
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json)
Hash identifier: PGw1j+aSlhz1IwiLqC8qLTfmnUGwU+ffB8WEU+0ZR10=
Subject key identifier: CC:2E:DC:98:78:B2:4C:51:6E:BB:31:AB:67:C3:35:8F:EF:FE:B4:70
Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Certificate serial: 06FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
Manifest number: 06F9
Signing time: Sat 28 Feb 2026 22:28:46 +0000
Manifest this update: Sat 28 Feb 2026 22:28:45 +0000
Manifest next update: Sat 07 Mar 2026 22:28:45 +0000
Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: mX/EcriALprBTgK+aU4MH7H8ZrSDQG36ZyYHGW5aghY=)
2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Validity
Not Before: Feb 28 22:28:45 2026 GMT
Not After : Mar 7 22:28:45 2026 GMT
Subject: CN=69a36c1e-6bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:2e:98:17:3e:0e:f0:ae:89:56:d5:cf:76:
d9:ff:a1:4b:9e:bd:44:80:e4:1c:ba:df:d4:85:2b:
9e:6c:02:d9:70:8a:02:99:4e:6a:83:d6:14:a6:25:
72:1b:15:23:28:94:76:f4:c9:58:c8:d6:58:a4:19:
ff:f2:0f:17:db:f5:01:c4:32:c7:ba:a3:ae:8a:fd:
1c:18:a0:0d:51:8c:4c:0f:b3:f0:67:26:7c:a8:81:
ed:53:0e:ce:3c:85:52:e3:c4:8a:aa:a3:80:d9:5d:
94:82:37:f2:c6:82:8a:18:56:6b:03:ff:de:72:b5:
cb:a8:e9:4e:9c:e3:4a:21:ef:bb:2d:07:97:4c:32:
d2:06:87:0c:42:8f:bd:ce:0f:36:7e:4c:b9:75:81:
b0:d5:27:32:9d:ba:0c:0f:8f:ef:f4:7b:b8:8b:65:
db:eb:dc:cd:54:0f:50:56:35:7f:06:fb:46:65:ac:
ba:2d:5a:63:80:8c:e7:c8:73:c0:56:01:f1:6e:55:
61:b3:f4:8f:e6:7e:be:09:82:73:33:01:3b:a9:18:
06:0f:89:1b:73:20:77:5e:81:87:e0:94:10:a0:df:
ad:62:12:42:7f:62:49:ac:09:4e:3d:96:60:6f:5d:
07:b5:15:10:38:bc:4d:a6:27:4a:3a:2b:f0:c2:a9:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:DC:98:78:B2:4C:51:6E:BB:31:AB:67:C3:35:8F:EF:FE:B4:70
X509v3 Authority Key Identifier:
keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cb:8f:66:90:86:d6:1e:5c:94:05:c9:3a:74:32:08:6d:d4:
d8:65:44:8e:09:b4:3a:6f:3b:78:b8:96:ee:47:e8:90:d1:91:
ea:24:b6:db:77:6e:88:7f:cc:74:c4:51:a1:0f:85:d9:fe:c4:
23:4d:13:f7:0f:e7:5e:2a:ea:67:85:d9:e8:c0:d6:8c:47:62:
44:9f:31:42:0a:85:7d:c0:12:ae:4a:fe:34:03:71:a0:8d:43:
94:50:d5:8e:fe:9f:36:a7:36:36:a3:eb:e0:51:5b:5b:be:ad:
a4:62:aa:d6:18:48:1f:86:f7:58:15:0c:8c:35:a9:ec:ac:6a:
d1:51:6c:9b:3c:44:60:f1:c6:3e:d5:54:ba:1b:4a:4c:22:c8:
fb:3e:40:81:53:78:2d:24:9c:d3:a6:49:91:98:0f:71:84:d1:
3e:42:14:fd:d3:b0:19:d2:16:59:02:b6:c3:3e:ad:df:b7:e9:
9a:0c:79:ae:21:8e:d5:4b:3f:32:d8:7c:ed:f5:ae:97:5f:e9:
ef:4e:71:9c:d4:87:1a:02:b2:49:a9:7c:a2:25:94:4a:7f:4c:
71:1c:91:02:5b:81:7a:d8:b8:fe:21:5e:50:ba:5d:06:af:d5:
60:99:9b:fa:c4:fa:c4:15:63:e1:98:cc:2c:7f:36:6e:ae:39:
be:b7:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:42 2026 by rpki-client