
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
File: FdYNYNak9QCRCZpy4NBe7z6vduk.mft (raw, json)
Hash identifier: uswpKS5yB7Qv/iqHuuVUtR7lIejipq/SBAkVpvGptBg=
Subject key identifier: 6E:A0:EB:83:CA:4E:C3:43:C7:7E:E0:F0:DD:A8:D7:5D:AC:1D:47:39
Authority key identifier: 15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9
Certificate issuer: /CN=A91F61DD/serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
Certificate serial: 0564
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
Manifest number: 0559
Signing time: Thu 16 Apr 2026 23:19:02 +0000
Manifest this update: Thu 16 Apr 2026 23:19:01 +0000
Manifest next update: Thu 23 Apr 2026 23:19:01 +0000
Files and hashes: 1: FdYNYNak9QCRCZpy4NBe7z6vduk.crl (hash: ICRm0n5UjefvqEV+q35XQyEth+qrWMnxdjpEKI9r90U=)
2: BFEEB5E4309D11ECABBBBF25C4F9AE02.roa (hash: uwBd+LUs0WLRGeth+RhrSQgjQ8eS60NPtQG9hRifa0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl
rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1380 (0x564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F61DD, serialNumber=15D60D60D6A4F50091099A72E0D05EEF3EAF76E9
Validity
Not Before: Apr 16 23:19:01 2026 GMT
Not After : Apr 23 23:19:01 2026 GMT
Subject: CN=69e16e66-b2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:c8:16:15:21:3f:30:1c:ed:96:d9:b8:0a:
e8:64:49:9e:3a:ae:f2:29:21:ed:06:6e:3d:1b:8d:
6c:36:4c:6d:e7:29:a8:91:ed:8c:fb:18:a9:65:dd:
cd:c0:56:b3:25:ea:9d:a1:63:6e:02:70:c5:8c:84:
d3:cd:4c:e4:09:29:1c:ae:10:2d:4a:dc:e4:b4:db:
19:83:8a:96:26:b8:80:53:4d:b4:6e:f7:ca:31:a6:
9f:aa:2f:11:4b:13:1e:c3:8b:53:28:9f:44:fe:a5:
3a:c2:68:ca:31:2e:78:ca:17:00:ef:fd:60:19:a5:
8b:61:b2:59:13:84:c6:69:fa:5a:6d:6d:01:88:56:
56:24:1b:43:6b:22:4f:f6:a9:52:c8:e8:d1:16:ed:
42:e4:5c:c2:6e:a5:31:08:9d:de:81:85:48:7e:e5:
f8:71:67:6b:86:cc:a1:20:10:60:4e:98:42:06:27:
40:cb:22:eb:3c:ea:d6:11:18:a2:99:03:02:07:3b:
8f:35:c7:62:69:c5:05:73:16:9d:8e:d0:f6:da:94:
ee:28:4b:23:60:b3:b3:8a:da:89:bb:9f:b1:14:3a:
1b:2f:76:33:43:ee:74:04:12:13:17:47:3d:48:eb:
58:4d:a3:98:1a:c8:0a:90:3d:a7:64:11:20:fa:9f:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A0:EB:83:CA:4E:C3:43:C7:7E:E0:F0:DD:A8:D7:5D:AC:1D:47:39
X509v3 Authority Key Identifier:
keyid:15:D6:0D:60:D6:A4:F5:00:91:09:9A:72:E0:D0:5E:EF:3E:AF:76:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FdYNYNak9QCRCZpy4NBe7z6vduk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F61DD/7C78E2BC309311ECAB68433FC4F9AE02/FdYNYNak9QCRCZpy4NBe7z6vduk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:35:d0:43:a5:e0:fc:2c:bd:99:9c:2b:f6:dd:71:17:72:
b3:69:91:51:24:70:35:21:96:e0:97:03:61:d7:6f:94:f0:ab:
c9:8e:36:7f:29:0b:c0:52:14:f9:dd:ff:14:dc:39:15:5b:e5:
fd:8f:65:f5:a1:d6:52:a1:f6:07:da:d6:f3:fe:f4:66:9c:df:
2f:57:5f:6a:af:ea:a5:46:26:f4:fc:8d:f4:e4:f5:e8:8d:14:
bc:c4:11:78:91:cd:fd:e0:bd:78:06:6a:7c:8f:38:eb:1d:c6:
c4:91:39:bf:bb:12:52:c7:a9:4b:dd:07:41:27:aa:74:ae:29:
d0:40:15:e6:9f:4f:0b:6d:cf:08:d7:46:3a:31:63:44:3c:61:
11:ad:75:15:6d:7c:47:8c:70:09:2b:51:39:fd:5c:2f:d8:a8:
06:9b:2a:7c:7a:66:af:c0:22:04:e2:f5:f9:78:82:e5:5c:94:
fc:c9:73:11:d5:3e:5e:c9:d9:66:79:f3:bf:b2:0a:c5:a0:1a:
53:41:b8:f7:67:84:2d:04:03:97:58:60:2f:cc:06:37:c8:0c:
21:dc:e2:7b:90:6c:c4:d7:b0:e2:ae:e7:ee:93:d0:ea:02:fb:
2a:c8:9d:82:79:f8:55:66:30:fa:8c:73:20:1e:f5:70:a8:f9:
2d:a1:29:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYxREQxMTAvBgNVBAUTKDE1RDYwRDYwRDZBNEY1MDA5MTA5OUE3MkUwRDA1RUVG
M0VBRjc2RTkwHhcNMjYwNDE2MjMxOTAxWhcNMjYwNDIzMjMxOTAxWjAYMRYwFAYD
VQQDEw02OWUxNmU2Ni1iMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvD/IFhUhPzAc7ZbZuAroZEmeOq7yKSHtBm49G41sNkxt5ymoke2M+xipZd3N
wFazJeqdoWNuAnDFjITTzUzkCSkcrhAtStzktNsZg4qWJriAU020bvfKMaafqi8R
SxMew4tTKJ9E/qU6wmjKMS54yhcA7/1gGaWLYbJZE4TGafpabW0BiFZWJBtDayJP
9qlSyOjRFu1C5FzCbqUxCJ3egYVIfuX4cWdrhsyhIBBgTphCBidAyyLrPOrWERii
mQMCBzuPNcdiacUFcxadjtD22pTuKEsjYLOzitqJu5+xFDobL3YzQ+50BBITF0c9
SOtYTaOYGsgKkD2nZBEg+p+FCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6g64PK
TsNDx37g8N2o112sHUc5MB8GA1UdIwQYMBaAFBXWDWDWpPUAkQmacuDQXu8+r3bp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjFERC83Qzc4RTJCQzMw
OTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlRQ1JDWnB5NE5CZTd6NnZk
dWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZkWU5ZTmFrOVFDUkNacHk0TkJlN3o2dmR1ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjFERC83Qzc4RTJCQzMwOTMxMUVDQUI2ODQzM0ZDNEY5QUUwMi9GZFlOWU5hazlR
Q1JDWnB5NE5CZTd6NnZkdWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAib010EOl4PwsvZmcK/bdcRdys2mRUSRwNSGW4JcDYddvlPCryY42fykLwFIU
+d3/FNw5FVvl/Y9l9aHWUqH2B9rW8/70ZpzfL1dfaq/qpUYm9PyN9OT16I0UvMQR
eJHN/eC9eAZqfI846x3GxJE5v7sSUsepS90HQSeqdK4p0EAV5p9PC23PCNdGOjFj
RDxhEa11FW18R4xwCStROf1cL9ioBpsqfHpmr8AiBOL1+XiC5VyU/MlzEdU+XsnZ
Znnzv7IKxaAaU0G492eELQQDl1hgL8wGN8gMIdzie5BsxNew4q7n7pPQ6gL7Ksid
gnn4VWYw+oxzIB71cKj5LaEp2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:23 2026 by rpki-client