
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File: FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier: J/nKltZhX5EoFKUvjS8RGGj17VLRViNqZlZAcK9gVUg=
Subject key identifier: 33:79:8E:C9:D8:A8:1F:53:15:E2:0E:71:AE:D0:B7:6D:4C:2C:49:12
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial: 073E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number: 0729
Signing time: Sat 18 Apr 2026 21:44:50 +0000
Manifest this update: Sat 18 Apr 2026 21:44:49 +0000
Manifest next update: Sat 25 Apr 2026 21:44:49 +0000
Files and hashes: 1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: p+Axn6M6z63BQX512+DuWOH+WBIZFGhUAtStJ0yAqdg=)
2: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI=)
3: 2E248E2CAD8511F08469DF53C4F9AE02.roa (hash: WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 21:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Validity
Not Before: Apr 18 21:44:49 2026 GMT
Not After : Apr 25 21:44:49 2026 GMT
Subject: CN=69e3fb52-ec69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:56:6f:01:a9:6f:3d:4b:7f:a3:52:02:7e:
2e:08:e7:70:94:7c:53:e7:9f:04:4f:1b:25:5f:c0:
70:79:87:49:23:74:33:e5:40:bb:fd:09:45:23:32:
6b:91:d4:49:b6:3f:39:cd:b3:f8:f5:f7:c5:71:d9:
5b:c0:42:51:de:bc:9d:8e:c7:8c:9f:c8:95:dd:0b:
de:38:38:1d:c7:93:c6:d4:17:e7:3c:26:15:4f:e8:
7b:5a:05:74:f4:81:95:43:ba:70:d9:18:d9:41:c9:
3f:29:4a:3a:be:e5:57:9a:d5:40:c0:f4:ee:36:08:
89:61:67:f4:da:d4:7a:8a:f9:d0:70:9c:28:b6:41:
3b:20:48:0a:0d:d2:70:63:5f:5a:5c:b0:2e:fa:a9:
06:92:15:c2:7f:d6:23:6a:0a:13:cd:84:41:de:e0:
4f:28:b8:49:ca:f2:f0:99:c7:ca:d7:ff:ad:59:73:
29:61:d9:f9:f0:1f:6d:14:c5:b8:f5:eb:4d:1f:37:
e1:1a:f3:41:a2:f7:88:a9:66:c0:4a:5b:12:cf:6b:
c3:28:b3:c0:17:cb:63:bf:47:91:87:e8:a9:81:0d:
57:4d:79:f9:fe:1c:40:26:cf:cb:6d:2d:2c:08:7d:
fa:98:22:fe:b1:fd:50:c2:3d:70:d0:6b:87:c3:1a:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:79:8E:C9:D8:A8:1F:53:15:E2:0E:71:AE:D0:B7:6D:4C:2C:49:12
X509v3 Authority Key Identifier:
keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:18:7d:f6:85:99:71:89:39:e8:ff:1b:00:7d:57:66:47:75:
54:bc:66:a1:a8:d8:6a:1d:a1:dd:28:5f:cd:68:84:16:4e:cb:
d1:6c:68:6b:f0:dc:61:bb:de:00:1b:87:e2:48:53:a3:50:f2:
6e:ad:de:4f:0b:28:b6:20:7b:6d:ce:75:df:e5:38:ae:8b:f7:
a3:1d:e6:26:43:97:9b:c9:eb:d9:bb:5f:e2:44:a9:83:a4:fd:
a5:03:fc:f0:19:b4:6b:33:99:82:3f:e6:2d:cd:a6:46:9c:3d:
84:b6:a1:ac:3f:5a:6f:51:91:58:7c:b7:2b:1f:c1:18:ae:6d:
79:76:a6:dc:d5:18:0c:92:e5:f6:05:9f:d1:67:9d:0c:75:51:
f2:36:8d:ee:e7:ca:c1:02:db:22:f5:ee:c0:e9:03:58:b2:ae:
e3:ce:57:17:6a:07:72:ad:4a:32:2e:c7:6c:9a:ab:a6:b1:f8:
bd:d6:5f:54:8a:25:a6:95:f3:f0:b0:38:f5:46:70:4f:34:7e:
76:97:50:9b:6c:46:2b:7d:9e:6c:6d:3d:1a:93:d7:35:16:41:
ee:a9:7b:ab:bd:e3:ec:5b:ad:c0:53:b6:a8:6d:6d:03:00:5c:
13:19:72:28:13:62:d0:39:55:41:e4:eb:2a:30:86:d6:a1:f9:
26:a8:85:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5
NTYwRjJCQ0EwHhcNMjYwNDE4MjE0NDQ5WhcNMjYwNDI1MjE0NDQ5WjAYMRYwFAYD
VQQDEw02OWUzZmI1Mi1lYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0F5WbwGpbz1Lf6NSAn4uCOdwlHxT558ETxslX8BweYdJI3Qz5UC7/QlFIzJr
kdRJtj85zbP49ffFcdlbwEJR3rydjseMn8iV3QveODgdx5PG1BfnPCYVT+h7WgV0
9IGVQ7pw2RjZQck/KUo6vuVXmtVAwPTuNgiJYWf02tR6ivnQcJwotkE7IEgKDdJw
Y19aXLAu+qkGkhXCf9YjagoTzYRB3uBPKLhJyvLwmcfK1/+tWXMpYdn58B9tFMW4
9etNHzfhGvNBoveIqWbASlsSz2vDKLPAF8tjv0eRh+ipgQ1XTXn5/hxAJs/LbS0s
CH36mCL+sf1Qwj1w0GuHwxrI/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDN5jsnY
qB9TFeIOca7Qt21MLEkSMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB
ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2
NkFNRUFnREpxcWlWWVBLOG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlRh99oWZcYk56P8bAH1XZkd1VLxmoajYah2h3ShfzWiEFk7L0Wxoa/DcYbve
ABuH4khTo1Dybq3eTwsotiB7bc513+U4rov3ox3mJkOXm8nr2btf4kSpg6T9pQP8
8Bm0azOZgj/mLc2mRpw9hLahrD9ab1GRWHy3Kx/BGK5teXam3NUYDJLl9gWf0Wed
DHVR8jaN7ufKwQLbIvXuwOkDWLKu485XF2oHcq1KMi7HbJqrprH4vdZfVIolppXz
8LA49UZwTzR+dpdQm2xGK32ebG09GpPXNRZB7ql7q73j7FutwFO2qG1tAwBcExly
KBNi0DlVQeTrKjCG1qH5JqiFLQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:53 2026 by rpki-client