
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
File: FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft (raw, json)
Hash identifier: 6WHA5DCeb1Z3HflWjhSf/7qB5QZ//Isy2ZinoF8213g=
Subject key identifier: 9C:99:46:93:E5:FC:EE:C8:45:2A:91:F1:77:34:30:EF:22:E0:94:E0
Authority key identifier: 14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
Certificate issuer: /CN=A91E4B86/serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
Manifest number: BE
Signing time: Mon 02 Mar 2026 00:36:20 +0000
Manifest this update: Mon 02 Mar 2026 00:36:19 +0000
Manifest next update: Mon 09 Mar 2026 00:36:19 +0000
Files and hashes: 1: FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl (hash: 6da9FlUiOjUZ8pNciFvpQ+Yl487V60HvLpOJrbi/yZo=)
2: E2D9B7A6B32611F0BE8DF029C4F9AE02.roa (hash: E3Ke3Xy/6Z8DXkSqpxZkye2OZYgZjF6Qzh75z3050z8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=14D5AD2722ACA86AD34F0F9A344726CB66980831
Validity
Not Before: Mar 2 00:36:19 2026 GMT
Not After : Mar 9 00:36:19 2026 GMT
Subject: CN=69a4db84-9876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:e0:78:69:72:24:07:a1:11:76:ee:0c:7c:
65:f9:3f:6c:e4:7d:ca:3f:f0:e2:f7:7e:28:23:f6:
6f:bc:0b:ec:f6:be:a7:c2:10:54:c9:d9:77:94:c2:
a4:55:b1:c5:11:10:d6:27:fa:9b:34:8f:c9:39:b6:
70:f3:4c:51:66:ae:70:69:a8:20:e3:1f:09:56:45:
da:28:c9:a3:18:fc:d3:a1:9a:3e:45:8e:45:36:a9:
15:62:d1:a5:0c:8f:b1:f0:9e:7f:87:5a:0d:68:11:
ac:85:a1:ae:e4:28:cd:c4:5f:7c:f2:a1:78:80:e7:
9a:e8:14:4b:ed:11:df:6d:4c:24:c8:5e:1e:fd:76:
3d:85:a6:21:ce:95:1a:67:f2:c9:2d:79:54:d5:8c:
6d:81:06:e3:e6:d0:85:92:a4:cd:af:73:b2:7f:2f:
bd:a9:8c:ba:b1:9f:63:00:4c:36:d7:fa:6c:8c:1a:
53:78:3a:aa:f2:93:19:74:df:b3:f5:1a:e9:30:81:
7f:9d:22:80:0b:1a:83:41:4d:e6:8b:39:13:81:a7:
79:a0:af:75:23:c0:38:54:d5:08:98:13:44:92:51:
c5:04:ee:64:f6:e1:b7:44:24:88:7a:e6:b4:72:39:
27:f2:7d:43:82:a9:8d:c6:f5:8a:64:17:d4:5a:5e:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:99:46:93:E5:FC:EE:C8:45:2A:91:F1:77:34:30:EF:22:E0:94:E0
X509v3 Authority Key Identifier:
keyid:14:D5:AD:27:22:AC:A8:6A:D3:4F:0F:9A:34:47:26:CB:66:98:08:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FNWtJyKsqGrTTw-aNEcmy2aYCDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/9306A2C4F7E311EF8ADA8A41C4F9AE02/FNWtJyKsqGrTTw-aNEcmy2aYCDE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:49:e1:51:e2:df:c9:d1:74:5c:c5:d8:b3:7d:04:b7:93:
71:3b:df:78:96:01:f9:56:b6:34:96:ed:e4:2e:8d:5b:00:bf:
3a:fa:18:8f:0d:f4:a0:8a:79:ab:0e:48:54:f3:5a:03:dc:d7:
79:c5:d6:dc:0a:fd:60:94:7e:da:ba:94:38:77:58:26:96:0a:
07:af:91:c7:27:e7:d4:52:a2:f5:4d:c1:24:39:b7:a1:eb:d9:
4c:ab:9b:53:23:50:f4:60:f6:db:19:2d:50:31:c1:88:f4:31:
9a:4b:e2:53:aa:22:85:a1:22:94:7a:05:57:0a:3f:40:47:1d:
56:f6:16:32:75:c7:a7:85:09:07:28:dc:c2:21:b4:15:d5:14:
e8:f6:5c:9e:86:36:10:85:79:1d:1e:80:24:dc:9b:9a:15:38:
64:83:98:e2:de:57:18:5a:5e:ff:1d:3e:ba:39:1e:47:c3:c8:
90:d4:60:df:50:ed:d5:e4:f4:ee:f7:4c:98:7c:a3:c3:3c:6b:
a3:59:57:90:00:79:0c:ac:6c:5a:bd:bd:e0:b8:67:75:63:77:
d2:58:ba:75:20:c4:b9:6e:92:4f:70:e8:4f:b8:d6:50:27:c7:
96:7d:92:c3:87:d5:8c:63:17:08:3f:62:17:d7:2c:7f:e9:a5:
d7:66:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:33:52 2026 by rpki-client