
$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier: 7mNcZLAMSRMKRZGj4+iIv57idHPneDOnaz2as7b2/H4=
Subject key identifier: 8A:22:C6:B6:8A:0C:1B:D4:C9:79:A2:F5:40:A1:F4:5B:AD:C3:51:BF
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number: 01DC
Signing time: Fri 17 Apr 2026 03:16:37 +0000
Manifest this update: Fri 17 Apr 2026 03:16:37 +0000
Manifest next update: Fri 24 Apr 2026 03:16:37 +0000
Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: 0+S3OeUtl208Qj4DUIlYl1SOJs+WjR14fQTqq4JoTcY=)
2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: ClVPuLcuGILWLEy5bL0EVXdV3J/UJlUtzA64dR9iTrc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Validity
Not Before: Apr 17 03:16:37 2026 GMT
Not After : Apr 24 03:16:37 2026 GMT
Subject: CN=69e1a615-9916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:8d:29:6c:1e:5e:16:e0:9a:53:e6:5b:a7:
b3:4d:d4:ea:5a:02:4b:96:d3:07:9d:6a:47:5b:d1:
36:b6:77:01:f7:b7:e3:fa:04:59:68:6d:dd:e8:6a:
ee:36:f4:e3:89:05:9d:bc:9f:76:8c:d5:3c:d8:a0:
46:1f:85:ee:f8:a4:11:01:17:4a:5c:5d:b6:10:a8:
34:4e:2b:d6:27:b9:ae:43:45:0f:aa:96:55:2a:f3:
3f:17:50:63:40:43:10:46:34:df:97:7f:9e:84:99:
05:96:9a:50:7a:13:de:fa:69:94:7c:df:5a:e0:f3:
4a:9c:0f:96:4e:a4:63:21:76:2b:83:d1:67:3b:3d:
94:42:9d:7b:7d:ad:88:57:50:ca:94:fa:9b:81:66:
09:00:c7:35:fa:f7:46:3e:2f:85:2c:81:76:b2:c9:
99:8e:a9:3c:fc:7e:2e:a5:3d:f9:00:69:16:46:b7:
26:df:34:b4:3c:1a:a0:1a:5b:e0:95:99:9b:64:e9:
44:3e:42:bb:9e:61:98:35:45:18:d8:e5:10:7f:65:
ed:5a:d9:d9:b7:73:b5:48:4b:1a:bb:47:2f:73:78:
62:5c:dd:fd:40:d4:9b:4d:08:92:f6:5b:d1:3b:41:
a6:f8:84:22:83:10:18:45:12:56:96:d2:db:6e:5d:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:22:C6:B6:8A:0C:1B:D4:C9:79:A2:F5:40:A1:F4:5B:AD:C3:51:BF
X509v3 Authority Key Identifier:
keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f9:98:ac:dd:d3:9f:66:fc:7c:f2:77:58:9c:3a:d5:a4:cc:
2b:1e:cf:28:21:22:5b:57:e5:53:82:39:c2:ae:1d:89:48:8f:
be:94:23:87:44:b9:b2:6f:2c:fa:8b:92:1d:cd:5b:bc:d1:64:
06:0e:2c:06:20:7b:29:3f:b4:2e:af:29:78:32:bb:a0:ad:d7:
16:3d:cb:d7:62:67:5f:34:ef:65:4c:f9:3e:0e:cb:bd:d5:83:
ce:6d:6c:d4:8a:66:52:37:f7:e5:bb:ed:a2:7f:f7:ea:9b:aa:
b5:87:4a:95:18:dc:b4:44:74:c9:64:6f:37:37:fc:3e:af:3e:
96:f1:59:04:7e:7e:cd:a1:18:72:4a:be:ad:76:0b:d2:e0:13:
7c:69:7c:3f:21:d1:f2:da:14:5d:07:26:22:e4:14:76:50:f4:
7a:c5:c7:31:ab:c1:3c:c8:d2:95:d8:ef:9a:08:38:24:22:18:
71:b4:1a:9e:6c:f1:22:a7:22:d1:0e:4a:80:f8:6e:b9:17:2b:
87:36:1f:e8:bb:5d:dc:de:60:f6:5d:a7:7b:5f:86:63:ca:e5:
3c:f2:69:2c:2d:12:8d:45:f6:df:e1:25:ca:14:99:0b:ec:21:
4e:6f:6a:68:9c:cf:e8:a5:62:8f:3c:cc:56:30:d7:4a:04:58:
dd:f6:e2:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz
NzUzQTY4Q0UwHhcNMjYwNDE3MDMxNjM3WhcNMjYwNDI0MDMxNjM3WjAYMRYwFAYD
VQQDEw02OWUxYTYxNS05OTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3NONKWweXhbgmlPmW6ezTdTqWgJLltMHnWpHW9E2tncB97fj+gRZaG3d6Gru
NvTjiQWdvJ92jNU82KBGH4Xu+KQRARdKXF22EKg0TivWJ7muQ0UPqpZVKvM/F1Bj
QEMQRjTfl3+ehJkFlppQehPe+mmUfN9a4PNKnA+WTqRjIXYrg9FnOz2UQp17fa2I
V1DKlPqbgWYJAMc1+vdGPi+FLIF2ssmZjqk8/H4upT35AGkWRrcm3zS0PBqgGlvg
lZmbZOlEPkK7nmGYNUUY2OUQf2XtWtnZt3O1SEsau0cvc3hiXN39QNSbTQiS9lvR
O0Gm+IQigxAYRRJWltLbbl1/CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoixraK
DBvUyXmi9UCh9Futw1G/MB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4
RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx
Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjPmYrN3Tn2b8fPJ3WJw61aTMKx7PKCEiW1flU4I5wq4diUiPvpQjh0S5sm8s
+ouSHc1bvNFkBg4sBiB7KT+0Lq8peDK7oK3XFj3L12JnXzTvZUz5Pg7LvdWDzm1s
1IpmUjf35bvton/36puqtYdKlRjctER0yWRvNzf8Pq8+lvFZBH5+zaEYckq+rXYL
0uATfGl8PyHR8toUXQcmIuQUdlD0esXHMavBPMjSldjvmgg4JCIYcbQanmzxIqci
0Q5KgPhuuRcrhzYf6Ltd3N5g9l2ne1+GY8rlPPJpLC0SjUX23+ElyhSZC+whTm9q
aJzP6KVijzzMVjDXSgRY3fbiFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:58 2026 by rpki-client