
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json)
Hash identifier: HffE4+Bq8ksbD1Rs4EVxK7D17wV0bZulOA0ce869vZE=
Subject key identifier: F1:1B:45:67:81:C7:4E:E6:D7:2D:B4:5E:9E:9C:FF:C1:87:B6:36:2E
Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
Manifest number: 015A
Signing time: Fri 17 Apr 2026 04:40:50 +0000
Manifest this update: Fri 17 Apr 2026 04:40:49 +0000
Manifest next update: Fri 24 Apr 2026 04:40:49 +0000
Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: 1rFMz9zwkjSTyzmKNxmV4JnrZRixVEce1b/I0LMvt0c=)
2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: jwNqpqTZXno1DyXY2sIyAh2YiWEDOdSFaYY50G2wOTA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788
Validity
Not Before: Apr 17 04:40:49 2026 GMT
Not After : Apr 24 04:40:49 2026 GMT
Subject: CN=69e1b9d2-00a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:03:02:b2:5b:c5:b4:27:59:22:ae:bc:0f:
52:6c:92:c5:aa:b6:14:bc:f3:43:ea:8b:59:39:80:
e6:bc:31:9d:9a:68:50:84:07:8c:ae:23:16:f0:93:
76:44:91:46:02:9f:4a:c3:7a:23:9d:e1:ba:56:f6:
3a:44:22:da:34:2f:64:f3:57:58:9a:93:7e:4a:dd:
c4:c3:de:9a:73:48:f7:74:89:ec:36:dd:14:04:5f:
5e:f0:e9:03:90:86:f9:d8:1f:83:22:84:fb:93:0b:
b2:b1:cb:90:b3:7f:dd:de:6c:32:27:54:af:32:c0:
08:44:ba:a1:50:43:dc:cf:c6:cf:e1:95:53:da:df:
c7:bb:55:76:84:18:a3:6e:bd:9d:a9:7f:b9:9a:ee:
2c:88:b5:a3:67:a9:1b:03:bc:21:99:9d:fc:ea:4c:
24:66:b8:28:00:09:09:b6:c7:6a:ab:b2:36:f5:fb:
30:f6:bd:73:bd:5a:b9:16:94:ee:01:b9:f9:25:6c:
6d:5c:bf:c0:74:b2:da:e6:5d:04:92:25:6e:83:0b:
8f:56:ea:86:1d:76:7b:2e:7c:4e:1e:d6:d9:ed:ff:
52:ad:63:59:7c:89:a8:e3:c2:17:4f:93:de:ba:cb:
0f:1f:f5:df:96:14:87:b3:5a:3b:04:75:9e:4c:54:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:45:67:81:C7:4E:E6:D7:2D:B4:5E:9E:9C:FF:C1:87:B6:36:2E
X509v3 Authority Key Identifier:
keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:13:e6:0b:f8:dc:b6:dc:11:a5:0f:85:15:c8:7f:63:02:
21:3d:a3:31:1d:38:3d:79:1e:c4:c4:30:44:2a:69:7c:dc:2c:
5e:bc:9d:c7:9e:3a:2b:11:7f:0a:f6:92:68:ec:6f:8c:71:9f:
5e:f0:11:7c:8b:8a:71:c2:6f:96:5d:00:c5:bc:9a:46:85:28:
8a:16:e7:d9:5e:93:fb:96:a0:cf:75:6f:c8:48:26:69:aa:bc:
a9:34:d6:4e:40:63:b5:a6:c8:31:50:e3:5e:4e:30:6d:47:02:
0c:b1:b1:df:71:e2:f7:85:3f:40:86:65:36:eb:eb:ee:ff:18:
8d:81:b5:ed:58:11:d3:02:b8:7d:90:31:2e:28:4b:5a:3c:c8:
48:04:b2:15:65:17:1e:60:48:b4:c0:de:4a:0b:5a:42:8b:3e:
26:34:cb:4e:59:ac:67:51:bc:a0:38:df:71:c0:d5:45:1c:02:
c6:68:b1:e9:51:d7:43:91:9f:92:38:9d:37:20:f0:73:fa:d6:
9a:08:24:3b:18:b1:fa:74:7a:4d:a6:37:5a:40:90:59:08:22:
2c:3c:62:15:f9:4e:b0:06:38:99:a0:ea:9e:a3:8b:34:91:7b:
7b:1d:b5:16:3b:cc:bf:77:85:4e:a6:86:66:4f:a7:54:97:63:
15:1b:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:39 2026 by rpki-client