
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier: etjvO812PWcGL+TYDR9/QzCVRR+hBRQlpW51RtS/tN4=
Subject key identifier: 9E:37:9B:53:A0:D2:05:8D:CF:32:34:2F:DC:EC:8C:C4:C1:6D:C8:12
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial: 04E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number: 04DB
Signing time: Sun 01 Mar 2026 00:27:16 +0000
Manifest this update: Sun 01 Mar 2026 00:27:15 +0000
Manifest next update: Sun 08 Mar 2026 00:27:15 +0000
Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: shgh4/FqaS8bRqyEDZOPn1962CqrD5NA2ZPIMC+NcSI=)
2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: c5NMAe1CqQurJqS1H1w7Md/EROAKq1xZbqnKJkldnUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1251 (0x4e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Validity
Not Before: Mar 1 00:27:15 2026 GMT
Not After : Mar 8 00:27:15 2026 GMT
Subject: CN=69a387e3-e605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:f7:d4:89:ea:70:d2:ac:a5:30:60:b7:2f:
3d:87:d1:bc:41:ca:04:1d:d9:78:8b:0d:21:fd:21:
33:fd:8c:ed:1d:0d:d1:ae:0a:2e:bb:66:72:25:54:
82:0b:f7:ef:84:31:21:43:d0:2b:8c:b2:fa:e3:a4:
da:a9:36:ca:25:39:96:c0:f3:ca:e2:a0:03:89:c9:
a4:cc:fa:d8:21:3d:8e:f0:6e:0f:91:e7:dd:37:97:
10:3a:7d:70:5b:52:7b:cd:29:2e:a2:86:66:86:f2:
3e:8e:aa:34:c1:a6:c0:60:51:6e:ed:ae:d5:f5:62:
61:9e:0d:be:1b:f9:38:55:46:1f:03:f3:da:62:02:
1d:dc:27:b1:87:d1:28:fc:90:c3:19:bd:54:e9:9a:
18:a4:ea:af:0c:86:d3:00:b3:5f:e3:4e:52:8d:dd:
9c:fc:c3:f4:b9:c9:36:b8:2e:01:cd:c3:7b:c1:fd:
b1:3f:cc:58:cf:4c:79:bf:a6:55:9c:8c:01:b9:5f:
71:7b:d9:d3:38:fe:16:13:57:b2:2d:41:2c:02:0b:
43:2c:9c:f5:f3:97:0d:53:de:1d:0b:cd:35:62:74:
2d:59:f0:6e:fd:be:79:1e:dd:77:5a:fd:98:58:29:
46:dc:ce:ee:1c:8f:33:82:07:e5:b8:ed:a7:3a:e5:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:37:9B:53:A0:D2:05:8D:CF:32:34:2F:DC:EC:8C:C4:C1:6D:C8:12
X509v3 Authority Key Identifier:
keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:c2:b3:85:4b:dd:26:ce:05:ae:cf:cf:91:58:c5:cf:e7:15:
a6:f1:a2:70:b4:cc:3c:45:cd:7c:74:f6:70:de:81:ad:bf:3b:
d0:27:f9:90:6c:a4:84:39:2f:05:38:f4:36:33:7a:9e:99:28:
1c:02:ee:33:a3:d6:26:11:ed:52:40:03:b0:03:4e:69:c5:e6:
93:9b:6a:66:c9:38:82:e0:77:a3:73:77:fa:07:42:9a:2d:09:
4e:4c:6f:c0:a1:2f:48:0f:bb:41:7e:3a:79:df:d8:8f:7b:d4:
d0:cf:11:f8:44:db:99:9d:1c:00:6c:61:cb:f3:96:15:5e:56:
59:03:4b:da:6e:82:b0:c9:d2:42:46:d7:fb:a6:d8:93:71:b3:
98:26:6d:ff:d2:d6:b4:46:92:64:33:94:53:f1:df:e4:09:e7:
49:9b:5a:72:b4:01:95:00:90:2f:b9:ef:db:e0:42:52:8b:49:
00:e8:47:2b:74:9d:d7:d1:f7:33:44:5e:98:77:70:ae:cf:2a:
49:42:3a:69:2e:28:8a:4f:75:49:bd:fe:ce:9b:b5:ee:af:e3:
22:79:2e:31:b6:56:f2:bf:ba:e0:d7:dc:4a:c6:1b:b1:a6:7c:
fe:c7:92:67:58:8d:2e:c5:90:35:c8:4a:40:26:ec:e4:e0:18:
73:d7:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:46 2026 by rpki-client