
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json)
Hash identifier: 2s41Ss8MTo3OZCUkdoNJUdsoNA322dtmu8izTzqYprM=
Subject key identifier: 04:8C:31:37:D6:BE:83:06:C1:93:25:07:D7:66:B6:B8:68:EC:BB:47
Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
Manifest number: 0298
Signing time: Sun 01 Mar 2026 02:22:48 +0000
Manifest this update: Sun 01 Mar 2026 02:22:48 +0000
Manifest next update: Sun 08 Mar 2026 02:22:48 +0000
Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: Bg9LrxIeBszra3BTVVKdbOkOLUF4THWWzvT6rHRCDVM=)
2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719
Validity
Not Before: Mar 1 02:22:48 2026 GMT
Not After : Mar 8 02:22:48 2026 GMT
Subject: CN=69a3a2f8-a2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:0c:38:30:7f:d6:b5:7b:3d:6b:8f:2f:d3:
b6:5b:39:25:24:4f:60:1d:cd:f4:99:9c:eb:30:11:
29:1c:b7:c3:72:ff:26:77:ab:d4:08:6f:a6:a3:f2:
c2:c7:00:54:1d:46:5e:52:4a:64:e7:c9:25:ec:2f:
67:16:f1:7d:45:08:3b:b3:96:42:87:22:58:37:da:
96:1d:27:67:3c:ac:41:59:f2:c6:c3:1d:5b:14:81:
d6:a7:2f:59:71:1a:d8:e3:e5:d0:e8:d6:e6:0f:6a:
29:1b:0f:ee:a9:f8:5e:e3:44:50:df:9f:ac:8e:b1:
ad:b0:2b:74:6b:20:f5:f9:6f:8f:38:29:79:85:d1:
70:e5:77:00:0a:82:f9:f9:59:9e:85:73:7c:a7:c4:
5e:dd:ff:43:f7:7a:a3:74:61:1b:f9:fb:be:01:86:
0f:e1:9c:cd:7e:9d:5d:a2:02:ff:ce:1f:c0:5b:84:
9f:ec:9d:fc:37:d1:b6:ea:ea:e7:95:ee:b0:a1:b4:
0a:e1:de:fb:f7:8c:db:af:43:dd:9d:26:12:40:63:
6c:9b:e2:0b:9d:d1:35:a2:2f:cc:6a:7a:f3:b2:c4:
78:d8:f3:a7:c0:94:09:2e:94:f1:e7:a5:8c:01:94:
8c:1d:05:e3:3e:f8:72:f8:4d:92:64:81:a8:56:8d:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:31:37:D6:BE:83:06:C1:93:25:07:D7:66:B6:B8:68:EC:BB:47
X509v3 Authority Key Identifier:
keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:38:1f:2b:1a:e1:7e:b7:1c:74:13:8f:da:cb:49:55:ae:7f:
18:77:3c:f3:04:1f:82:f2:98:a4:27:74:e7:06:98:c7:4a:bb:
05:07:76:bd:d3:da:ec:da:ca:80:58:50:14:30:2c:3b:cd:7d:
93:54:a1:ad:bf:bf:b5:49:4b:8e:b7:a9:c6:95:5e:3d:95:af:
e0:4d:5f:eb:e4:f8:d6:81:29:6c:72:ed:13:48:76:cd:8d:35:
7c:59:8f:8a:43:f9:71:fe:2e:dc:0e:a6:ee:9c:3e:b2:a7:d0:
02:d6:0c:e0:32:09:79:04:a8:cd:e8:f4:af:a6:79:11:14:ba:
aa:1e:e2:39:41:ed:30:46:ea:c4:bf:e7:37:ac:28:3f:99:1f:
e2:97:2d:e3:c1:bc:81:f0:22:13:01:16:43:cb:76:76:a8:99:
c6:99:3d:f6:30:99:04:f0:db:86:89:73:df:6e:26:4f:35:5d:
98:50:65:f7:34:ef:59:da:6e:5c:19:9e:35:c5:a9:0e:11:4e:
f0:b8:ad:88:8d:c3:c9:c6:41:e9:fe:14:5a:7a:de:6a:ae:dd:
c0:f1:94:fe:b9:54:75:2e:f6:bc:50:24:a1:f4:c4:27:57:df:
f6:2f:a3:2a:5c:4c:60:ff:94:56:c6:fd:0a:db:40:5a:72:65:
ed:00:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:29:33 2026 by rpki-client