
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier: RG4/TYFRZtQjnmrFOUzlss+da9sO1zz0r88MtYWIq88=
Subject key identifier: 3F:29:33:78:14:CD:A6:83:96:A8:9A:6B:5F:42:A7:46:0D:8B:D1:3A
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial: 10EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number: 10DD
Signing time: Thu 16 Apr 2026 17:14:47 +0000
Manifest this update: Thu 16 Apr 2026 17:14:46 +0000
Manifest next update: Thu 23 Apr 2026 17:14:46 +0000
Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: Jbxjpgd9/dGN8uKoslEPeVQXYFDhbmFMe5M2XfReMQQ=)
2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: I3JDh6StMg4zJOMs9mkcVFkIKkoCAlh87CB+OtMgiuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:14:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4334 (0x10ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Validity
Not Before: Apr 16 17:14:46 2026 GMT
Not After : Apr 23 17:14:46 2026 GMT
Subject: CN=69e11907-32ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:ad:ce:79:a2:5d:0f:8e:d7:8a:1c:dc:4c:
f4:bf:0e:c0:a1:7e:c9:12:d4:55:50:a5:e9:a4:55:
d7:41:20:cb:60:2f:16:f3:db:dc:94:0a:d6:46:c7:
e4:69:ac:cc:98:a0:47:bb:c6:f1:4c:1a:03:38:a4:
98:20:45:6f:f8:dd:e2:9f:51:fc:3b:ea:aa:7a:a9:
71:01:7f:56:5e:18:94:9d:85:12:a6:59:98:5e:f5:
37:06:3b:db:61:bd:5d:0b:c6:10:f4:f2:4b:28:46:
d7:33:13:e8:b6:43:70:35:c2:65:db:2f:4d:3c:91:
3d:6e:48:bd:04:c3:c9:19:fa:8a:1c:05:3f:6c:23:
8d:e4:6a:ef:54:b7:4a:b6:6d:2c:c6:2c:18:40:cd:
72:65:21:59:3f:bb:17:cf:01:6a:cc:9d:18:a2:a6:
e7:9f:14:dc:e4:19:e4:93:11:a8:76:52:23:73:38:
87:3b:52:71:c2:3f:33:fe:d5:be:6b:a8:ac:58:c6:
8d:3c:49:30:87:f8:c8:fb:bd:67:3a:0a:52:89:54:
d9:92:50:77:01:93:2d:87:62:c0:0a:9f:6c:82:50:
0e:2c:42:a8:63:2f:98:e5:2c:98:e9:c9:9a:cb:bb:
16:e4:a8:6f:db:cc:ae:ed:29:97:cd:74:ed:05:26:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:29:33:78:14:CD:A6:83:96:A8:9A:6B:5F:42:A7:46:0D:8B:D1:3A
X509v3 Authority Key Identifier:
keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:52:1f:25:0f:50:49:55:0d:3a:6f:28:59:24:39:17:5e:48:
db:e8:d9:c4:df:9c:5f:4f:56:72:bc:9f:d0:c5:f2:bb:b6:e0:
4e:61:ca:12:1a:b6:b8:80:df:fe:e4:89:8f:f2:13:9a:8d:38:
e7:84:e8:5b:fa:17:bb:83:ef:b5:50:fa:f6:5e:3e:4e:30:48:
95:d7:95:05:4c:4b:c9:17:c7:64:5a:da:a0:f4:b7:62:84:17:
79:93:88:ff:ec:97:77:f1:06:c8:0e:cb:8b:46:e9:65:28:c1:
3e:9a:4d:3b:ee:4c:61:38:09:bc:d3:c3:3e:2c:ef:ed:22:e8:
84:aa:93:05:92:4e:12:6c:3e:8b:04:c8:19:e2:a5:5a:84:dc:
57:1d:1b:11:24:ec:da:5c:bf:f7:5a:c7:7c:6a:db:38:3c:e5:
25:a4:c2:ff:ea:13:97:fc:89:48:fa:7c:c0:dd:dd:80:97:2f:
4f:6a:04:75:ac:64:fa:da:4f:b0:63:9f:f3:91:83:29:48:4c:
06:b2:50:d3:4a:8c:a3:a6:61:f4:e3:3e:1f:9c:09:a4:2a:7a:
a2:0a:ab:eb:44:4f:6d:c3:c0:d5:c3:9b:7d:e4:29:76:2c:fb:
f3:08:ac:80:6d:48:f4:d5:ba:6b:4b:a0:6e:5e:c8:83:13:1d:
9d:db:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:33 2026 by rpki-client