
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier: jNrActHowebiZ9rx/e4P888f2YwxmB3arNWCHpVxqRM=
Subject key identifier: F8:BB:FB:D3:9A:51:5A:9C:59:25:C0:B2:51:92:60:AA:8E:61:7A:CC
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial: 04FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number: 04F5
Signing time: Thu 16 Apr 2026 23:39:00 +0000
Manifest this update: Thu 16 Apr 2026 23:38:59 +0000
Manifest next update: Thu 23 Apr 2026 23:38:59 +0000
Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: qmF/eRpcjjyFx1DTFCCUl6GHvAyy67DUf2EN9nZOkYA=)
2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: YhHbcwgSJe/eTrJM48b57657xlLdX21AQDaMzj6Ijsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Validity
Not Before: Apr 16 23:38:59 2026 GMT
Not After : Apr 23 23:38:59 2026 GMT
Subject: CN=69e17314-fffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:8d:49:00:89:cc:8c:77:99:66:95:42:94:
37:65:df:29:88:db:39:6d:5b:f0:94:17:f3:07:a2:
16:df:ef:d7:aa:0a:6a:f4:85:f3:f8:8f:cb:ae:52:
69:f2:db:a5:2d:0c:00:79:1e:f2:6d:ba:d0:22:e3:
0a:63:95:38:9e:0c:6d:fe:43:e4:11:82:fa:07:37:
1d:9a:76:f6:cb:e9:6f:14:0a:b8:2b:f7:ea:f2:93:
43:9a:fa:4f:b1:0e:57:3b:b6:d6:91:48:6d:6c:dd:
8c:ca:8d:ce:a6:eb:28:13:99:7d:6b:e5:ae:47:c1:
50:e7:c2:54:06:91:4a:f9:ac:80:92:07:f5:6a:24:
75:1d:ed:00:36:96:7b:b1:06:9a:e5:df:a6:c3:61:
9f:c4:b0:e3:8b:1e:ed:b7:2e:d3:61:9d:b4:37:b8:
ee:80:74:cf:90:99:4b:ef:b8:8f:3f:8e:f3:b3:6b:
bb:91:8f:6a:df:26:f8:77:d7:a1:a1:95:67:eb:7f:
bd:59:b5:94:f2:70:cb:09:26:75:eb:a2:d3:51:1e:
48:64:38:bd:bc:8b:61:a2:23:3f:d6:a3:98:47:5b:
93:b2:a7:21:d9:76:27:5a:df:be:8f:9f:1c:8c:12:
92:d5:63:05:cf:54:a6:e7:4c:01:da:00:10:57:56:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:FB:D3:9A:51:5A:9C:59:25:C0:B2:51:92:60:AA:8E:61:7A:CC
X509v3 Authority Key Identifier:
keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:f2:7b:20:47:ef:82:ab:82:6b:8f:8c:bf:06:6e:a7:28:fe:
06:0f:68:64:fe:85:ab:83:33:7e:ba:94:86:da:ae:57:bd:84:
1b:e3:a8:de:74:fb:12:3b:34:e4:fe:7f:11:b4:f1:58:48:39:
30:b0:3f:b7:46:c2:6b:fd:68:6a:c9:e9:fe:05:b3:bf:1a:5a:
51:a7:e1:c6:09:a2:1c:c3:0a:41:d1:81:83:bb:d0:98:79:c3:
06:84:ea:7e:b3:61:af:d9:07:39:c0:4d:94:33:ff:e1:a2:dd:
ca:54:ec:9e:f2:3e:6d:39:c8:50:b1:c5:4d:1b:ac:81:fd:f6:
4f:45:8d:06:c0:0d:d2:4c:29:dd:95:eb:28:e0:fc:24:4a:77:
72:db:bf:c6:61:1b:85:36:88:87:34:87:5c:33:fe:46:67:dd:
7f:17:87:98:2b:9c:31:01:8f:11:c7:b5:ab:b1:5c:25:99:59:
26:a9:4f:8e:91:bb:23:4b:30:4c:52:b8:21:1e:01:c4:9f:c4:
09:86:14:96:e1:74:f9:79:df:68:d5:88:14:f6:b7:9f:47:03:
48:23:a0:6a:0d:c6:cc:e1:30:8d:9e:96:dc:7e:24:a7:3a:37:
7b:7e:fa:ba:9a:9c:3c:05:ad:82:0d:04:a5:33:d8:de:b2:97:
b8:29:ea:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:14 2026 by rpki-client