
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
File: Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft (raw, json)
Hash identifier: 5bGGIwMqhbJ3Md4XI/nT1ZZ8yiQV3bagYnuq89U7k+M=
Subject key identifier: 8E:95:DD:30:EF:52:07:55:E6:53:6C:59:87:CF:21:D0:B9:86:F1:83
Authority key identifier: 15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
Certificate issuer: /CN=A916B0EA/serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Certificate serial: 08D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
Manifest number: 1590
Signing time: Thu 16 Apr 2026 18:19:24 +0000
Manifest this update: Thu 16 Apr 2026 18:19:24 +0000
Manifest next update: Thu 23 Apr 2026 18:19:24 +0000
Files and hashes: 1: Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl (hash: t9pfieE7BwlcrLtipnMXvpbaBFce1rpxB5EbWiPhJ98=)
2: 6535FEC0345C11F0B4126F3CC4F9AE02.roa (hash: RI3k7jd5Py+4n5PpztOSlnf146C3FanWcnH9vVZTti4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B0EA, serialNumber=15DF79A00739BC39B7178925958DFEE99BE00D42
Validity
Not Before: Apr 16 18:19:24 2026 GMT
Not After : Apr 23 18:19:24 2026 GMT
Subject: CN=69e1282c-e334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:ac:00:52:9b:29:bb:99:ab:ff:7e:b0:b8:
1b:c4:4a:99:04:71:7a:15:ab:b2:12:95:70:da:03:
84:96:af:d9:71:1b:47:43:7a:a4:7b:33:8e:fb:59:
74:5a:f9:41:1e:01:8b:3f:bd:54:d5:9d:78:ff:ce:
ce:f3:55:90:8d:f6:2d:04:7d:91:c4:10:6c:e3:99:
83:07:44:18:2b:1a:6f:db:24:59:13:c8:ae:e6:43:
12:b6:13:6a:2e:b4:ef:3d:91:ec:f4:80:24:e4:b7:
f7:10:b1:d0:2a:7e:46:a1:a4:e9:34:13:ec:1c:20:
39:6a:83:e4:f6:c2:41:77:01:7f:42:87:17:c0:c0:
70:39:75:ea:df:ef:4a:0c:60:76:80:15:44:c6:6e:
d8:e4:57:30:6a:70:e2:9a:27:4c:b8:9b:09:a4:75:
45:29:58:3a:d3:f1:57:9d:b8:b7:58:73:65:e4:94:
ae:12:20:ac:1d:50:2a:d7:10:3f:16:22:cf:83:47:
85:37:17:79:00:1d:a7:34:b6:7b:05:de:80:6f:84:
4b:bb:0e:30:b5:9c:ec:fa:aa:cd:ca:57:c9:5c:e3:
bb:51:c3:b0:0d:ed:3e:fc:89:0f:36:a7:80:1c:10:
90:07:cc:ca:59:54:12:b4:94:b1:6f:6d:18:c8:67:
8e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:DD:30:EF:52:07:55:E6:53:6C:59:87:CF:21:D0:B9:86:F1:83
X509v3 Authority Key Identifier:
keyid:15:DF:79:A0:07:39:BC:39:B7:17:89:25:95:8D:FE:E9:9B:E0:0D:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fd95oAc5vDm3F4kllY3-6ZvgDUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/Fd95oAc5vDm3F4kllY3-6ZvgDUI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ac:97:6d:f3:af:7f:8e:79:6d:53:f7:1f:52:a8:74:eb:dc:
c0:6f:4a:48:c1:f9:14:9a:5d:dc:b0:b1:21:f8:b8:43:30:17:
77:33:7c:8d:60:a1:76:c1:09:bd:c6:58:c6:a6:0a:70:6d:db:
d6:8f:21:4c:4c:f7:e3:4a:25:74:69:df:6c:39:16:dd:bd:1e:
32:55:11:ce:d0:eb:85:6d:55:6c:9e:31:96:da:cb:ee:92:51:
99:57:ef:8b:8a:30:22:39:ac:69:e9:93:c9:aa:71:0b:15:a7:
4c:ab:05:b5:b4:56:ce:d4:d4:ac:b5:fa:7d:7b:26:71:c4:6f:
fd:6a:b2:87:96:c6:70:b3:cb:bf:f8:87:bb:7b:de:eb:d3:41:
5d:8d:5d:05:16:68:9b:0e:a9:3c:95:14:6f:f9:c4:55:98:eb:
75:8f:9a:d9:0d:15:38:4a:65:e5:e3:e1:13:ce:7b:85:6c:63:
2a:08:a7:a7:88:17:b5:76:c5:36:53:e1:91:23:24:78:8e:c4:
6d:48:06:61:9a:55:94:24:36:a4:90:fc:4c:1f:ae:0f:43:a9:
af:af:8e:54:7f:5a:6c:e0:69:2b:3c:14:84:c5:01:25:f2:dc:
79:a3:60:0e:2b:c3:94:56:2c:7e:67:02:62:8d:a3:11:c9:c9:
2f:fa:08:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwRUExMTAvBgNVBAUTKDE1REY3OUEwMDczOUJDMzlCNzE3ODkyNTk1OERGRUU5
OUJFMDBENDIwHhcNMjYwNDE2MTgxOTI0WhcNMjYwNDIzMTgxOTI0WjAYMRYwFAYD
VQQDEw02OWUxMjgyYy1lMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0dasAFKbKbuZq/9+sLgbxEqZBHF6FauyEpVw2gOElq/ZcRtHQ3qkezOO+1l0
WvlBHgGLP71U1Z14/87O81WQjfYtBH2RxBBs45mDB0QYKxpv2yRZE8iu5kMSthNq
LrTvPZHs9IAk5Lf3ELHQKn5GoaTpNBPsHCA5aoPk9sJBdwF/QocXwMBwOXXq3+9K
DGB2gBVExm7Y5FcwanDimidMuJsJpHVFKVg60/FXnbi3WHNl5JSuEiCsHVAq1xA/
FiLPg0eFNxd5AB2nNLZ7Bd6Ab4RLuw4wtZzs+qrNylfJXOO7UcOwDe0+/IkPNqeA
HBCQB8zKWVQStJSxb20YyGeOdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6V3TDv
UgdV5lNsWYfPIdC5hvGDMB8GA1UdIwQYMBaAFBXfeaAHObw5txeJJZWN/umb4A1C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC
NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZEbTNGNGtsbFkzLTZadmdE
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZkOTVvQWM1dkRtM0Y0a2xsWTMtNlp2Z0RVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9GZDk1b0FjNXZE
bTNGNGtsbFkzLTZadmdEVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuqyXbfOvf455bVP3H1KodOvcwG9KSMH5FJpd3LCxIfi4QzAXdzN8jWChdsEJ
vcZYxqYKcG3b1o8hTEz340oldGnfbDkW3b0eMlURztDrhW1VbJ4xltrL7pJRmVfv
i4owIjmsaemTyapxCxWnTKsFtbRWztTUrLX6fXsmccRv/Wqyh5bGcLPLv/iHu3ve
69NBXY1dBRZomw6pPJUUb/nEVZjrdY+a2Q0VOEpl5ePhE857hWxjKginp4gXtXbF
NlPhkSMkeI7EbUgGYZpVlCQ2pJD8TB+uD0Opr6+OVH9abOBpKzwUhMUBJfLceaNg
DivDlFYsfmcCYo2jEcnJL/oIlA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:59 2026 by rpki-client