
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json)
Hash identifier: iK5M6HfTATneY6Ab8tivCyj6UHpWE4DZZUNLKa9k3RU=
Subject key identifier: 26:65:B5:D7:E3:80:9A:51:0F:30:F3:69:38:9F:F1:18:B1:6A:E8:B5
Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Certificate serial: 3524
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
Manifest number: 351B
Signing time: Mon 02 Mar 2026 00:56:36 +0000
Manifest this update: Mon 02 Mar 2026 00:56:35 +0000
Manifest next update: Mon 09 Mar 2026 00:56:35 +0000
Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: SSlRQaXzYTsEOc7p0CDEoNSj8rKH2HuUmW3hYzGmTIE=)
2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: rIwXuVAKzTQeQgdJujiwbvj/r919Ii7m2oS5MI0eTgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13604 (0x3524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A
Validity
Not Before: Mar 2 00:56:35 2026 GMT
Not After : Mar 9 00:56:35 2026 GMT
Subject: CN=69a4e044-ae47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:54:1d:76:ad:ff:d7:3c:45:47:f5:47:38:
d8:97:42:21:8f:e5:ff:46:38:0a:14:a5:4b:d7:15:
86:aa:c0:e9:9d:2e:bf:51:fb:d2:76:06:29:36:d8:
1b:13:38:b9:26:d7:45:df:ff:55:e1:1e:e5:17:8e:
c6:8e:d2:9c:85:2e:2c:e7:64:8d:3f:4f:d6:9d:21:
1e:71:2d:cc:8a:2d:1a:c8:ee:13:3d:3e:d0:09:0e:
a2:68:23:62:41:9e:4a:fc:c3:fc:c1:28:a9:69:ea:
fe:55:e9:d0:7a:5d:17:ae:d8:1d:d7:3f:8a:4a:50:
7f:d1:d1:ed:43:db:2d:ff:8c:f5:94:78:f4:6a:65:
c7:60:3d:06:3a:4c:fe:4c:fc:65:ee:82:93:06:ab:
65:ea:69:ab:74:30:5f:f1:59:06:fd:c7:39:56:df:
ee:c6:df:3b:52:e4:61:df:ea:cb:3c:8a:13:8f:b2:
37:44:b9:fe:b3:1e:6d:ac:c3:48:77:bb:b9:11:3b:
e0:b8:6d:c1:1f:a1:31:0f:a9:3f:ca:26:23:11:a2:
ae:f1:8a:8d:15:3a:f8:f3:48:af:f0:f3:37:18:9f:
14:2b:6a:77:17:f2:a1:7e:63:ef:e0:cf:b2:b3:6f:
b6:2a:5f:0a:d8:22:e8:25:e0:5f:93:46:d6:99:02:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:65:B5:D7:E3:80:9A:51:0F:30:F3:69:38:9F:F1:18:B1:6A:E8:B5
X509v3 Authority Key Identifier:
keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:49:ca:8d:f7:ab:0a:ff:60:da:01:83:be:f9:92:0e:2f:65:
21:57:d5:ed:8a:ce:08:3f:fd:2e:3b:7c:a5:63:5b:0f:a1:6f:
e8:ac:d7:99:7c:41:00:70:a6:09:d3:b5:cd:bc:f9:19:47:0b:
60:aa:33:4d:58:19:74:29:45:b3:31:0b:2f:4e:17:73:8b:d4:
bb:63:51:14:12:95:e3:37:bd:a4:fc:6f:61:04:a6:3c:88:8b:
f6:ec:9d:7d:f2:99:53:9c:eb:b6:10:14:6e:18:99:e3:bb:2e:
5b:8e:38:20:da:c8:79:7f:a0:97:2f:63:a2:aa:d8:09:f8:74:
3f:05:b0:fe:6f:f1:a9:8c:19:50:ac:9b:8d:69:95:33:18:d5:
d2:99:0c:0f:b2:37:0c:dd:41:ee:a8:d7:ee:ee:32:21:fe:6e:
33:18:6c:e1:0d:64:4d:f7:52:d6:9c:1a:17:63:a8:41:df:e6:
45:d3:52:43:2e:bc:56:d9:8b:2e:5c:b7:38:bb:60:55:7d:c6:
fd:fe:0d:18:c1:12:75:af:08:c0:d4:97:f2:5f:8d:49:af:9c:
2e:be:78:1e:63:48:06:d6:de:05:92:01:17:ff:b1:62:aa:55:
ea:43:f7:c1:7b:72:85:1b:6f:cc:13:f3:65:f2:b3:59:7d:f3:
cd:9f:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:48 2026 by rpki-client