
$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier: M3NP9fVb8Zu7Im7aX4m/ypnAm8rWgwLP7FI4octi1Hs=
Subject key identifier: 71:D6:30:18:95:C7:47:26:16:B5:81:18:C8:B6:A2:D3:7E:58:CE:73
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial: 0C4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number: 0C42
Signing time: Mon 02 Mar 2026 01:56:41 +0000
Manifest this update: Mon 02 Mar 2026 01:56:40 +0000
Manifest next update: Mon 09 Mar 2026 01:56:40 +0000
Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: IXg8yA9KxGAbFlly5qAmHegx/n25lXdETidOjt4rUeM=)
2: FC90C520213411EA8D675645C4F9AE02.roa (hash: wRh3N1lkasKdB1iov51RXGczR9sD9duj3/LCNc3iLBY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:56:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Validity
Not Before: Mar 2 01:56:40 2026 GMT
Not After : Mar 9 01:56:40 2026 GMT
Subject: CN=69a4ee59-dd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:b4:7b:d4:a8:80:e7:86:b0:2e:6a:64:6e:
2b:bf:94:0e:fb:ea:8a:3f:0e:08:f3:72:b9:62:95:
3f:d3:d8:a4:3b:c3:ba:80:b8:6e:2c:cb:00:0f:43:
81:c7:cf:22:0d:56:05:0e:60:47:40:f4:6a:da:a4:
eb:15:b4:a4:ab:f5:1c:52:ad:f1:8c:fe:a5:5a:9d:
22:bd:c6:d4:97:a8:48:b8:ee:e9:3b:3c:ed:d3:05:
74:cb:aa:9f:37:1b:4d:aa:e0:b9:a8:75:79:48:a6:
ac:bb:0d:a9:83:55:ed:3e:cd:f5:4e:b5:fe:d3:a1:
a2:c9:e3:9d:ef:64:05:ef:20:95:ea:84:00:58:26:
50:3a:ca:22:2c:73:67:df:92:77:fe:ea:54:77:cc:
b3:0a:5e:aa:08:00:78:b8:03:38:63:3b:fa:5b:71:
35:c6:cc:c1:b5:d3:1e:dc:82:4a:b5:a4:bb:73:07:
a6:bd:e2:05:21:78:79:11:7b:9c:ea:0f:bc:b9:59:
2a:b8:5f:d0:86:59:d2:07:b3:00:14:24:7e:79:c1:
e8:17:a3:79:42:58:4a:a1:ba:fc:de:8e:35:9b:33:
b4:72:e6:a3:c0:33:50:ca:31:ec:da:f5:31:02:e2:
ff:1f:be:33:0d:eb:11:5e:54:21:8b:d1:34:9f:62:
69:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D6:30:18:95:C7:47:26:16:B5:81:18:C8:B6:A2:D3:7E:58:CE:73
X509v3 Authority Key Identifier:
keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:e7:f6:27:e3:96:73:ec:ca:a8:11:a9:f5:c7:51:e9:72:
c4:80:96:20:c7:32:8c:20:7f:9c:aa:0f:dc:c1:9a:3e:58:30:
8c:af:ea:17:6f:c9:2f:b7:6a:a8:49:30:ba:0c:d1:5c:d5:27:
c7:f1:75:ce:bd:0e:82:63:18:9f:57:22:d9:cc:95:82:fd:0a:
1d:01:80:83:f4:98:58:29:d6:c0:e0:58:43:47:45:6f:79:05:
8f:55:8b:9f:2f:07:11:f9:c7:cf:43:3c:fa:98:03:99:c6:6d:
d9:a2:dd:d1:8f:d3:95:bc:5a:43:0c:bf:dd:e9:5a:38:fd:a8:
c4:ff:26:ca:eb:c3:1a:63:21:89:cd:0a:cf:6e:f0:28:ab:57:
b2:8c:1b:81:7a:93:53:8e:a6:d7:30:5d:1e:40:62:6c:29:40:
48:80:14:9b:35:cb:d7:fb:bc:64:f8:0f:6c:1a:ed:59:35:f8:
2d:c2:a4:a3:e4:3e:3b:aa:36:44:63:0e:c6:b9:d2:89:8b:6a:
c3:22:60:d0:b3:0e:4c:39:af:d8:25:3c:12:87:d5:80:df:5b:
a7:b8:fe:21:4b:80:3d:a7:a2:07:64:29:fe:41:28:e9:44:99:
c2:25:87:c5:e4:f2:84:d8:0c:02:69:c5:04:93:10:03:02:ae:
87:2e:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:23 2026 by rpki-client