
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json)
Hash identifier: MNjNFJr9RUbEPMRIpxOOmeEGkjVCAsW62XNa4j/WedU=
Subject key identifier: 45:A8:8B:C6:E1:84:1B:53:75:62:7D:02:6B:B9:D4:57:B1:60:2A:EF
Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Certificate serial: 0256
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
Manifest number: 024E
Signing time: Mon 02 Mar 2026 01:35:03 +0000
Manifest this update: Mon 02 Mar 2026 01:35:01 +0000
Manifest next update: Mon 09 Mar 2026 01:35:01 +0000
Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: e0+pkxMaZ7WECwPEu/8LPbhJyKPU1mZTn1PZ23kYNeU=)
2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: oaiaqucuuW2GkSf9+4cz6o/y7s/8O/quv+/nOFG+UjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 598 (0x256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E
Validity
Not Before: Mar 2 01:35:01 2026 GMT
Not After : Mar 9 01:35:01 2026 GMT
Subject: CN=69a4e947-9daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:c4:c5:e7:e4:41:73:9f:09:59:47:b9:00:
44:19:e8:9e:a3:59:d9:d9:fc:0f:1e:51:3b:5e:84:
68:04:c2:9a:99:15:75:10:55:c5:f7:65:9b:3b:7d:
35:02:51:2b:e8:ec:bc:bd:d4:ee:8f:90:bb:97:08:
cb:e4:7c:43:ab:59:b6:10:a0:50:6d:c8:da:73:34:
9c:96:18:f1:7e:a6:be:d9:96:ea:74:fb:17:7d:90:
43:d7:08:4c:61:dd:e4:df:64:55:4a:2b:84:ae:d8:
5f:ce:2a:2f:d7:70:c2:32:23:f8:f1:6b:bf:6d:fe:
59:31:d2:b1:6b:90:85:d6:70:ae:69:94:86:07:57:
4f:43:34:04:6f:a9:ab:25:d4:ca:91:17:9f:0b:ad:
bd:01:b5:a1:47:72:78:ad:b9:e3:d9:19:df:ab:6c:
ae:bb:ff:f1:1a:fd:90:1b:11:ba:6c:6c:c7:31:76:
5b:45:5f:c1:41:92:ab:6e:aa:c6:7d:ca:d8:74:8a:
a8:44:f4:6f:49:dc:6e:62:51:15:8a:4a:1c:d7:96:
4c:f2:e7:fd:4a:50:db:50:f2:cf:50:5b:ad:6a:89:
78:36:a8:6c:e5:72:58:30:84:fc:71:f4:55:70:1a:
0d:0c:8a:bd:0b:b2:84:8f:ce:08:da:0f:6d:0e:c7:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:8B:C6:E1:84:1B:53:75:62:7D:02:6B:B9:D4:57:B1:60:2A:EF
X509v3 Authority Key Identifier:
keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:5e:5f:1b:aa:22:72:b1:ae:10:f2:f4:49:db:a7:04:d3:
11:40:a6:45:f3:11:e2:b6:b6:e5:02:2a:a0:d3:14:a2:e1:f1:
de:48:af:b4:bc:8a:1a:9d:5d:90:cd:9e:db:4f:0f:83:f1:b3:
b2:66:fd:62:5c:d1:23:16:ee:c9:7b:66:c0:0e:51:db:e0:9b:
7a:5d:8c:88:93:f0:5e:e5:66:fe:10:56:e9:75:84:f3:5e:84:
9a:e7:ac:7f:e9:f7:f0:a7:31:ce:19:7d:ba:d3:23:45:9e:db:
84:59:18:2e:83:17:0a:0a:5a:05:f7:bf:6a:cc:6b:0e:45:ea:
2d:77:fa:bc:b9:f6:07:56:7e:5e:a7:01:90:ae:1d:2b:0b:7a:
0f:18:0d:5d:1a:a1:38:06:31:cc:f9:fd:09:1f:b6:23:87:11:
7d:1e:e5:57:0c:63:40:aa:44:97:b5:40:e2:56:e7:9d:34:5c:
59:c4:38:91:e2:db:cc:91:57:4d:6b:3d:88:2e:b6:16:8e:b0:
89:cf:83:4e:39:3a:41:a0:d0:43:5d:bb:a3:de:05:42:1e:7f:
f7:5e:3c:0e:59:2c:29:f8:98:dc:51:7e:c2:18:d1:12:9c:f7:
30:8f:08:3a:b9:86:84:42:b9:58:89:88:78:b0:e4:99:39:2d:
41:39:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:34 2026 by rpki-client