
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json)
Hash identifier: pzUF6c2D+nYm21zfIn1fYp3AOj+tvX+2T3KYECXdiKM=
Subject key identifier: 08:39:29:F7:BD:66:4A:97:1D:02:EE:08:D3:E3:19:0D:BF:F5:C1:2D
Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
Manifest number: AD
Signing time: Wed 15 Apr 2026 06:44:19 +0000
Manifest this update: Wed 15 Apr 2026 06:44:18 +0000
Manifest next update: Wed 22 Apr 2026 06:44:18 +0000
Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: 2HDFFe/+x5oJyfXqx//vXfxctZd7fgH+FXuFHcPgwOY=)
2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: VbbAYRDB1MrB+OHsle6cq0lEvb0Mg7dou4jfOd/d1WA=)
3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: 9rHElgQGkin/9e3Db5VLV3ihFuBVV27/iuFOrelwuPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 06:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Validity
Not Before: Apr 15 06:44:18 2026 GMT
Not After : Apr 22 06:44:18 2026 GMT
Subject: CN=69df33c2-c8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:e1:ec:32:9f:47:15:06:f7:2a:59:34:cd:
3e:2e:6d:f6:bb:0c:55:85:d9:24:d5:47:81:2c:51:
98:c4:34:76:7d:54:1e:ba:53:54:4f:e6:a6:e4:36:
8c:84:0b:41:9d:00:7b:bc:95:a6:c0:51:ea:0b:31:
8b:2a:33:64:0a:d6:11:3d:7d:53:3b:76:6c:33:68:
01:69:96:fd:93:9d:5d:02:2a:31:42:57:c4:94:fd:
d6:93:3f:a6:67:f4:83:07:58:17:e2:c8:4b:83:81:
d8:ce:63:99:2c:74:43:93:b7:70:72:ac:a5:7b:8d:
cd:24:fc:0d:82:d1:08:ae:0d:2c:fe:c8:ee:50:ca:
6d:46:a9:94:bf:3f:47:7f:f1:78:08:13:51:95:b5:
47:ec:0c:20:3a:25:5a:fe:93:87:b0:78:90:10:31:
8d:96:1b:2b:ed:aa:96:1a:33:cc:b7:11:4d:b6:d2:
86:39:f8:47:de:e8:f7:93:6c:a3:93:03:ca:80:23:
d2:1c:24:6d:eb:61:36:1b:75:d2:ae:20:24:8c:d2:
dd:81:5f:db:fa:c1:02:0d:78:38:8f:13:08:82:23:
81:30:c6:0c:80:5e:ed:b1:92:21:74:03:fc:69:55:
36:c8:23:69:8e:e1:2e:1c:ee:1f:4e:bc:b9:eb:9c:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:39:29:F7:BD:66:4A:97:1D:02:EE:08:D3:E3:19:0D:BF:F5:C1:2D
X509v3 Authority Key Identifier:
keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:81:0b:45:05:a0:04:7b:40:44:93:17:25:03:52:10:9f:
a1:53:fb:0c:ae:fb:25:4f:88:04:ad:ab:ab:41:87:59:82:aa:
82:44:ce:ff:d5:ef:36:7e:55:4e:30:d5:d4:00:98:2d:3f:8c:
2a:a4:5e:cb:ba:7e:db:29:8b:3f:9c:d9:77:39:6f:36:03:55:
11:8b:a1:25:69:a4:46:98:93:46:f8:ec:23:92:bb:e1:38:b1:
ec:6a:3a:ba:53:83:e2:7a:ec:f0:4b:df:fb:e0:2f:53:a5:2a:
35:66:63:5b:f2:9b:60:e4:6e:e6:bc:dd:dd:c9:41:4c:cc:66:
a0:91:fc:92:84:aa:59:f5:cb:ed:5c:18:3b:ae:d6:17:cc:1b:
d5:43:cf:71:76:4c:61:e3:4f:52:eb:27:28:ab:2d:92:85:69:
c1:ac:93:c5:86:c4:48:1f:fc:3e:6f:d6:f9:91:65:f2:e5:f6:
8e:59:2d:11:b8:47:10:a3:81:42:05:39:2c:70:0a:a0:72:a7:
47:e8:61:a9:6b:5c:b9:9e:8d:c5:37:0a:da:cc:3a:84:f6:59:
54:71:59:24:40:25:3d:71:74:c2:47:13:7b:95:1d:b8:d5:bb:
ca:97:91:3a:d0:e0:9c:cb:4b:06:49:6c:f8:00:d7:e8:ce:40:
28:34:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:12:08 2026 by rpki-client