
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier: PHVeaYXl2vsZJ6lvuuFrJ5k4RQsGxqawIaZ3L8MUEFo=
Subject key identifier: 04:A7:7B:13:60:B6:6F:B9:B2:F8:86:80:3B:31:B7:70:6E:B5:77:55
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number: 0197
Signing time: Mon 02 Mar 2026 02:59:12 +0000
Manifest this update: Mon 02 Mar 2026 02:59:08 +0000
Manifest next update: Mon 09 Mar 2026 02:59:08 +0000
Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: Fyin9FMdVWJt62IaVCKyJ+kLo1EbVMzVX7Aplq1aopk=)
2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Validity
Not Before: Mar 2 02:59:08 2026 GMT
Not After : Mar 9 02:59:08 2026 GMT
Subject: CN=69a4fd00-f228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:99:9b:16:5e:61:69:2e:9d:55:13:ae:c6:
5e:90:a0:c4:86:be:5d:5c:f6:b4:9b:9a:0d:6b:e8:
b4:8c:4a:95:5d:38:d5:41:5b:b8:fa:86:97:04:dd:
dd:02:7a:7f:4e:5a:08:e4:cc:77:51:4b:22:04:fb:
67:d8:76:6a:dc:ef:90:60:56:9f:58:df:c2:ee:d5:
b6:87:3f:ce:18:a4:54:24:52:c1:5b:b3:21:da:01:
8a:67:9b:ec:d1:0a:4c:b2:7e:96:a3:cb:96:3e:b7:
d6:2f:7a:e2:a5:64:eb:15:a9:e8:ad:32:9d:5b:ae:
cc:d2:3b:d4:4c:3b:83:7b:34:39:77:2a:43:2f:2f:
25:da:7a:cf:2f:eb:90:1e:27:4a:36:ea:8a:eb:59:
60:d7:65:4e:d4:75:f9:3c:d1:d0:33:bf:82:5f:e1:
27:ea:49:2c:cf:38:33:61:58:c7:1c:c7:ed:60:44:
55:7a:7a:e4:e5:ce:c1:40:3d:05:26:02:b9:90:54:
38:c2:d3:4b:39:24:c5:d8:21:d6:a8:7c:51:6d:c5:
2c:be:1b:97:01:7f:ce:84:47:6a:78:ea:c8:12:de:
39:f3:f4:22:cd:c8:ad:9f:a2:2a:67:27:7d:d8:88:
de:07:11:db:2b:e4:5f:f4:c8:7e:8a:a3:52:ac:ea:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:7B:13:60:B6:6F:B9:B2:F8:86:80:3B:31:B7:70:6E:B5:77:55
X509v3 Authority Key Identifier:
keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:48:02:76:aa:33:53:4a:6f:10:1e:b4:f1:7c:95:1e:6e:4e:
fd:cb:4a:f1:5c:0a:e1:b7:7b:d3:c4:c4:64:27:be:fb:07:88:
d9:e1:9c:56:e4:16:5d:75:4b:ac:17:90:de:e8:62:13:3a:bd:
f9:ed:66:df:47:e6:3b:d5:ec:94:53:2f:5a:3c:8c:f8:7f:22:
1e:79:8c:b0:d4:fd:db:3c:41:1f:e5:fb:c1:77:8d:4c:8f:6d:
c0:23:89:95:75:20:aa:66:79:18:38:d4:37:d3:f4:d4:4d:9e:
a3:2d:2b:20:06:bd:78:62:06:e3:61:3e:26:8e:4a:81:c0:5b:
fe:f1:ca:e6:e4:40:fb:70:28:5c:64:35:ad:4c:f7:38:f1:2d:
b7:fa:89:88:d9:1d:4d:a1:11:8a:e7:54:fe:ed:ad:c7:37:25:
68:4b:8e:c3:50:b6:76:66:c7:42:d9:bc:f2:e0:00:69:77:2d:
b8:35:f0:31:10:97:d5:e6:70:9e:27:55:24:14:90:33:9a:98:
ca:c1:be:15:26:a2:bc:5f:57:ea:1d:03:21:fa:53:21:c7:fd:
07:48:57:df:3d:46:0a:c7:80:73:3b:aa:4c:01:15:88:41:15:
b0:b1:77:48:71:d9:ff:08:29:63:95:14:a7:75:92:1d:1f:72:
54:ba:29:38
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG
MjY3MjQ5OEEwHhcNMjYwMzAyMDI1OTA4WhcNMjYwMzA5MDI1OTA4WjAYMRYwFAYD
VQQDEw02OWE0ZmQwMC1mMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAso6ZmxZeYWkunVUTrsZekKDEhr5dXPa0m5oNa+i0jEqVXTjVQVu4+oaXBN3d
Anp/TloI5Mx3UUsiBPtn2HZq3O+QYFafWN/C7tW2hz/OGKRUJFLBW7Mh2gGKZ5vs
0QpMsn6Wo8uWPrfWL3ripWTrFanorTKdW67M0jvUTDuDezQ5dypDLy8l2nrPL+uQ
HidKNuqK61lg12VO1HX5PNHQM7+CX+En6kkszzgzYVjHHMftYERVenrk5c7BQD0F
JgK5kFQ4wtNLOSTF2CHWqHxRbcUsvhuXAX/OhEdqeOrIEt458/Qizcitn6IqZyd9
2IjeBxHbK+Rf9Mh+iqNSrOpfPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASnexNg
tm+5sviGgDsxt3ButXdVMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw
NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3
RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB0gCdqozU0pvEB608XyVHm5O/ctK8VwK4bd708TEZCe++weI2eGcVuQWXXVL
rBeQ3uhiEzq9+e1m30fmO9XslFMvWjyM+H8iHnmMsNT92zxBH+X7wXeNTI9twCOJ
lXUgqmZ5GDjUN9P01E2eoy0rIAa9eGIG42E+Jo5KgcBb/vHK5uRA+3AoXGQ1rUz3
OPEtt/qJiNkdTaERiudU/u2txzclaEuOw1C2dmbHQtm88uAAaXctuDXwMRCX1eZw
nidVJBSQM5qYysG+FSaivF9X6h0DIfpTIcf9B0hX3z1GCseAczuqTAEViEEVsLF3
SHHZ/wgpY5UUp3WSHR9yVLopOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:13 2026 by rpki-client