
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
File: fTg2zUKn77NatGSlAOJiVxXVzqM.mft (raw, json)
Hash identifier: i3IZ5PVgKt3/j3epo3Nae3/K0MC6xSzQ9HbA7tM+KWY=
Subject key identifier: C8:AF:4B:9E:95:AB:B7:11:FA:34:7B:58:2B:7F:B9:4E:9D:0F:36:6D
Authority key identifier: 7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
Certificate issuer: /CN=A91F8949/serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
Manifest number: 12
Signing time: Fri 17 Apr 2026 08:46:53 +0000
Manifest this update: Fri 17 Apr 2026 08:46:52 +0000
Manifest next update: Fri 24 Apr 2026 08:46:52 +0000
Files and hashes: 1: fTg2zUKn77NatGSlAOJiVxXVzqM.crl (hash: I3LHG2SfENARIvhZwFlSr9hLCDqz0XkBo65I1kyBD+s=)
2: 71A9485224D311F1BAC6A199AA833773.roa (hash: YplJkElj+wTMuvLaT6qEqUoRVs6FwFRdfKKxyCyC/nM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8949, serialNumber=7D3836CD42A7EFB35AB464A500E2625715D5CEA3
Validity
Not Before: Apr 17 08:46:52 2026 GMT
Not After : Apr 24 08:46:52 2026 GMT
Subject: CN=69e1f37d-bf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:af:b2:83:56:1d:19:68:c1:25:cc:4c:0b:
63:97:17:a8:59:26:0c:4f:51:0e:6b:77:5c:43:f9:
88:b5:c4:09:c4:1a:05:15:76:94:69:fc:4b:e3:82:
e5:0f:44:62:98:ca:14:8a:a0:76:c1:c2:2f:ac:a5:
58:58:86:b6:6f:37:6b:a5:d2:b1:ad:2a:cc:df:58:
ee:82:86:ca:b2:3c:0a:ca:bd:95:b4:6e:80:dc:a2:
f9:0b:af:52:f1:ca:5c:93:a7:5e:73:2c:7f:d8:2a:
1d:40:fd:ac:27:79:c5:23:e0:72:52:53:39:27:b9:
19:40:8f:6e:83:03:06:05:36:ad:73:4b:97:0b:4b:
2e:fc:e6:52:29:5b:c3:0d:79:33:ab:c7:7f:d4:41:
97:4e:f4:0a:ac:3a:6e:17:bb:b2:f4:c6:18:44:31:
1c:af:c6:63:7f:90:a5:2b:71:ed:e7:f6:9e:c4:9e:
c4:c9:27:f9:30:1c:09:dd:e8:f6:3a:cd:60:6a:48:
b3:d4:31:b1:40:1d:00:37:a1:be:84:38:17:e6:5c:
f0:01:57:2a:31:e9:92:c5:76:9d:74:7d:7f:f6:ee:
d8:5c:8c:30:c2:eb:d3:7f:85:22:1f:4a:1c:b8:06:
8a:4c:f0:bc:c9:b8:f6:76:4d:7f:6e:32:05:d4:6e:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:4B:9E:95:AB:B7:11:FA:34:7B:58:2B:7F:B9:4E:9D:0F:36:6D
X509v3 Authority Key Identifier:
keyid:7D:38:36:CD:42:A7:EF:B3:5A:B4:64:A5:00:E2:62:57:15:D5:CE:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fTg2zUKn77NatGSlAOJiVxXVzqM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8949/42C1298424D211F1A56C65E7A9833773/fTg2zUKn77NatGSlAOJiVxXVzqM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ba:cf:9b:92:68:9f:e7:e9:4a:97:47:ae:67:07:d5:98:78:
75:78:fa:10:af:b4:51:46:2e:b6:45:1b:62:2d:74:55:2d:45:
2d:95:18:7f:e8:65:5e:9c:c2:4a:63:00:35:1e:7a:39:02:21:
3b:66:59:e0:c3:56:be:0e:4d:f2:3a:c7:cf:33:c3:85:56:05:
38:ba:c8:56:a0:7a:42:d5:12:0f:21:a4:93:6b:11:10:05:31:
0f:8e:8c:24:c4:54:25:4e:10:4c:1e:df:35:74:f9:8b:6b:1d:
cc:5b:10:f6:a8:47:97:bb:34:53:7a:34:26:00:75:d7:f8:2d:
6a:79:1e:85:55:cd:a4:7b:db:61:e9:83:2e:84:09:f1:8e:11:
65:dc:cc:c4:e3:05:b6:ec:72:dc:b8:26:21:06:5f:f3:89:01:
25:0b:55:6c:40:cb:3a:94:90:3a:fb:6f:03:ab:21:d9:9d:c4:
ef:5f:8e:f5:f0:78:73:5c:a6:95:1f:5a:86:44:56:9c:49:a6:
c3:48:8b:59:94:b7:79:73:80:89:d9:8e:6d:53:aa:bb:ea:f9:
63:10:a5:0d:2b:bf:43:e3:fc:ed:72:20:6a:eb:60:dd:83:bb:
dc:cc:52:55:d0:32:00:9e:4b:10:fe:e2:a2:ca:3d:6a:71:6e:
60:45:7f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:53 2026 by rpki-client