
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier: HPW5KerlmGJcdayvEw2AOEGAgOJF/uk9ol/2w0YM+VI=
Subject key identifier: 0A:2B:5C:9A:17:54:E4:E0:C1:DE:2B:D6:16:7D:57:93:1F:03:79:7E
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial: 03C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number: 03B8
Signing time: Sun 01 Mar 2026 01:31:30 +0000
Manifest this update: Sun 01 Mar 2026 01:31:30 +0000
Manifest next update: Sun 08 Mar 2026 01:31:30 +0000
Files and hashes: 1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: Clgwuj/fFmw8v7akcS1esxR8TeDqwNoJvyOO9LV4pSY=)
2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=)
3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 966 (0x3c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Validity
Not Before: Mar 1 01:31:30 2026 GMT
Not After : Mar 8 01:31:30 2026 GMT
Subject: CN=69a396f2-9b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:d2:d9:b6:8f:7a:5d:4f:70:b4:6d:82:25:
75:73:4f:b2:17:78:5f:14:07:34:27:74:86:6c:ac:
70:b1:2e:5b:14:b4:26:a2:ca:22:f3:57:a6:4d:5c:
0b:52:d5:dd:0d:a2:5a:64:93:cc:26:4b:8c:2a:01:
c2:32:5e:5c:9f:56:a1:8b:6b:f9:09:19:97:5d:1b:
39:06:29:36:2d:23:24:4c:af:44:a7:dc:4d:9d:61:
5e:0f:40:82:82:87:01:29:93:72:0f:6f:3a:0b:f0:
e1:ab:98:99:f7:5d:90:22:41:19:02:89:1a:ef:f5:
71:67:99:e7:78:81:6f:95:f8:ca:4b:9a:f3:71:53:
0f:3a:27:bf:7d:99:e6:df:29:a7:e9:7b:83:4a:1b:
0f:1d:34:d4:b8:6a:f3:0f:d3:5f:e7:7f:22:78:74:
37:f7:08:8e:07:4b:1c:d1:f1:59:7b:0d:4c:39:ec:
32:15:3d:d0:16:8a:a8:82:7d:53:79:e3:03:b9:62:
30:d8:e5:a6:91:49:4f:fa:c7:a0:72:3e:d7:b9:29:
1b:a5:7e:6a:98:34:cf:63:1c:17:c5:34:42:29:74:
66:13:d6:1c:65:0a:e3:54:80:5d:01:7b:4b:f8:f6:
aa:54:e5:19:5d:7d:6d:6f:7f:55:8c:52:96:82:40:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2B:5C:9A:17:54:E4:E0:C1:DE:2B:D6:16:7D:57:93:1F:03:79:7E
X509v3 Authority Key Identifier:
keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3e:e6:75:e3:b6:63:79:cc:ba:78:1b:88:b7:d1:d3:f5:d0:
2a:be:3c:fb:02:a4:bc:5f:2c:ac:99:5b:3d:ea:6c:a2:9c:6b:
8f:3c:d2:2a:fc:71:b5:ae:9c:ca:0f:8a:71:6e:fd:6f:0c:ff:
00:3d:67:29:f1:92:bd:02:17:02:ab:e5:18:5d:a2:71:fb:02:
da:ed:be:d8:e6:39:9d:5a:99:4f:07:38:f8:30:d4:a3:5f:cc:
c8:73:9b:13:7c:3f:23:e9:5a:5f:0a:21:78:e2:4c:0f:c8:3a:
ca:d5:52:34:31:c4:9c:e6:2e:1c:90:b7:46:f6:b6:63:7f:3f:
82:58:27:ab:ba:ec:78:2d:4a:41:82:bd:d5:a5:a7:fc:25:76:
d2:5d:aa:e1:01:a2:18:97:61:b9:91:63:d6:1d:32:8d:d1:66:
7a:ed:f1:2a:e8:9f:75:8d:5d:87:91:aa:b8:53:be:f4:d2:5f:
2f:da:9f:8c:7e:1e:b2:e5:e9:02:da:f8:5c:b5:84:15:c5:78:
28:6d:aa:1e:28:2a:40:fd:d6:71:01:43:b3:94:2e:24:19:22:
80:c2:27:3c:7b:1f:37:31:52:ff:1d:e0:e7:e0:03:5d:a0:67:
7f:7d:52:91:62:3d:64:b0:b2:f0:1b:25:07:fe:76:d1:cf:03:
4e:e8:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:29 2026 by rpki-client