
$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json)
Hash identifier: 9uVGIK/Q6sHi8cD/d+G91P6ar/opJRncZ9zbb/kR7TU=
Subject key identifier: 06:4B:2B:01:65:1F:98:CD:37:BC:86:D4:7D:34:99:0D:ED:2B:25:47
Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
Manifest number: 0258
Signing time: Fri 17 Apr 2026 02:00:58 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Fri 24 Apr 2026 02:00:57 +0000
Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: k1f/j0CApvc7W4tAc8rYSfAjzsHlhz8SRHKMSSkiN3k=)
2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: qwTYpn0O77TiQ0Che39rdUdkqwh0ZGsp41fX2jEMpJ0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 24 02:00:57 2026 GMT
Subject: CN=69e1945a-f8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:07:a0:57:39:c1:7c:eb:e8:9d:07:42:1b:
0c:c3:39:c0:7b:d0:74:0a:50:2d:7e:8c:e3:2b:04:
9a:08:fa:08:ca:de:71:65:47:da:ce:18:e6:fa:83:
09:fa:fa:92:3b:9b:1f:6f:c9:5a:69:54:62:41:ab:
d7:bf:5a:83:86:7e:2f:7f:2d:03:54:80:d2:da:8f:
c0:9f:9b:69:cd:1b:5d:9c:4e:71:62:e7:ab:f9:ea:
d9:e5:3f:ab:fb:ea:bb:5f:9a:c3:bd:2f:5c:92:b8:
10:50:a5:80:de:42:31:41:9d:93:12:1e:f5:b6:3e:
eb:22:ae:34:6b:14:99:60:a4:43:7c:70:02:b0:ce:
4e:ee:d9:68:ec:97:95:fb:a0:60:dc:19:05:eb:f7:
88:b5:1d:29:a6:10:9a:e9:53:68:e4:a7:3b:ba:e0:
36:b7:a7:91:40:02:7b:9e:c2:09:5f:6d:0b:26:07:
c4:4c:16:8f:46:50:ca:83:2b:d4:e0:32:0e:a2:b1:
68:eb:c4:b4:1f:39:25:0b:40:33:94:7e:62:ad:8b:
6f:0b:29:d9:0f:23:f5:c1:2d:96:24:c4:b3:7a:ee:
69:1a:8b:b2:98:76:71:87:eb:6b:6f:bc:18:4a:ee:
af:eb:17:72:97:9a:1c:f2:68:7d:d6:9c:11:71:eb:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:2B:01:65:1F:98:CD:37:BC:86:D4:7D:34:99:0D:ED:2B:25:47
X509v3 Authority Key Identifier:
keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1a:a6:ec:4f:ea:44:63:c4:a1:dd:69:7f:1c:04:b2:a2:fe:
f4:de:a8:92:5c:41:5e:fa:29:f8:08:43:1b:c4:d7:b6:93:1e:
a0:82:a4:fc:15:5f:13:2f:cf:cc:53:7d:b3:81:da:ba:71:f7:
c0:c7:c5:18:9a:d3:54:38:9a:19:ab:b0:43:09:6a:ee:f1:01:
59:da:3a:65:02:de:0a:d7:cb:fc:f5:ec:aa:c2:c5:fe:4f:74:
a4:b4:69:ea:f5:c4:0d:cb:00:a1:06:21:c8:88:5f:bd:7b:ff:
76:7a:d7:b5:fd:b8:f5:e0:88:fd:b8:6a:df:27:64:2d:6f:41:
02:46:a3:48:c6:3f:63:4b:08:73:34:19:b6:dc:50:14:23:94:
53:50:e1:4c:f9:b1:c5:25:69:fe:66:36:90:33:77:4a:57:ae:
0c:1e:55:72:13:de:ab:9a:6d:a8:76:e7:2f:a0:b6:0e:e9:fd:
bb:1b:f4:b4:78:ef:cd:70:d6:e6:44:e9:2c:09:6c:27:3b:b9:
69:15:2d:e7:b9:fc:59:56:f9:47:71:f6:78:5f:91:2b:2c:d5:
3e:47:82:e7:78:83:01:60:fe:0f:18:ac:11:f0:46:9f:ba:f1:
2e:5b:4f:6b:c5:b0:49:d5:e5:52:e0:3b:b6:8e:cb:d0:1d:5c:
8c:5a:2f:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZEMkIxMTAvBgNVBAUTKEQ2MURDMTc4MDhGNThFMEY5OUIyODUyQ0U3NDg2MEY4
NTNDQjIwREIwHhcNMjYwNDE3MDIwMDU3WhcNMjYwNDI0MDIwMDU3WjAYMRYwFAYD
VQQDEw02OWUxOTQ1YS1mOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAypIHoFc5wXzr6J0HQhsMwznAe9B0ClAtfozjKwSaCPoIyt5xZUfazhjm+oMJ
+vqSO5sfb8laaVRiQavXv1qDhn4vfy0DVIDS2o/An5tpzRtdnE5xYuer+erZ5T+r
++q7X5rDvS9ckrgQUKWA3kIxQZ2TEh71tj7rIq40axSZYKRDfHACsM5O7tlo7JeV
+6Bg3BkF6/eItR0pphCa6VNo5Kc7uuA2t6eRQAJ7nsIJX20LJgfETBaPRlDKgyvU
4DIOorFo68S0HzklC0AzlH5irYtvCynZDyP1wS2WJMSzeu5pGouymHZxh+trb7wY
Su6v6xdyl5oc8mh91pwRcevsrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZLKwFl
H5jNN7yG1H00mQ3tKyVHMB8GA1UdIwQYMBaAFNYdwXgI9Y4PmbKFLOdIYPhTyyDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkQyQi8zRjg2RDc5QUE4
MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpnLVpzb1VzNTBoZy1GUExJ
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFoM0JlQWoxamctWnNvVXM1MGhnLUZQTElOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkQyQi8zRjg2RDc5QUE4MzUxMUVEQTc3NkFCMzBDNEY5QUUwMi8xaDNCZUFqMWpn
LVpzb1VzNTBoZy1GUExJTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjBqm7E/qRGPEod1pfxwEsqL+9N6oklxBXvop+AhDG8TXtpMeoIKk/BVfEy/P
zFN9s4HaunH3wMfFGJrTVDiaGauwQwlq7vEBWdo6ZQLeCtfL/PXsqsLF/k90pLRp
6vXEDcsAoQYhyIhfvXv/dnrXtf249eCI/bhq3ydkLW9BAkajSMY/Y0sIczQZttxQ
FCOUU1DhTPmxxSVp/mY2kDN3SleuDB5VchPeq5ptqHbnL6C2Dun9uxv0tHjvzXDW
5kTpLAlsJzu5aRUt57n8WVb5R3H2eF+RKyzVPkeC53iDAWD+DxisEfBGn7rxLltP
a8WwSdXlUuA7to7L0B1cjFovTQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:58 2026 by rpki-client