
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: 6gYIebp/tsh88H8hZlbF9EETdWC/nktAMW9NrnxbZUY=
Subject key identifier: 97:F4:44:AB:2E:C2:73:FA:8A:71:DD:4D:3B:92:AD:01:26:70:DA:76
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 01F4
Signing time: Sun 01 Mar 2026 04:00:12 +0000
Manifest this update: Sun 01 Mar 2026 04:00:11 +0000
Manifest next update: Sun 08 Mar 2026 04:00:11 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: SMCEmBjGY4NaZE9jyG/m1wDF4jSPn12v/dd3xczfr9M=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Validity
Not Before: Mar 1 04:00:11 2026 GMT
Not After : Mar 8 04:00:11 2026 GMT
Subject: CN=69a3b9cc-cb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:31:bf:d5:f7:5b:43:49:f4:38:87:58:42:
24:1d:da:1a:eb:3c:7a:56:62:70:73:e8:92:71:d4:
ed:d2:cd:71:c2:e0:05:cb:32:f6:25:e0:57:2b:18:
4e:ea:8d:d1:76:d1:21:d7:fe:9e:e4:d9:09:08:70:
70:1b:df:c9:57:97:b8:8f:8f:e3:37:e0:7b:cd:c5:
98:2a:29:c0:bc:fb:cf:10:48:0e:0c:a9:e1:46:88:
8f:66:b2:11:2e:61:2a:3b:dd:ef:6e:8c:e2:c5:ed:
1a:8a:27:75:63:5a:bf:ca:29:52:5e:55:cf:24:7e:
f7:ef:6e:0b:0f:67:32:d9:78:2c:5e:b4:be:fb:b3:
55:c7:b5:b7:db:fd:aa:30:9d:e5:e0:25:72:92:07:
6f:11:60:c8:0a:83:79:dd:42:ea:83:90:27:88:20:
9d:ba:9d:7a:d7:dd:d8:7c:b7:ed:1d:a7:04:c0:27:
ba:0f:1b:6f:81:70:84:f2:5f:e7:34:af:e2:15:c6:
29:cd:92:bd:23:54:fe:6b:b5:98:0b:c0:44:fd:68:
f9:73:0b:35:18:d9:c1:68:6b:b2:ce:94:65:32:bc:
c1:e2:9c:0c:8a:b0:af:7e:7d:87:36:22:c8:49:29:
a1:af:2b:a1:44:8a:5c:2f:6c:5e:ad:50:36:7d:67:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F4:44:AB:2E:C2:73:FA:8A:71:DD:4D:3B:92:AD:01:26:70:DA:76
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:da:9e:4a:e4:ef:f6:be:30:f8:ec:31:8a:bb:b9:bf:34:c1:
0f:71:45:60:5f:6e:59:c1:46:41:2e:c7:18:cf:f8:3c:dd:af:
4d:47:ae:25:bb:d5:9b:e5:65:5e:0a:ac:4f:2d:6b:fb:54:09:
38:b6:a2:65:ab:e7:0b:6f:ab:68:74:ca:0f:06:14:0b:09:7b:
74:5a:d5:2e:85:c7:fc:4e:aa:6c:5b:14:1f:48:a4:35:1e:2a:
f3:29:a4:b5:78:e2:10:8d:2a:5b:44:f2:1c:25:11:fa:96:a9:
6b:a8:c8:98:f0:84:e8:3c:3a:2d:ed:7e:3a:b6:71:c6:73:94:
b8:47:23:0c:89:cb:94:9d:ba:9c:e5:4f:e9:d6:b9:3e:d6:06:
95:43:f8:75:fd:c7:ae:78:41:a3:21:eb:55:c7:96:37:87:43:
ad:da:42:9e:7b:0f:87:e5:9d:f2:39:9e:f1:71:24:c5:81:ff:
a9:aa:2e:93:93:53:36:88:53:b5:9c:0d:ad:b7:29:85:62:80:
cd:c5:0b:1b:3d:8f:f6:86:de:c8:9b:47:56:81:41:b3:f3:04:
eb:4a:e1:7c:e6:47:9b:85:4b:24:63:ec:f1:82:e8:a2:34:bd:
05:45:5e:b5:bf:92:fa:d3:c2:31:95:39:2f:6e:e6:94:e9:36:
e2:6b:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:45 2026 by rpki-client