
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier: DLoE2pqLAdnvyhS1xSpoiD1fA63astGhvVu8iqrOocQ=
Subject key identifier: B4:02:8E:07:2E:43:89:12:36:AD:C1:5E:1A:36:80:81:ED:35:F9:76
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial: 0D22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number: 0CE7
Signing time: Sat 28 Feb 2026 18:39:00 +0000
Manifest this update: Sat 28 Feb 2026 18:39:00 +0000
Manifest next update: Sat 07 Mar 2026 18:39:00 +0000
Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: OhiyXqQcv8MSEmAnZXuuiFALXxTe/ZnfKlcan00WIyQ=)
2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: vDMfuQYozF7YcCf9FFav+i3u9CUe2LSHwmkfyAVsRa8=)
3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: 0JJtJD1KoKcXIYAcuuNuBZ5Jza8Pu7LMWZE9Tfp1Apg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 18:38:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Validity
Not Before: Feb 28 18:39:00 2026 GMT
Not After : Mar 7 18:39:00 2026 GMT
Subject: CN=69a33644-8b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:58:7d:5d:64:38:27:c9:21:f1:06:f8:4d:
e4:f3:46:ba:d0:9c:97:82:84:aa:e3:16:cb:6d:4b:
1a:41:6c:7d:7d:86:36:19:80:88:d3:86:9f:77:35:
d8:08:d0:a6:fd:ad:68:2a:50:07:71:6c:e4:85:c7:
c2:7d:50:95:0e:77:63:c0:76:cc:90:f6:70:1c:97:
c5:dd:0a:78:2f:45:c4:87:54:24:cd:11:ec:54:dd:
6c:8b:50:39:a6:0d:1f:a5:52:2a:47:4c:b2:de:57:
40:ca:e1:43:45:c2:23:f7:6a:34:5f:8f:7b:cb:5c:
22:55:b9:1a:dc:49:99:65:ad:55:92:98:4c:eb:94:
e5:07:ee:f0:36:e9:d5:83:5c:e9:b8:76:11:77:4c:
de:b0:3e:94:5b:0f:d1:e5:a2:e3:e4:5a:9b:8a:55:
eb:36:47:9b:fc:9c:4c:1c:c8:b7:e0:bc:f4:0b:db:
b2:5f:8f:ba:b8:02:fb:c8:0f:4e:95:30:06:49:4a:
a6:30:27:be:63:cc:e0:15:4e:95:0a:46:25:f7:ef:
bf:51:0d:14:c3:06:f0:8e:1f:ce:c3:8e:04:9f:0e:
a3:6c:3a:12:59:fe:3a:a4:ca:2f:40:75:fa:ba:22:
4b:0f:79:13:dc:3a:7e:4e:68:0a:07:a2:ae:86:57:
aa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:02:8E:07:2E:43:89:12:36:AD:C1:5E:1A:36:80:81:ED:35:F9:76
X509v3 Authority Key Identifier:
keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f3:4d:df:d2:b2:04:c5:ef:8b:f9:4d:5a:02:04:71:43:7a:
7e:1c:36:22:c4:8a:be:5b:ea:39:6c:25:5d:53:b6:4a:fe:74:
25:3c:75:f8:52:0b:8b:91:a8:ac:d6:f8:e8:50:1c:2b:95:ef:
e2:5d:26:3d:39:a8:db:c5:46:b3:f2:30:65:c6:45:3f:28:ff:
46:1f:74:4d:8a:37:27:b1:51:fb:99:94:56:8f:dc:de:c2:b8:
60:5f:da:00:47:ce:0c:bd:a5:de:61:22:5f:b7:20:0d:cf:a6:
51:60:cf:25:87:44:d0:f3:0d:86:25:cf:e5:42:90:26:4f:56:
a5:b2:1b:be:7b:cd:f8:50:6b:da:5a:e2:52:8f:c8:b0:06:4d:
77:b4:57:b8:e7:8f:07:d4:73:5f:47:2c:c6:99:6b:69:4c:8b:
32:8a:fc:8c:36:5c:5a:ea:aa:8b:9d:cf:0b:83:34:16:7f:1c:
f4:47:5b:64:5a:5c:b3:91:0e:b6:e5:1b:5e:37:cc:99:6d:21:
17:4c:5f:12:71:bf:04:a0:95:cd:e3:7b:18:12:fc:21:ad:73:
36:4e:57:b9:85:71:7c:5c:39:68:9a:07:b3:a0:df:c2:c0:9f:
02:eb:2d:f7:cb:57:38:20:34:bf:5d:ce:63:c7:3b:83:d8:83:
c3:20:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:42 2026 by rpki-client