
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier: fhSbkb/vmYQCKtnOyGuGl4YqhDRLV6/SnTQeBSqd+mM=
Subject key identifier: 6B:EB:2F:AB:B7:8D:14:98:41:45:93:CB:B9:66:C8:05:EF:D0:F9:9C
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial: 0987
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number: 097E
Signing time: Thu 16 Apr 2026 19:57:21 +0000
Manifest this update: Thu 16 Apr 2026 19:57:20 +0000
Manifest next update: Thu 23 Apr 2026 19:57:20 +0000
Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: Nkaoz2bN9l2hsqU0zNyOrMb+FWSUvMvmPs+bmNKvVhw=)
2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: nEw1J5nI/jYM2/PDdrlSv5FQkDbuSGPVtzOk8gJbumo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:57:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2439 (0x987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Validity
Not Before: Apr 16 19:57:20 2026 GMT
Not After : Apr 23 19:57:20 2026 GMT
Subject: CN=69e13f20-066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:ae:c3:e4:43:ba:ae:80:59:58:1f:be:6f:
7b:8d:bf:06:4a:75:a4:ac:bf:30:3f:3a:dc:14:05:
04:9f:ff:67:74:97:54:9c:5f:6a:04:22:f4:bb:af:
77:2a:36:39:7e:0a:df:b3:dd:15:da:b7:18:53:f7:
27:ce:6a:80:f6:c9:cf:f0:72:42:82:a1:6d:12:ff:
aa:13:7d:a7:68:fb:63:0e:ae:01:77:c7:54:0c:f1:
93:c0:3e:f9:df:02:0c:6b:30:bd:52:9a:4a:6e:09:
7f:dc:cd:e6:53:f0:e6:8a:09:e1:f9:94:b3:48:ca:
24:3d:49:bf:10:91:13:53:e1:6c:16:69:8e:8c:32:
df:23:bd:0e:93:ae:a7:3c:3b:05:96:79:2d:c3:87:
8c:28:68:e4:3c:bc:36:db:80:16:d5:1a:08:f7:6d:
6b:da:f8:14:2a:68:88:ef:ca:c3:42:8e:1b:e7:b5:
80:3d:a1:e3:cc:19:74:5f:7a:4e:5d:3c:97:7f:94:
f9:7b:b6:ec:fa:68:da:f5:ef:72:33:a9:b8:b2:74:
78:c4:c7:43:5e:96:5f:16:98:26:08:3a:16:53:7b:
f9:0c:4a:06:e9:f3:70:ce:a4:4a:24:d0:50:03:46:
c4:19:11:5c:97:54:7d:6f:cb:68:05:16:57:57:d7:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EB:2F:AB:B7:8D:14:98:41:45:93:CB:B9:66:C8:05:EF:D0:F9:9C
X509v3 Authority Key Identifier:
keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d0:7b:c0:2b:38:fa:9a:a8:72:f5:ce:d6:99:df:33:aa:84:
76:5e:43:55:48:01:58:c0:46:94:0a:fa:a2:74:b8:7e:a1:bb:
55:35:0e:67:d3:c0:79:bc:be:00:f1:cb:c9:fb:a1:bb:6f:b2:
09:16:b1:b7:71:b1:14:26:62:43:b9:68:de:ea:d4:f7:f1:9d:
bb:52:f3:a6:ea:e2:ec:64:cc:60:30:c1:54:9e:ed:ba:43:d6:
75:7d:9e:ef:81:06:97:69:ff:a6:c0:11:29:f7:3e:7b:90:a4:
a8:17:a4:08:8e:18:cf:c2:15:03:37:9e:f1:8e:4b:8a:63:8e:
0e:06:cb:ad:01:4b:6a:5a:55:68:a8:6e:22:51:4a:06:b2:6b:
b4:96:ea:d5:0c:94:72:e1:b5:7c:44:c9:70:72:2f:39:89:a6:
96:7b:e5:13:46:ee:51:53:5b:0a:31:24:cc:65:4d:82:bc:60:
c6:83:d8:7b:10:f0:2a:e7:d9:75:9f:6c:51:6f:a7:c8:97:fe:
7e:61:ed:45:65:ad:ba:26:39:f2:58:e0:2b:2e:7e:04:5c:f3:
68:91:a6:78:3f:fc:29:6e:c2:29:77:dd:32:c4:cd:6b:f2:09:
3e:11:e0:88:98:09:3c:fc:b1:05:3c:2f:84:ea:c4:c8:d7:c0:
75:54:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:54 2026 by rpki-client