
$ rpki-client -vvf rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
File: fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft (raw, json)
Hash identifier: 8NwXEVdBSCqDRbA/ENJ4ExBEqtCmr3rtOWWAqJnEdQo=
Subject key identifier: D2:0A:59:55:20:8D:F4:FF:94:10:0D:75:16:04:12:B1:61:BC:AB:8C
Authority key identifier: 7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
Certificate issuer: /CN=A916601E/serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 06:22:43 +0000
Manifest this update: Fri 17 Apr 2026 06:22:43 +0000
Manifest next update: Fri 24 Apr 2026 06:22:43 +0000
Files and hashes: 1: fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl (hash: dZtXqMxpPXbXxbB8WXG+qD5/MwOvIXOFgW5WLSvzlL8=)
2: 46497846F56111EFA41A451BC4F9AE02.roa (hash: VaBA1XUDwHbEiryzP/LXOGwE+McgzGSWAbO3Tz2VIlE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916601E, serialNumber=7DBF83AE5282C84EB0EFF55D5C1C67801CB645C4
Validity
Not Before: Apr 17 06:22:43 2026 GMT
Not After : Apr 24 06:22:43 2026 GMT
Subject: CN=69e1d1b3-3a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:d4:a3:1d:90:24:b1:68:92:9f:7a:b2:da:
90:b7:57:c3:dc:89:42:c6:bf:8e:e0:93:65:66:b8:
a8:eb:b1:cf:88:aa:3c:84:e8:4f:b2:49:4d:42:ba:
4e:26:12:ac:8d:f8:38:5e:d0:16:c5:1c:f6:f3:85:
33:e6:c3:d9:8e:04:27:c6:7e:47:35:20:15:04:66:
30:b8:a6:9c:33:4f:df:c5:71:73:43:51:ed:00:a6:
32:f3:26:15:23:4a:62:0d:40:ff:59:9c:d7:54:b8:
11:6b:a0:7f:ef:b1:6d:51:04:92:17:81:4d:92:fa:
6d:f1:8c:2e:81:68:fc:af:36:4e:2e:4e:89:9d:d0:
f8:b7:7c:5b:0e:1b:15:8e:9e:b2:65:ab:89:29:7c:
27:66:8b:96:a7:c6:86:f4:6d:6c:1a:02:66:69:7a:
86:a8:4f:65:ef:07:f0:9e:01:af:1e:22:ad:9f:cc:
64:7a:55:e5:ee:e1:55:eb:de:df:e4:34:ad:a1:25:
39:27:9a:67:9d:94:42:b3:0b:4d:6e:73:7e:d1:43:
85:17:65:b9:a4:d4:63:e1:c9:7c:ce:06:46:48:f7:
88:be:69:53:df:37:57:33:4f:23:92:5f:0f:ca:14:
25:b5:92:bd:fb:14:6f:6c:8f:41:d1:07:a7:82:65:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0A:59:55:20:8D:F4:FF:94:10:0D:75:16:04:12:B1:61:BC:AB:8C
X509v3 Authority Key Identifier:
keyid:7D:BF:83:AE:52:82:C8:4E:B0:EF:F5:5D:5C:1C:67:80:1C:B6:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fb-DrlKCyE6w7_VdXBxngBy2RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916601E/FF4875BEF56011EF9C82B71AC4F9AE02/fb-DrlKCyE6w7_VdXBxngBy2RcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:6d:4c:f3:b8:65:84:46:4d:a0:5c:77:da:d6:0c:70:42:70:
94:e4:dc:0d:f0:f4:08:60:2e:7c:bb:b9:06:92:2d:d1:6b:0d:
55:d5:3e:60:1d:4d:cc:a4:0c:08:75:35:35:31:fb:11:25:9d:
21:73:02:77:2d:04:e5:3b:cb:81:dd:fb:bc:d1:c1:8c:14:58:
b6:fe:42:06:39:7f:6b:81:eb:24:23:7d:da:2c:51:83:d7:d4:
24:6b:22:53:c7:03:54:d7:b1:f6:f6:65:c3:59:63:c1:61:48:
c8:50:8a:dd:1b:ba:49:eb:40:d7:9b:8f:ff:5d:7e:36:cd:87:
78:49:b2:f7:de:bd:14:e6:10:a7:27:e1:f8:0e:64:0a:35:ee:
c7:e1:e4:34:57:56:46:7e:c9:15:30:f6:05:0e:32:a1:2f:be:
6c:de:7a:75:bc:8f:cf:4e:68:f7:30:a1:17:9e:a2:a9:50:b1:
b7:43:5c:f1:9f:00:9b:64:9f:ad:94:c7:db:c5:04:96:0a:9a:
7f:a2:40:cc:2e:ad:09:cc:32:b8:9f:5f:d6:d6:22:fa:d7:43:
38:8b:71:e2:d4:69:70:d1:3c:db:38:b4:68:9b:5c:d9:8d:b7:
60:5c:2c:7d:87:7b:03:4d:de:f3:03:e6:80:3f:f2:5a:92:7c:
74:41:2e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:16 2026 by rpki-client