
$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json)
Hash identifier: NRHpsSJEu1W1HVHO4RlV8XqeedPWuGyo5biOmqf8vgM=
Subject key identifier: 8F:50:EF:E6:0F:52:5D:97:B2:C0:06:C5:F2:57:2B:5E:D2:CD:7E:79
Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Certificate serial: 02DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
Manifest number: 02DA
Signing time: Sun 01 Mar 2026 02:12:59 +0000
Manifest this update: Sun 01 Mar 2026 02:12:59 +0000
Manifest next update: Sun 08 Mar 2026 02:12:59 +0000
Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: 2jtfMaOuOOson76ljLcSgWaZ5tSWv861f6ut1V9wFrM=)
2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: 0XIDOV8UwVvmlax4boMgDyUwaF1U/8jmEUNtClSqDZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 734 (0x2de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A
Validity
Not Before: Mar 1 02:12:59 2026 GMT
Not After : Mar 8 02:12:59 2026 GMT
Subject: CN=69a3a0ab-ad30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:2b:a6:2a:8c:93:eb:78:e9:ee:2e:67:0c:
00:26:ba:10:0e:5e:15:2a:1b:65:a7:f4:16:1e:d7:
6c:f6:e2:ae:e6:de:39:66:f5:92:a6:e8:22:72:65:
eb:eb:d2:8b:32:e5:24:f0:6f:6c:61:3c:a4:9e:10:
f4:19:00:3e:5d:78:c5:f3:9d:fb:51:85:df:36:07:
e5:85:61:79:09:df:e6:bb:cd:26:1e:21:5f:b0:d3:
3e:a9:84:e3:4a:e0:09:c4:cf:8b:dc:1f:bb:96:4e:
98:50:bb:d0:ad:5e:26:43:ed:6d:18:70:ab:dc:4b:
57:49:f5:04:dc:ea:6c:25:60:33:7f:41:17:69:ef:
b0:3f:5b:7d:79:7e:60:4d:ae:1d:10:15:87:87:9e:
d1:ff:cb:bc:76:c4:96:ad:aa:ca:cc:f1:57:68:b6:
32:cd:13:e4:04:b3:76:62:2a:3d:6e:9d:a5:dd:5c:
b0:75:6d:93:28:80:50:14:fb:d2:f9:6b:cc:6e:2a:
2a:c4:16:5b:2f:cd:70:7b:d0:b0:50:66:99:32:03:
3d:d3:5a:51:f4:92:c5:4a:e1:77:92:91:f5:54:ba:
3f:fc:be:ef:eb:87:c2:5d:d3:39:23:8c:a1:92:72:
6a:a5:e5:5d:99:16:60:ae:ef:b7:d0:64:84:6c:01:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:EF:E6:0F:52:5D:97:B2:C0:06:C5:F2:57:2B:5E:D2:CD:7E:79
X509v3 Authority Key Identifier:
keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f2:ed:28:ff:89:6e:47:9b:05:b1:58:85:a0:e4:8a:2e:21:
9a:8a:34:73:22:db:46:8e:1f:12:d0:8d:93:6c:14:51:4d:c8:
79:99:c0:5f:98:af:4d:d0:dd:6d:87:2e:f2:22:ad:fa:bb:ac:
f3:e0:7a:18:ec:61:02:1a:72:0c:fe:a4:c5:ff:10:a0:0a:1b:
1f:aa:4a:30:55:b9:52:83:b7:6c:86:b8:8e:e4:f2:90:10:e9:
4b:db:f1:cb:fc:02:8f:18:b8:d3:cc:5a:59:0b:0a:60:76:e5:
11:44:d1:e8:4c:52:12:50:44:3d:36:81:d0:88:b6:bd:e0:71:
6b:3b:18:fc:ad:70:63:39:b9:5f:1c:c9:75:eb:c4:de:b7:f3:
81:d2:3f:59:34:d6:87:81:e7:9c:e5:7e:77:98:65:26:29:4b:
de:e5:30:77:a7:94:f3:08:ae:be:8f:4d:08:ff:51:d7:2f:5e:
9e:cd:f8:a5:14:74:27:9b:7f:77:df:58:32:b0:39:3c:a7:0d:
14:9c:52:fa:b1:22:2a:9d:50:ce:ec:4b:b7:91:41:d6:21:f6:
f6:81:94:0c:0a:6c:da:46:7e:26:4a:e3:0c:3c:cf:44:e5:24:
54:9c:73:4d:5f:76:8e:4a:bf:c8:1b:89:0f:3f:e1:32:de:65:
ae:0a:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:07 2026 by rpki-client