
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
File: FzwmoIboW4_bkXqo2RHhwAq2o6E.mft (raw, json)
Hash identifier: vpsTMZdCqNCEqjyhqlF/5mq0E3rPQ10QH+f9InBkLp8=
Subject key identifier: 14:45:73:BC:5B:49:B1:30:C4:4C:23:1B:A8:37:C5:23:6D:0D:47:60
Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
Manifest number: C9
Signing time: Fri 17 Apr 2026 06:35:08 +0000
Manifest this update: Fri 17 Apr 2026 06:35:07 +0000
Manifest next update: Fri 24 Apr 2026 06:35:07 +0000
Files and hashes: 1: FzwmoIboW4_bkXqo2RHhwAq2o6E.crl (hash: QHQqQqrCCN9yQigbvR8UCjft7cR0Kg+/tejngmw591Y=)
2: 4776F9120CCE11F0A08AA749C4F9AE02.roa (hash: lzWcthtY3PcIvfMfNwdv6B2jmx18XmALZD2LUr/GF+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1
Validity
Not Before: Apr 17 06:35:07 2026 GMT
Not After : Apr 24 06:35:07 2026 GMT
Subject: CN=69e1d49c-e91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:d5:f4:31:6c:e1:da:b2:53:8d:54:52:34:
60:fb:b2:dd:01:e4:90:3a:c4:fc:49:9b:26:64:18:
5a:0b:60:d6:9b:35:7a:b6:0d:b1:fc:af:fb:18:6a:
be:7f:78:8c:15:64:66:4d:fb:18:ab:db:01:b4:b5:
3f:36:b5:ff:bf:a2:d0:3e:fa:42:3e:9d:de:47:b5:
2a:3c:52:5c:44:97:7b:e0:a6:83:c0:4a:2c:7a:f8:
23:ae:5b:a1:f6:1e:49:06:b5:9b:f9:bc:ae:16:d3:
2a:84:f9:e1:37:a7:5e:ee:88:4b:6d:e3:78:b5:46:
7f:a0:75:ec:ab:bc:87:dd:f8:3c:d4:ab:c0:e9:88:
51:25:fd:c4:2f:04:2f:5d:c4:9b:59:fd:68:81:7e:
1c:64:b0:dc:df:cb:89:f1:78:77:34:32:23:9d:ce:
f3:34:dd:75:29:4f:cc:ca:1f:2c:f9:49:7a:b5:59:
f4:7d:7f:76:71:7b:2e:91:b5:bf:49:28:d9:8f:ea:
7d:3a:dd:90:34:b6:a6:21:3e:20:e4:f5:5f:75:97:
97:5f:01:0a:a9:fa:bb:df:5a:34:b2:ed:ec:0c:62:
b3:b4:73:d0:bb:2e:b6:cb:ee:20:b1:41:7e:6e:75:
7b:7f:bf:8b:87:09:63:fc:c7:3a:e0:11:06:3f:12:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:73:BC:5B:49:B1:30:C4:4C:23:1B:A8:37:C5:23:6D:0D:47:60
X509v3 Authority Key Identifier:
keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:2f:c8:c6:9e:07:cc:1f:7d:bf:94:01:de:31:7c:19:ee:f3:
bc:1c:0e:3f:f8:ad:c4:d5:46:cc:88:b9:64:68:25:19:cd:b5:
55:2e:db:cf:7c:ae:c9:a3:63:19:6d:44:03:e1:d4:31:ae:cf:
3d:3c:5b:3b:f7:4c:72:9a:14:7d:78:22:47:0c:bb:66:6d:62:
8a:ec:10:06:dd:d1:e3:41:a9:c6:b8:3e:17:7c:bb:1e:36:9d:
a8:19:b1:28:ab:c0:1e:ad:07:d7:19:81:e2:d3:e3:ea:79:cc:
58:38:34:01:1a:27:b5:3c:01:88:31:ea:49:e5:e9:5b:16:5f:
4b:45:4a:3a:ad:da:25:49:79:b8:7e:37:1b:2b:9a:3d:c6:b7:
a1:8a:c1:28:a2:03:10:93:7a:d2:15:68:2b:f5:61:5f:18:21:
f3:42:63:d9:3e:cb:75:04:3e:ca:95:c6:3a:0d:49:fe:79:cb:
42:7c:02:db:2a:a1:13:8b:3f:b6:c7:71:c1:02:ac:0b:e8:ad:
5e:00:af:33:d6:b2:c7:67:11:8f:3f:cd:32:ea:b9:ba:44:9a:
f7:9a:02:3f:0f:17:6b:78:0a:87:22:26:2f:04:a3:50:cd:81:
c9:d6:f8:4b:2d:74:3c:c7:9c:0d:b5:6e:f6:99:08:09:95:b7:
71:b6:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:59:08 2026 by rpki-client