
$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json)
Hash identifier: Wyxu1iAFD03vC0T+g3Lb8uCjaK8+jAkjxBKuTaMq1P8=
Subject key identifier: C6:E0:FE:A3:F0:74:85:7B:14:AA:50:74:CC:2D:BF:0D:FC:67:38:E7
Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
Manifest number: 017B
Signing time: Fri 17 Apr 2026 04:18:22 +0000
Manifest this update: Fri 17 Apr 2026 04:18:22 +0000
Manifest next update: Fri 24 Apr 2026 04:18:22 +0000
Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: 9aQDbXO2SeJWe2BcC7vIkfHlgo3SxUDJaIRb+7VQkVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl
rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Validity
Not Before: Apr 17 04:18:22 2026 GMT
Not After : Apr 24 04:18:22 2026 GMT
Subject: CN=69e1b48e-2b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:26:da:00:61:e3:20:b9:e3:0a:a8:9e:8d:
85:e0:dc:4a:b9:ca:75:cb:6d:a1:08:22:5d:ed:bc:
f0:1d:e6:9e:47:8a:eb:c1:03:e7:f0:5a:b6:7c:47:
53:67:4b:26:ea:8c:9c:c4:e2:bf:80:37:9c:dd:9b:
a9:a5:81:08:51:b4:f2:63:8d:de:cd:08:43:d3:c9:
45:3b:30:1e:a8:92:2d:4f:91:89:29:62:1b:07:c6:
f8:3b:6d:ad:2c:32:fe:53:34:e3:f5:73:15:88:c4:
88:f7:60:7a:84:6d:57:74:46:62:64:b7:b0:66:b2:
6e:a4:03:a5:ac:a2:02:40:cd:dd:b0:7b:12:68:0c:
66:f0:c7:5c:cd:02:0f:2b:d0:1b:44:f5:a7:47:19:
eb:81:8a:27:2e:27:e2:0b:30:8f:fe:3e:bc:3a:77:
37:37:0f:3b:93:1e:57:3d:42:ba:3c:c1:bd:28:7b:
85:02:08:07:34:40:92:a8:24:fc:25:d2:c6:7e:2a:
6d:ca:55:2a:f0:77:5b:aa:e9:b2:58:f4:f5:11:a2:
15:3a:fe:5e:5e:cc:fc:d8:46:5d:da:60:b9:07:56:
d1:fd:2b:aa:c5:82:d0:25:b5:8b:ce:85:d6:eb:6d:
ba:c4:7f:b0:0f:44:dc:d2:fb:c3:b0:71:07:94:0f:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:FE:A3:F0:74:85:7B:14:AA:50:74:CC:2D:BF:0D:FC:67:38:E7
X509v3 Authority Key Identifier:
keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d8:d6:fa:8b:75:85:e7:a3:c6:d7:2e:5d:8a:8e:15:6c:c1:
b4:ca:b2:96:75:4c:f3:62:1f:7f:b4:30:04:d1:34:55:8b:cb:
00:50:da:83:a3:06:48:b0:f8:e2:41:43:8c:24:94:41:f4:67:
2b:50:45:9b:f9:d0:fb:35:bc:21:87:a6:fe:f8:c7:3d:42:59:
6d:36:d3:90:7a:19:37:55:79:f7:a3:c0:e9:30:26:da:22:cd:
77:da:d6:1d:e3:64:64:7c:6b:39:d4:90:7d:41:6c:33:bc:90:
7c:00:f8:07:ab:6e:89:7d:d3:8c:50:eb:e5:93:c4:b5:db:01:
8c:4d:e0:32:71:29:74:0e:42:d6:b9:d7:3f:0e:d0:58:e9:a5:
28:fa:cd:2c:5b:22:17:31:37:ae:34:34:db:9b:d2:67:48:aa:
e4:c6:fa:0e:23:2e:30:53:d6:ec:94:d4:02:7a:30:46:95:9f:
56:de:c4:63:f3:13:8c:ed:14:67:86:8d:4c:0e:0a:99:e1:8f:
d9:5f:33:14:82:47:6c:bd:fe:bb:bc:1a:25:87:ad:83:08:4d:
33:9b:0e:d3:d9:c0:2a:ba:8b:7d:f7:1c:29:57:d5:4b:e6:5d:
ed:ac:d8:53:bb:52:eb:37:22:24:30:b6:5a:54:ed:b0:d6:62:
c1:10:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:50:07 2026 by rpki-client