
$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
File: FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json)
Hash identifier: UmL0vvQ4lRSYkVSu96nSjtRQflyvlVlifSmBvvmQXNE=
Subject key identifier: 25:27:BF:4B:64:09:E6:C0:9B:52:D3:B4:E5:26:C7:65:E2:87:DF:3E
Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
Certificate issuer: /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
Manifest number: 0308
Signing time: Sun 19 Apr 2026 01:07:56 +0000
Manifest this update: Sun 19 Apr 2026 01:07:55 +0000
Manifest next update: Sun 26 Apr 2026 01:07:55 +0000
Files and hashes: 1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: fpOcuHJd53yMoQP+e/p76QzhNWP+iUnBRtN3wgxKeGw=)
2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: uTY9Mx19zYpw6CO6HqYxOp2zXgWkOsB7x9EURMKFBhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 01:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91810B4, serialNumber=153B63A93773B2589882186655DEF30446DD860D
Validity
Not Before: Apr 19 01:07:55 2026 GMT
Not After : Apr 26 01:07:55 2026 GMT
Subject: CN=69e42aeb-7a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:da:c0:4a:46:d2:65:ce:7b:f5:81:f1:df:
35:f9:49:6d:27:b1:0c:de:b0:1b:c3:26:0a:02:ae:
48:75:ae:9b:20:18:d8:c2:4b:1c:f2:a4:72:a0:71:
1f:82:ef:78:48:b1:ce:16:ef:28:b6:dd:58:7c:f3:
74:75:4e:12:eb:88:35:a6:25:57:18:e2:e0:dc:90:
b3:57:1c:51:72:bf:d3:dd:5a:c6:9f:0a:36:e3:0d:
14:43:3c:5d:16:e1:1d:35:fa:8d:ab:5c:c2:04:2e:
c5:e8:70:a4:c7:b9:c6:cf:9f:7e:49:72:5c:ed:a1:
62:8e:fe:44:02:94:c6:01:58:68:48:64:eb:f8:96:
0e:22:72:00:01:21:bb:79:b1:b9:55:b0:b2:f6:f3:
2a:57:76:b6:83:66:6d:8d:c3:5f:84:e9:16:25:4c:
4c:10:98:0f:df:0f:0c:75:38:c4:21:18:35:21:79:
ec:67:41:49:68:52:01:62:f7:14:1b:a8:5b:5f:be:
ea:05:0e:6b:59:35:10:a3:23:de:c0:ef:1d:de:62:
b9:8a:f5:86:fb:5f:6b:95:d7:3d:52:12:43:3e:35:
33:22:86:07:54:b1:fc:47:90:07:78:b5:bc:b0:5d:
cd:0b:de:e9:88:78:28:09:56:5b:a9:f6:76:81:a1:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:BF:4B:64:09:E6:C0:9B:52:D3:B4:E5:26:C7:65:E2:87:DF:3E
X509v3 Authority Key Identifier:
keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:2f:4a:24:0b:32:58:af:06:f7:5f:df:92:3b:c7:98:52:b1:
58:90:f5:9b:40:dc:9b:6c:e7:bb:6c:43:b5:75:04:a6:72:e5:
17:bb:13:96:bb:e4:3d:e5:81:4b:11:c9:51:26:17:6b:fb:15:
a8:4d:9e:20:96:55:8c:da:bf:70:71:d3:74:f7:c2:10:35:4f:
e4:20:11:92:37:d2:b8:c0:3b:a3:d3:b6:5e:43:5b:83:e4:6d:
03:a4:e0:24:10:a0:3a:8a:50:4d:3f:82:a0:8e:2a:d7:b6:23:
c9:b0:2c:c2:b6:f8:88:7e:62:42:d0:e7:fe:15:e7:7c:c6:c3:
a1:21:f9:86:ba:76:4e:8c:cf:71:fc:bf:1e:29:09:04:6e:b1:
06:e5:e8:9a:0f:24:c4:0e:7e:76:d1:f7:57:9b:8a:78:9b:0c:
91:19:ca:99:71:66:50:cd:f3:59:96:99:d4:c4:a7:f6:a0:cd:
2d:7e:43:e1:55:2d:f9:4f:00:30:28:90:fb:cd:10:e3:7d:2f:
93:10:ce:96:0a:52:7a:fa:a9:fd:b0:78:db:1d:9e:6e:63:e1:
71:7b:01:1f:2f:0a:9c:11:fc:f7:60:95:c3:04:42:be:72:5f:
0a:27:ae:a5:07:95:83:93:8a:d3:c4:a0:85:7d:e6:2b:82:67:
29:9c:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:04 2026 by rpki-client