
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier: Impj3bYnaWaDf1kBHhNpsKTsD2HRL8S97Tvptd+jVuU=
Subject key identifier: 3E:3C:C8:D2:A7:98:66:25:F7:97:DE:33:06:B9:7B:F6:0B:21:91:4D
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number: 0230
Signing time: Sun 01 Mar 2026 03:22:06 +0000
Manifest this update: Sun 01 Mar 2026 03:22:05 +0000
Manifest next update: Sun 08 Mar 2026 03:22:05 +0000
Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: AMX5ElaUolxLE3xoA8fCclxzXBIR16YAkCiNsySNPIs=)
2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: Mar 1 03:22:05 2026 GMT
Not After : Mar 8 03:22:05 2026 GMT
Subject: CN=69a3b0dd-8c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:5a:59:2a:4b:6c:82:c8:ba:f1:24:30:0c:
84:f6:1c:ff:ff:ed:f2:f0:20:0b:0a:de:ae:7d:6b:
30:21:e2:c5:ea:14:e7:4a:61:34:ac:8b:da:9d:88:
df:42:1c:d6:7d:f2:3e:ca:0e:92:ac:10:33:fb:16:
aa:6d:e1:37:75:e1:2e:c6:55:f0:f6:9c:8e:ae:8f:
fa:10:83:dc:74:9a:26:87:0a:b2:b7:8a:4f:01:71:
ee:c8:61:74:cd:6b:c2:18:02:67:10:5e:88:b9:1b:
d1:09:71:de:cf:24:31:b9:04:32:22:67:27:f7:0c:
e0:e3:72:a0:c6:b3:05:66:76:fa:20:b1:e3:b1:35:
0a:f7:ab:72:c2:75:ff:1d:16:32:e9:af:1c:99:17:
55:d2:71:b3:ef:cf:ed:31:8c:aa:17:74:85:d3:44:
f3:aa:8c:64:c0:69:cc:39:02:da:30:c5:ff:15:17:
8e:96:4f:2d:2f:b0:45:e4:43:85:43:bd:d9:5c:47:
e4:aa:9d:3e:2b:24:f4:22:a6:81:29:7a:fa:c8:ee:
89:63:d6:9e:94:2b:60:7d:17:84:b5:6b:6c:5f:48:
55:b4:57:bf:f8:c6:45:67:3e:4d:b1:3c:27:88:f7:
13:d8:d1:a9:4e:7d:6b:f4:16:c1:e8:a7:bf:35:e8:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3C:C8:D2:A7:98:66:25:F7:97:DE:33:06:B9:7B:F6:0B:21:91:4D
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:3b:1b:5f:d1:11:1d:df:2e:27:3b:59:9f:55:9d:d4:e8:82:
ef:bb:64:56:6d:4f:6c:29:85:42:83:af:c0:70:ce:eb:84:22:
32:78:82:ed:2c:ce:e2:59:dd:af:be:dc:64:a2:ec:c0:29:0c:
46:d6:94:96:34:b7:d4:f6:81:ec:1b:12:02:60:c1:2d:0b:20:
14:e2:3b:32:aa:4e:96:fc:66:b5:ca:69:62:50:3f:32:bb:40:
c8:3d:20:de:13:e1:88:e2:d8:9c:f1:fe:c5:79:e4:cc:b1:54:
06:7a:45:bf:3c:78:d9:b3:b4:ca:10:f1:58:89:89:64:f2:2a:
4d:c9:70:fb:8c:9b:a2:f7:0d:f9:4f:47:68:96:36:02:13:2c:
b5:20:dd:dc:cd:eb:36:9e:be:4c:6d:66:4b:29:b1:e1:83:bf:
c3:1a:d3:5f:da:e1:ee:4b:56:ba:c0:27:fc:04:dc:1d:1a:0e:
74:48:76:84:3c:58:a3:d2:b0:74:9e:86:d4:d2:a9:f2:92:6d:
b5:62:7a:6b:26:22:22:65:63:56:dc:fc:6f:9b:56:fe:db:a2:
d3:6a:92:78:02:18:f2:39:be:9c:41:26:a6:6b:45:57:6d:a5:
9e:cc:75:19:be:e4:af:41:37:4c:75:73:d7:91:79:c8:b1:48:
58:b1:99:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:01 2026 by rpki-client