
$ rpki-client -vvf rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
File: ffgmqR46CHq9KaYomhI7qR8RMF8.mft (raw, json)
Hash identifier: xtRfl1/7OjzdqoJFmpJ5jMAWot1RshMwx8ARpE42mL4=
Subject key identifier: 31:77:CC:63:37:6A:33:97:70:57:D9:6D:66:FC:10:FD:F3:B8:20:43
Authority key identifier: 7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F
Certificate issuer: /CN=A919542A/serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
Manifest number: 59
Signing time: Sun 01 Mar 2026 09:32:12 +0000
Manifest this update: Sun 01 Mar 2026 09:32:11 +0000
Manifest next update: Sun 08 Mar 2026 09:32:11 +0000
Files and hashes: 1: ffgmqR46CHq9KaYomhI7qR8RMF8.crl (hash: kXhJL4dUJnl5aroxOLytvJFRDhdhoYI6JuV4sye7P8k=)
2: FC15F5FA8EE511F0BFFDD274C4F9AE02.roa (hash: g/nE+yb7i/92g+fOdfJjeU2SGmSy5q+9SfwNYYss58k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl
rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919542A, serialNumber=7DF826A91E3A087ABD29A6289A123BA91F11305F
Validity
Not Before: Mar 1 09:32:11 2026 GMT
Not After : Mar 8 09:32:11 2026 GMT
Subject: CN=69a4079c-79e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:9a:43:51:5d:c1:cd:ff:c0:2c:06:b5:17:
8a:df:c1:0b:5e:53:0b:14:cd:dc:fc:67:d9:38:9b:
5d:5e:d5:84:6d:ff:81:b1:3e:02:e5:25:c2:ea:b9:
e9:ae:da:f8:7c:8c:ce:03:bc:2a:7a:59:ec:d0:ba:
e9:50:0d:6d:d9:d1:85:12:bb:a7:96:d3:9c:04:13:
eb:63:9a:8d:47:92:13:1c:f2:84:9e:59:a2:22:49:
ae:40:73:d3:6e:d1:96:46:17:eb:b9:5e:27:bb:c0:
07:1d:e8:0f:9e:a6:6a:38:d8:14:70:13:b7:9f:fb:
cf:2a:f3:f3:a5:f5:13:de:42:49:3a:25:de:d6:a4:
87:61:2c:71:21:7c:5b:59:8c:b3:d7:fd:a7:72:9f:
da:a1:ea:94:e9:10:14:15:3a:5f:61:f7:6a:ea:2a:
7f:bc:9e:42:c2:8c:39:eb:c2:a2:da:f8:0d:f5:e4:
80:ee:a1:59:bd:0b:bb:b3:26:fa:ae:3c:cf:57:38:
39:34:dc:0d:88:92:98:59:62:cd:f1:71:a0:0c:c8:
ec:00:90:12:20:a8:05:1c:95:f8:5a:cc:cb:b7:cb:
23:bb:7e:eb:89:c3:77:a1:90:40:ad:78:37:ce:0e:
bd:1c:b0:a8:93:6f:14:37:12:ec:11:ae:fc:58:05:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:CC:63:37:6A:33:97:70:57:D9:6D:66:FC:10:FD:F3:B8:20:43
X509v3 Authority Key Identifier:
keyid:7D:F8:26:A9:1E:3A:08:7A:BD:29:A6:28:9A:12:3B:A9:1F:11:30:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ffgmqR46CHq9KaYomhI7qR8RMF8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919542A/5BE418828EE511F090902D68C4F9AE02/ffgmqR46CHq9KaYomhI7qR8RMF8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ea:08:9f:db:5e:4f:7c:52:32:38:e3:82:d6:9e:a0:45:d0:
7b:21:73:06:a7:91:19:57:c9:41:06:67:fd:f1:79:54:2d:7c:
cb:1d:aa:1c:d8:1f:e1:54:63:37:70:ce:3a:06:cc:d4:89:8f:
cb:97:c6:4f:06:b2:8f:f5:05:ea:e7:ea:06:cc:8c:06:77:3f:
1e:f8:16:9c:4a:3c:b4:39:22:b0:85:67:4d:1c:e2:da:b2:c2:
46:e8:ba:49:1c:65:a8:6a:fc:94:67:0b:2b:11:b0:c2:08:cb:
01:17:7b:6e:8d:81:74:90:6c:d9:28:73:11:d5:c7:3a:81:7a:
5c:7e:af:65:2b:79:60:43:29:bf:82:7b:86:27:bb:83:79:d5:
63:1d:b8:db:5d:31:ad:0f:e1:af:0f:43:a8:e0:52:b9:ea:5c:
8b:84:3b:e2:f7:06:4b:7f:0b:89:e4:bb:aa:5f:6d:b8:6b:2f:
f1:6c:b9:71:47:6b:4c:66:51:d3:f0:91:c3:07:74:e8:02:ad:
0b:f6:82:52:14:d8:87:1e:cd:5d:29:75:04:75:f2:a7:f7:9a:
75:6d:57:38:e3:61:f0:6d:5e:19:5f:17:9f:fd:b5:9a:31:e6:
c5:50:6f:84:31:7b:1b:c3:9d:3b:63:cc:d7:ce:38:0d:22:54:
7e:18:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:13 2026 by rpki-client