026 00:07:47 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: C0ZXnXhoSZubCo9TDHbemAXJ7IHQSl5IR1MgFXxd/uE=)
2: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: Q+dL2W7eAJ3DJlsw7AhajpgSkws/8wtOeo5r7hNa/fM=)
3: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: MwkXsOYorcCOGMXvR2DJqBnlmq41YtK23RLEq86D5Jo=)
4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: yIepWjS0oZcQGSmT9ESi5QJXbvdq+Yq0vyuRnX4kFy4=)
5: 412371002A5911F08EA23244C4F9AE02.roa (hash: D1yfDyTJLdVgKeV2rHlPTQBf9awpPyRXNzKhhL6qHEI=)
6: 812D990C282C11F194294EA0C6833773.roa (hash: wg5kaxnt1h8sr9PZA8paXY5KbEBORSUI0crLfAxJcUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Apr 17 00:07:47 2026 GMT
Not After : Apr 24 00:07:47 2026 GMT
Subject: CN=69e179d4-27ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:52:78:d9:35:1e:17:51:09:bb:f5:8d:fc:
01:6f:f7:95:de:aa:d3:fa:15:6e:11:09:88:d5:01:
78:9c:30:83:52:30:49:ef:82:c9:89:9f:f2:e3:01:
27:ff:45:df:31:59:82:f2:a0:7f:4b:ae:7a:91:74:
55:a2:59:ba:f0:f4:17:9a:85:ff:c5:05:28:df:84:
3c:64:06:03:4d:b3:9e:59:dd:c0:fa:4f:ce:e5:55:
f7:df:22:2e:5f:69:f3:d7:58:12:f0:49:af:3d:e5:
75:85:97:86:a7:da:74:fa:1e:0f:69:71:bf:4e:20:
2d:a9:dd:bb:bf:81:16:e0:f6:a3:52:dc:9b:56:89:
24:68:6c:0c:d3:b0:76:89:a9:b2:a0:38:f5:47:d8:
6c:d0:20:fc:25:c5:df:f7:be:58:41:17:96:f0:15:
8f:97:84:74:a3:4a:bf:85:85:df:4f:d8:15:d3:86:
da:38:ea:ad:19:41:28:0d:96:f6:5a:6f:43:8e:10:
90:81:f9:8c:e9:64:fe:3c:33:b9:83:1b:6f:e2:50:
5b:21:ae:4d:cc:37:03:86:9a:38:90:2f:30:d1:62:
56:5e:3a:ff:61:d0:48:e2:9c:90:cc:04:aa:41:0c:
b4:9a:48:30:f6:dc:37:83:1a:f5:70:04:88:64:4b:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:96:20:5C:C0:0F:12:9C:00:F7:7F:13:3D:8E:F6:81:39:07:98
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:93:df:ce:20:3b:f4:ee:8c:09:29:65:9a:d1:45:10:cf:e1:
04:80:d8:a9:9a:8e:d2:00:9a:33:b5:62:4b:2b:85:06:f1:c2:
dc:9a:9a:2c:01:c7:ff:7a:99:34:6d:ff:0a:58:95:d2:05:52:
a1:e9:c1:07:42:7c:23:75:b9:fa:da:8d:54:7e:a7:97:30:d6:
f4:b9:bb:c9:b2:17:42:9f:e9:0f:dc:5b:2c:58:73:61:30:dc:
32:d3:92:c0:0c:ef:3e:e5:d8:cc:9f:56:e9:58:ad:99:fd:26:
8f:36:5a:8d:3a:b1:b3:3a:55:c6:0b:25:be:b3:69:c0:3c:25:
bf:6c:e2:a1:75:50:1b:47:86:4d:41:f4:b1:33:e0:43:69:59:
d6:f1:85:2d:6e:cd:d0:06:6f:8f:88:24:11:4b:e9:6c:1c:e2:
80:cf:b3:0e:92:46:79:82:99:13:7e:8c:46:bc:ab:35:65:6b:
19:c8:5b:37:6b:db:3e:b7:e0:1d:95:53:05:15:ab:1e:37:3a:
bc:db:47:ba:ce:d3:92:f3:44:11:73:cc:c4:20:17:5a:bf:a0:
55:a8:a9:d6:e9:37:f0:16:ce:2d:f4:55:55:1b:b7:4a:5c:8e:
8b:13:70:91:9a:69:3b:2d:9f:ab:bd:c3:c0:23:a4:56:eb:a3:
78:e2:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:27:49 2026 by rpki-client