
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier: JdtSQhCeL8dlqL8Qn+HU0VJDYq3sN6QyIR1DMQdcmUo=
Subject key identifier: C7:57:44:74:14:07:9C:50:67:F5:E0:0A:22:2D:BE:9A:F4:FE:45:C1
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 0864
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number: 084C
Signing time: Sat 28 Feb 2026 21:14:43 +0000
Manifest this update: Sat 28 Feb 2026 21:14:42 +0000
Manifest next update: Sat 07 Mar 2026 21:14:42 +0000
Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: Tuc0eO4GHOxqm1rJqjh2kDC36TtaIjnYNDwSw3ZQUD8=)
2: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: zemkN5BROCdSUhbupRjiSnNtwcSlinI7FQCHVicj5PI=)
3: 0BE76940057F11F1BBFA6CD7ADEE528E.roa (hash: swFKPtpkhtjEgag65fdJhBx+iiMuK/S0xCjc6Vi2mfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148 (0x864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Validity
Not Before: Feb 28 21:14:42 2026 GMT
Not After : Mar 7 21:14:42 2026 GMT
Subject: CN=69a35ac2-275f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b1:f5:07:f6:21:f0:61:5a:5c:6f:bb:5d:00:
c1:b7:89:9e:82:b3:0b:37:8b:fb:f5:00:ae:a3:cb:
99:90:01:6f:ca:a3:81:e5:20:de:c1:51:ba:9b:52:
3e:86:1a:d1:5e:2e:ac:30:4f:26:a6:e4:08:d6:d5:
5c:9e:73:7a:5d:4c:c7:dc:e0:15:3e:c1:c6:b4:d6:
e2:b9:d6:18:7d:f1:68:b5:7d:2b:b6:1a:0c:f7:e9:
45:6c:5d:be:35:f0:23:27:3b:84:5a:ad:43:61:f2:
63:13:36:f2:8a:88:ba:b2:70:e0:21:14:9d:49:b8:
af:00:3c:2d:69:59:7a:78:c4:4f:73:14:a5:09:8e:
e1:d0:da:46:76:78:cb:fa:5a:a9:18:8b:9f:74:3c:
ad:05:32:29:bc:ab:ce:64:4b:5f:1b:d5:38:9a:95:
79:fe:2e:ee:3a:68:95:56:c9:8a:44:55:2f:0d:10:
44:b3:cd:f0:ce:a5:c0:39:c3:4e:c9:80:fc:24:08:
90:03:a8:b8:5e:69:f1:b7:be:ee:7d:bf:c6:e6:02:
91:d7:79:b2:7a:c8:66:fb:10:af:4e:2e:1f:0c:87:
d7:39:6d:7c:71:46:97:4b:51:f2:07:29:e8:a1:20:
9c:23:45:76:0f:20:b7:b0:49:ef:07:4d:29:1d:37:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:44:74:14:07:9C:50:67:F5:E0:0A:22:2D:BE:9A:F4:FE:45:C1
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:de:1d:35:8c:b6:20:a1:4b:be:f2:46:b1:fe:4a:fb:f0:c9:
21:b3:e8:ff:da:9f:4c:b9:ab:37:5f:c8:03:52:b9:8c:07:05:
7e:45:b6:9a:6d:d1:2f:c2:b6:06:bb:c8:d2:b1:a4:5c:b5:94:
a1:d1:78:3d:50:ec:46:46:28:b3:71:28:6b:0a:fe:a3:bc:63:
12:5f:c3:24:35:8f:8f:7e:df:4c:cb:a2:73:3e:3e:d7:7b:a6:
fd:a8:b1:38:52:31:b9:3c:f1:bb:5e:96:68:69:77:07:f3:16:
f3:7b:d5:84:93:be:36:d3:cf:80:8f:02:39:fc:73:22:ac:d5:
08:71:2f:98:c9:ed:bf:34:7f:f8:d0:ff:f2:a9:ee:50:a3:56:
fd:ea:7a:d5:55:b0:40:ac:cd:1d:5c:d4:f2:2e:37:8e:80:27:
97:64:47:82:7d:32:c6:88:0b:9f:16:fb:36:02:cc:4d:49:06:
46:b5:df:b6:31:6c:31:1a:6e:45:37:3d:4b:c2:14:39:0f:22:
ae:a8:e3:7f:a4:7e:8f:01:a5:a4:c4:de:ad:9c:ab:85:32:63:
60:35:da:a3:1a:3f:a7:3a:29:a3:0d:dc:8a:9d:77:6c:84:d4:
96:83:a7:69:7b:26:f6:53:fd:5a:46:69:7e:4f:37:b4:1c:71:
f9:08:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:17 2026 by rpki-client